5 ms·

The certificate "Common Name" is: dns.cloudflare.com. There is a certificate extension - Certificate Subject Alternative Name that lists the following: DNS

• prdonahue 9y ago
  Most CAs ignore the subjectAltName extension when parsing CSRs (as it's a pain[1] for users to generate one properly). They just extract the public key, CN, and let you fill in SANs. 1 - Before Cloudflare I used to do this with OpenSSL and it requires half a dozen steps, but with cfssl you can do this quite easily: https://github.com/cloudflare/cfssl/wiki/Creating-a-new-CSR https://github.com/cloudflare/cfssl/wiki/Creating-a-new-CSR.
  • silverwind 9y ago
    You can generate SAN CSRs with a openssl one-liner, not that hard.
    • prdonahue 9y ago
      With a default install/config? Do tell.