How to update the distinguished name (CN, O, OU, L, S, and C entries) of a certificate through a Certificate Signing Request (CSR)

Products

• Network Observability
• Spectrum
• Virtual Network Assurance
• CA Performance Management
• Network Flow Analysis
• CA Mediation Manager

Issue/Introduction

I need to update my certificate but also need to change the O (organization) item

Environment

All supported releases

Resolution

To change the entries from the existing certificate, you would need to add the following switch to the keytool -certreq command:

-dname "CN=hostname, OU=PerformanceCenter, O=PerformanceManagement, L=CityName, S=NY, C=US"

Either enter the same entries as already exist or add a new entry for the ones you want to overwrite.

Additional Information

To list the existing DNAME:

<pathTo>/keytool -list -keystore <pathTo>/keystore  -alias <alias> -v | grep  "Owner"

You may see multiple Owners, the first one contains the DN of the certificate for use in the resolution above.
Change fields as noted.