Subject Alternative Name (SAN) in certificates not showing when using third party web site to decode the CSR

Products

• VMware SDDC Manager

Issue/Introduction

Subject Alternative Name (SAN) in certificates not showing when using third party web site to decode the CSR

Environment

VCF 9.x

Resolution

Run following command to verify Subject Alternative Name (SAN) in the CSR: openssl req -in your_csr_file.csr -text -noout

Example:
openssl req -in test.csr -text -noout
Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: CN = xxxxx.xxxxx.xxxx, OU = xxxxxxxxx Inc., O = xxxxxxxxx Inc., L = xxxxxxxxx, ST = XX, C = XX
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:
                    ...
                    XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX
                Exponent: 65537 (0x10001)
        Attributes:
            Requested Extensions:
                X509v3 Subject Alternative Name:
                    DNS:xxxxx.xxxxx.xxxx