Open SSL generate x509 self signed certificate with Friendly Name

Viewed 1797

I am creating self signed certificate using following command.

req -x509 -sha256 -nodes -days 1825 -newkey rsa:2048 -keyout my_key.key -out my_cert.crt -addext "subjectAltName = DNS: FQDN of Machine"

The certificate is created successfully. I want to add the Friendly Name for the certificate as well how can I do this?

regards IK

1 Answers

Friendly Name is not part of certificate. You need to export your certificate to PFX:

openssl pkcs12 -export -in my_cert.crt -inkey my_key.key -name "My Friendly Name" -out my_cert.pfx

You can't have friendly name outside of PKCS#12 container or Microsoft X.509 store.

Related