Hi, I need to add the following in the certificate request.
id-ce-subjectAltName OBJECT IDENTIFIER ::= { id-ce 17 } subjectAltName = GeneralNames otherName [0] OtherName OtherName ::= Sequence { Id-on-hardwareModuleName OBJECT IDENTIFIER ::= iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) on(8) 4 HardwareModuleName ::= SEQUENCE { hwType OBJECT IDENTIFIER hwSerialNum OCTET STRING } } I able to generate the certificate required using openSSl cmd line with conf where following was added in config file [ v3_req ] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment *subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hmodname* *[hmodname]* *hwType = OID:1.3.6.1.4.1.47196.6.3.2.2* *hwSerialNum = FORMAT:HEX,OCT:01020304 * I need to do add subject alt name in certificate request using openSSL API.( not using config file) I have tried to use GENERAL_NAME_set0_othername , but I am not able to add an inner sequence. Can someone suggest how we can add this using OpenSSL APIs Regards Manish