Personal Certificates Requirements
- Last UpdatedOct 30, 2025
- 1 minute read
If you are using certificates from a system administrator, an IT department, or a certified third-party vendor to enable encryption, the personal certificate provided to you needs to meet the following requirements.
|
Field |
Value |
Comment |
|
Key Usage |
Digital Signature, Key Encipherment, Data Encipherment (b0) |
Required. |
|
Enhanced Key Usage |
Server Authentication (1.3.6.1.5.5.7.3.1) |
Required. |
|
Subject Alternative Name |
DNS Name=localhost |
Optional. Only required when your client accesses your web applications via localhost. |
|
DNS Name=[machine name] |
Required. Used by your client to access web applications via the machine name. For example: DNS Name=mymachineName |
|
|
DNS Name=[fully qualified domain name] |
The framework uses the FQDN as the endpoint identity to authenticate the web service. This item needs to be the last entry in the SAN list due to a known Microsoft .Net Framework issue. For example: DNS Name=mymachine.mydomain.com |
|
|
Friendly name |
A friendly display name |
Required. Configurator displays the friendly name in the certificate drop-down list. |