How to Request a Certificate With a Custom Subject Alternative Name

Steps to Request a Certificate With a Custom SAN

 

Google Chrome does not trust SSL certificates issued by ADCS on Windows 2012 R2, complaining that Subject Alternative Name is missing.

The link below shows how to request a certificate with a custom SAN.

 https://technet.microsoft.com/en-us/library/ff625722(v=ws.10).aspx

1. Refer to the section “Using the Certificate Enrollment wizard with a standalone CA” in the link above.

2. Run the command below to submit the CSR.

certreq -submit -attrib "CertificateTemplate:WebServer" path\file.req

3. Save the response file and complete the certificate request in IIS Manager.