Problem Definition

Chrome 58 and later release requires subjectAlternativeName (SAN) extension as per https://developers.google.com/web/updates/2017/03/chrome-58-deprecations#remove_support_for_commonname_matching_in_certificates

Please see related links on the changes

• https://www.thesslstore.com/blog/security-changes-in-chrome-58/
• https://communities.ca.com/thread/241776307

Suggested Solution

Update the documentation at https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html to share steps on

• How to generate certificate with subjectAlternativeName extension using Keystore Explorer
  • Portecle doesn't seem to support adding subjectAlternativeName on creation
• How to generate certificate with subjectAlternativeName extension via Command line
  • Reference; http://stackoverflow.com/questions/33827789/self-signed-certificate-dnsname-components-must-begin-with-a-letter

Why this is important

Chrome will throw an error on certificate generated without subjectAlternativeName extension. Other browsers will soon follow