Last Modified: Oct 06, 2020
See more info
Known Affected Versions:
15.1.0, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 16.0.0, 188.8.131.52
Opened: Jul 08, 2020
When using the Certificate Order Manager to request new Multi-Domain certificate from the Sectigo Certificate Authority (CA), the request the BIG-IP sends is missing the field 'subjectAltName'.
The BIG-IP system sends a request to the Sectigo CA that is missing the 'subjectAltName' field. That makes Certificate Order Manager not suitable for requesting Multi-Domain certificates.
-- Certificate Order Manager is configured to send requests to the Comodo/Sectigo CA. -- Configure a new key with Subject Alternative Name (SAN).
There is no workaround other than not using Certificate Order Manager for Multi-Domain certificates.