user2724058
user2724058

Reputation: 338

Open SSL generate x509 self signed certificate with Friendly Name

I am creating self signed certificate using following command.

req -x509 -sha256 -nodes -days 1825 -newkey rsa:2048 -keyout my_key.key -out my_cert.crt -addext "subjectAltName = DNS: FQDN of Machine"

The certificate is created successfully. I want to add the Friendly Name for the certificate as well how can I do this?

Upvotes: 7

Views: 8585

Answers (1)

Crypt32
Crypt32

Reputation: 13944

Friendly Name is not part of certificate. You need to export your certificate to PFX:

openssl pkcs12 -export -in my_cert.crt -inkey my_key.key -name "My Friendly Name" -out my_cert.pfx

You can't have friendly name outside of PKCS#12 container or Microsoft X.509 store.

Upvotes: 6

Related Questions