Mac keychain access add alternative names to certificate

TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID.DNS names in the CommonName of a certificate are no longer trusted.ДЄdditionally, all TLS server certificates issued after J(as indicated in the NotBefore field of the certificate) must follow these guidelines: Select the correct keychain in the Keychains list. Figure 17 Selecting the certificate authority root certificate. In Keychain Access, select the certificate authority's root certificate, as shown by Figure 17. TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. In Finder, choose Go > Utilities, then find Keychain Access and launch it.SHA-1 signed certificates are no longer trusted for TLS. TLS server certificates and issuing CAs must use a hash algorithm from the SHA-2 family in the signature algorithm.Certificates using RSA key sizes smaller than 2048 bits are no longer trusted for TLS. TLS server certificates and issuing CAs using RSA keys must use key sizes greater than or equal to 2048 bits.

# Requirements for trusted certificates in iOS 13 and macOS 10.15ДЄll TLS server certificates must comply with these new security requirements in iOS 13 and macOS 10.15: the validity period) which might explain why the certificate is not declared valid on macOS/iOS, although technically it is correct.

Mac keychain access add alternative names to certificate