On Sun, 18 Sept 2022 at 12:53, Goetz Schultz <dovecot.expire1...@suelze.de> wrote: > > > On 18/09/2022 11:09, Stuart Henderson wrote: > > On 2022-09-14, Goetz Schultz <dovecot.expire1...@suelze.de> wrote: > >> I had the same issue on TB102. Self-Signed certificates rejected despite > >> having the CA installed correctly as authority. Turns out out that that > >> TB now wants extension "Subject Alt Names". Added that and all works > >> now. Seems another Google pressed issue being introduced (my Chromium > >> had same issues and rejected certs before I added SAN). > > > > It's not just a "Google pressed issue". > > Seems I was a hasty in blaming ..... >
Not necessarily... The CA Browser Forum ad[a|o]pted this partly because Google started showing visible warnings in the Chrome Browser when the CN was not replicated in the SAN field. Regards Simon
