Could not add "subject alternate name" while generating CSR in CUCM . Incorrect Domain error.

[navshriv]

In 8.6 version, it was possible to add "CUCMPUB" in "subject alternate name" while generating CSR. In CUCM 11, it seems that it will only take inputs in FQDN format.

This is causing issue while people browse CUCM using ... only hostname , It shows certificate as untrusted.

When people use FQDN like: CUCMPUB.Server.com , the certificate is trusted.

How can we make https://CUCMPUB/ URL as trusted URL while browsing from PC... . In 8.6 , it was resolved by providing "CUCMPUB" in "subject alternate name" while generating CSR.

[Manish Gogna]

Hi Naveen,

If you are using multiserver certs then this could be the issue

Table 3 Certificates and SAN Entries

Certificate	SAN Entries
	CSR (Single-Server)	CSR (Multiserver)
Tomcat	FQDN (or hostname) Network domain (if configured)	FQDN of all Unified Communications Manager and IM and Presence Service servers in the cluster Network domains (if configured) Custom values
CallManager	FQDN (or hostname) Network domain (if configured)	FQDN of all Unified Communications Manager servers in the cluster Network domains (if configured) Custom values

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/10_5_1/CUCM_BK_CE15D2A0_00_cucm-release-notes-1051/CUCM_BK_CE15D2A0_00_cucm-release-notes-1051_chapter_01.html

Manish