The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Certs invalid on Chrome 58 due to CN Deprecation

David | Last updated: Mar 22, 2017 04:23PM UTC

TL;DR: Chrome 58 only looks at the SAN in a cert for validating hostnames and not the CN. Please add a SAN for the hostname when generating the cert. In 2000, RFC 2818 (https://tools.ietf.org/html/rfc2818) "deprecated" checking CN in favor of using SAN. 17 years later, browsers are actually doing so, with Chrome 58 and Firefox 48: https://www.chromestatus.com/features/4981025180483584 (Apparently this has been supported by both the RFC mentioned and the CAB Forum guidelines.)

PortSwigger Agent | Last updated: Mar 22, 2017 05:00PM UTC