[PYTHON-CRYPTO] Need server certificates that include multiple commonName/subjectAltName fields for testing

[Conrad Steenberg]

Hi

Coming in a little late on the conversation, but Heikki is right, DNs
with multiple CN fields are commonly used for proxy (usually
short-lived) certificates.

See e.g. the attached partial certificate chain.

Cheers

Conrad

On Thu, 2006-03-23 at 14:26 -0800, Heikki Toivonen wrote:
> Michael Ströder wrote:
> > Heikki Toivonen wrote:
> >> Exactly. If someone knows of such real world usage I want to see it and
> >> test against it.
> > 
> > I can't imagine a use-case for it.
> 
> Well, there are cases where additional CN fields should be specified for
> proxy certs for example (but it probably wouldn't be a hostname).
> 
> Perhaps more common case is that instead of a wildcard cert you would
> specify a limited number of hosts an SSL server cert could be deployed at.
> 
> > http://csrc.nist.gov/pki/testing/
> 
> Cool, thanks!
> 
-- 
Conrad Steenberg <conrad at hep.caltech.edu> 
California Institute of Technology | http://conradsteenberg.info
-------------- next part --------------
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2531 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/python-crypto/attachments/20060328/72d75bcf/attachment.bin>