What is the typical naming convention when setting up the name field within
Certificate Authority? I have read a couple articles that inticate the name
should be the same as the company's web site name. ??? I am not sure if
that is what I want to do. Is it a logical call that CA uses? HELP!!!

Re: Certificate Authority Settings by S

S
Wed May 23 04:20:54 CDT 2007

I assume your question is about Web server SSL certificates. The name field
(certificate subject) should match fully-qualified domain name of the
server, as it is used by the users. I'll give you and example - go to the
following two Web sites:

https://www.verisign.com
https://verisign.com

Both are one and the same, serving same content from the same servers. The
difference is that you'll get a certificate warning accessing the latter,
because the certificate is for www.verisign.com

Similar principle applies to other certificate types

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"sihfmis" <sihfmis@discussions.microsoft.com> wrote in message
news:8FAECF9A-8D5E-42A9-95EA-E29A238E554C@microsoft.com...
> What is the typical naming convention when setting up the name field
> within
> Certificate Authority? I have read a couple articles that inticate the
> name
> should be the same as the company's web site name. ??? I am not sure if
> that is what I want to do. Is it a logical call that CA uses? HELP!!!



Re: Certificate Authority Settings by sihfmis

sihfmis
Wed May 23 08:20:01 CDT 2007

Okay, just to make sure I am on the same page as you, let me give a brief
explanation of what I am doing. I am configuring my Exchange server to use
OWA with certificate verification. Do I still give the name field the
fully-qualified domain name or can I give it whatever?

"S. Pidgorny <MVP>" wrote:

> I assume your question is about Web server SSL certificates. The name field
> (certificate subject) should match fully-qualified domain name of the
> server, as it is used by the users. I'll give you and example - go to the
> following two Web sites:
>
> https://www.verisign.com
> https://verisign.com
>
> Both are one and the same, serving same content from the same servers. The
> difference is that you'll get a certificate warning accessing the latter,
> because the certificate is for www.verisign.com
>
> Similar principle applies to other certificate types
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> "sihfmis" <sihfmis@discussions.microsoft.com> wrote in message
> news:8FAECF9A-8D5E-42A9-95EA-E29A238E554C@microsoft.com...
> > What is the typical naming convention when setting up the name field
> > within
> > Certificate Authority? I have read a couple articles that inticate the
> > name
> > should be the same as the company's web site name. ??? I am not sure if
> > that is what I want to do. Is it a logical call that CA uses? HELP!!!
>
>
>

Re: Certificate Authority Settings by Brian

Brian
Wed May 23 18:18:20 CDT 2007

On Wed, 23 May 2007 06:20:01 -0700, sihfmis wrote:

> Okay, just to make sure I am on the same page as you, let me give a brief
> explanation of what I am doing. I am configuring my Exchange server to use
> OWA with certificate verification. Do I still give the name field the
> fully-qualified domain name or can I give it whatever?
>
> "S. Pidgorny <MVP>" wrote:
>
>> I assume your question is about Web server SSL certificates. The name field
>> (certificate subject) should match fully-qualified domain name of the
>> server, as it is used by the users. I'll give you and example - go to the
>> following two Web sites:
>>
>> https://www.verisign.com
>> https://verisign.com
>>
>> Both are one and the same, serving same content from the same servers. The
>> difference is that you'll get a certificate warning accessing the latter,
>> because the certificate is for www.verisign.com
>>
>> Similar principle applies to other certificate types
>>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>> "sihfmis" <sihfmis@discussions.microsoft.com> wrote in message
>> news:8FAECF9A-8D5E-42A9-95EA-E29A238E554C@microsoft.com...
>>> What is the typical naming convention when setting up the name field
>>> within
>>> Certificate Authority? I have read a couple articles that inticate the
>>> name
>>> should be the same as the company's web site name. ??? I am not sure if
>>> that is what I want to do. Is it a logical call that CA uses? HELP!!!
>>
>>
>>

If you want errors when you connect, just type in whatever you want. If you
want no errors, then make the subject = the DNS name that users will type
to connect to the OWA sight <G>
Brian