Server Certificates shown under invalid issuer in WebGUI

Server Certificates shown under invalid issuer in WebGUI

375
Created On 07/04/24 09:03 AM - Last Modified 10/27/25 22:02 PM


Question


Some server certificate are shown under different CA which selected as an issuer when generating server certificate.

Environment


  • PAN-OS
  • There are multiple CA certificates which have same common name


Answer


This is an expected.
Certificates are managed with using hash value internally.
If there would be multiple CA certificates whose common name are the same, those certificates have same hash value.
To avoid this circumstance, users should use different common name for each CAs.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000scSVCAY&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail