Score:0

What infos should I change in getting cert for https?

cn flag

I am going to get cert to enable https in ubuntu nginx server using following command.

sudo openssl req -x509 -nodes -newkey rsa:2048 
    -config /etc/ssl/openssl.cnf -extensions subject_alt_name 
    -keyout private.key -out self_signed.pem -subj '/C=NG/ST=Lagos/L=Victoria_Island/
O=Your_Organization/OU=Your_department/
CN=www.yourdomain.com/[email protected]' -days 365

Your_domain, Your_organization, I am clear.

But I am not sure what is below options. They don't say yourSomething.

C=NG
ST=Lagos
L=Victoria_Island

So should I change above infos or Can I just use them without any problem?

And can I use -days 3650 instead of -days 365?

And for CN=www.yourdomain.com, if my domain is https://developer.mozilla.org/, should I use CN=www.developer.mozilla.org or CN=developer.mozilla.org?

muru avatar
us flag
From the values they look like Country/State/Locality. Ask your certificate provider if they're OK with 3650 days.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.