<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Do your certificates contain a Subject Alternate Name (SAN)? Are you trying to access the servers using a name that is one of the alternate names? If an alternate name exists in the certificate the browser will only display the page as trusted if you are accessing one of the alternate names (RFC3280 - section 4.2.1.7), the common and or subject name is ignored. There’s a bug for CUCM not copying the common name (CN) or subject name of the certificate into the SAN field automatically which may be causing your problem (CSCus47235).</div><div><br></div><div>If you don’t have alternate names, the next most common issue I’ve seen is that different browsers use different certificate stores (locations) for looking up if the root/intermediate certificates are trusted. The root/intermediate has to be added to the correct certificate store in that case (browser local cert store, or operating system cert store).</div><div><br></div><div>Joe </div><div><br></div><br><div><div>On May 20, 2015, at 1:31 PM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com">MLoraditch@heliontechnologies.com</a>> wrote:</div><br class="Apple-interchange-newline"><div>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1"><p class="MsoNormal">Has anyone ever seen where you put a cert on CUCM/CUCXN/IM&P and the Subject name matches but your browser insists it doesn’t? I can’t figure this out. I checked as best I could for spaces like mentioned in Lelio’s recent thread about a
CSR and I have no indication of that.<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">I honestly don’t have a clue where to go, it’s not really a server issue as the server is just presenting the cert I installed, but I have it on both UCxn and CCM/IM&P. I can’t believe I put an errant space on both servers…<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt">Matthew G. Loraditch – CCNP-Voice, CCNA-R&S, CCDA<br>
Network Engineer<br>
Direct Voice: 443.541.1518</span><br>
<br>
<o:p></o:p></p><p class="MsoNormal"><a href="https://www.facebook.com/heliontech?ref=hl"><span style="font-size:8.0pt;color:blue">Facebook</span></a><span style="font-size:8.0pt"> |
</span><a href="https://twitter.com/HelionTech"><span style="font-size:8.0pt;color:blue">Twitter</span></a><span style="font-size:8.0pt"> |
</span><a href="https://www.linkedin.com/company/helion-technologies?trk=top_nav_home"><span style="font-size:8.0pt;color:blue">LinkedIn</span></a><span style="font-size:8.0pt"> |
</span><a href="https://plus.google.com/+Heliontechnologies/posts"><span style="font-size:8.0pt;color:blue">G+</span></a><o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>https://puck.nether.net/mailman/listinfo/cisco-voip<br></div></div><br></body></html>