Subject missing in the Certificate Fileds

Help
1

Recently renewed certificate for custom domain no longer contains Subject in the Certificate Fields. Certificate Subject Alternative Name is present .

Is this expected ? is this a new implementation / move to no longer updating this section .
I currently see <Not part of certificate>

My domain is: ost3.asfg.online

I ran this command: Certificate is Valid - Details - Subject

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

The Common Name is not included for certificates issued using the tlsserver or shortlived profiles. Your cert has a 90-day life so I'd guess you used tlsserver.

The tlsserver profile also now uses the new "Y generation" hierarchy which your latest cert has. See: Upcoming Changes to Let’s Encrypt Certificates

Did you knowingly request the profile tlsserver? See: Profiles - Let's Encrypt

4 Likes
3

I looked at your cert history and see you renew your cert about every 30 days. That's more frequent than recommended. Let's Encrypt recommends renewing using ARI (ACME Renewal Information) which takes care of that (and more). But, if your ACME Client doesn't support that to renew after 2/3 of the cert life has passed (1/2 of life for the 6 day shortlived certs).

Seeing this kind of pattern is usually an indication something is setup wrong. If you describe your ACME Client and its setup we can give some advice.

4 Likes
4

the field Common Name is also is marked as deprecated in RFC 2818, published in May 2000 (yes nearly 26 years ago)

6 Likes