Camelot wrote:
$strAttribute = $strAttribute.Substring(0,$strAttribute.Length - 2)
has to be replaced by
$strAttribute = $strAttribute.Substring(0,$strAttribute.Length - 1) otherwise the last character from the domain name was cut away.
We now can submit the san attribute with the request and we see the value in the downloaded Request-Object BUT the SANS do not appear in the final certificate.
Could it be the case that we have to use another name than "san" in the -attribute Parameter for it e.g. "SubjectAlternateNames:....."?
Ok, let's try this approach. Open Submit-CertificateRequest.ps1 file and find the following lines:I feel we come closer to the solution. I adapted the line according your instruction and noticed that additionally the lineand replace "\n" with "`n", so the resulted expression will be:foreach ($attrib in $Attribute) { [Void]$SB.Append($attrib + "\n") }
and let me know if it works. I smell a bug here.foreach ($attrib in $Attribute) { [Void]$SB.Append($attrib + "`n") }
$strAttribute = $strAttribute.Substring(0,$strAttribute.Length - 2)
has to be replaced by
$strAttribute = $strAttribute.Substring(0,$strAttribute.Length - 1) otherwise the last character from the domain name was cut away.
We now can submit the san attribute with the request and we see the value in the downloaded Request-Object BUT the SANS do not appear in the final certificate.
Could it be the case that we have to use another name than "san" in the -attribute Parameter for it e.g. "SubjectAlternateNames:....."?