vcs certificate field length

[gfolens]

When creating a CSR the fields such as O, OU, etc are limited in length.

For a specific customer we no have to enter a text string in the O (organisation) field which is longer than the allowed length.

Can we submit the CSR without the complete text string? The PKI will then provide a cert with the full text string in the O-field.

Will this be a problem to upload the cert on the VCS? Will it accept the length of the O-field?

rgds, Geert.
 

[Martin Koch · Accepted solution]

I assume you use the wizzard on the web page of the VCS?

Two views on that:

* do you really need such long information in these fields?

* the wizzard is only a help and might have its limitations, but you are not bound to it,

you could also use like openssl.

Check out the certificate guide:

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/config_guide/X8-1/Cisco-VCS-Certificate-Creation-and-Use-Deployment-Guide-X8-1.pdf

[gfolens]

yes, I know openssl can be used.

I was just wondering if there will be a problem if the returned Organization field from the CA is different than the one generated on the VCS with CSR.

rgds, Geert.