My ACME certificates generated by step-ca don't have a "subject" but they have SANs. Unfortunately, OpenVPN seens to require a subject to work.

#openvpn #stepca #tls #acme

@jriou Is that really because of step-ca? The ACME client is the one that generates the CSR and includes the subject in it right?

@e_nomem I'm using certbot with the `-d` switch.

On my VPS, I'm using the same version for Let's Encrypt and my own CA. The ones generated by Let's Encrypt have the correct subject, the one for my own CA doesn't.

subject CN is no longer set · Issue #6463 · certbot/certbot

If you're having trouble using Certbot and aren't sure you've found a bug or request for a new feature, please first try asking for help at https://community.letsencrypt.org/. There is a much large...

GitHub