The Subject name type "title" does not show or desappeared on my issued certificate

Question

Hello there guy, hope you are doing well,

This time i have a PKI with a stand alone CA, i need your help with the certsrv, trying to build a custom request where i put some types of subject names (including "title"), for example:

cn=name and last name

o=organization name

c=country

t=software ingenieer

there is the thing, when im finish to build that custom request and save it with extension .req, then i go throug certsrv to "submit new request", in the "Pending Requests" i can see the binary data where is showing all the subject names correctly, but once i issue the certificate theres no title line (t=software ingenieer) in the subject name field, just desappear.

Answer 1

Hi,

I'd be happy to help you out with your question. Sorry for the inconvenience caused.

Firstly, it's important to note that the inclusion of the "title" field in the certificate subject name is dependent on the certificate policy of the Certificate Authority (CA). The CA may choose to omit this field from the certificate for security reasons or based on their certificate policy.

I recommend contacting the administrator of your CA to inquire about their certificate policy regarding the inclusion of the "title" field in the certificate subject name. They may be able to provide you with more information or guidance on how to include the "title" field in your certificate subject name.

Alternatively, you can also try adding the "title" field as an additional attribute in the certificate request using the Microsoft Certificate Request Processor (Certreq.exe) command-line tool. Here's how to add the "title" attribute:

Open a Command Prompt window and navigate to the directory where your certificate request file (.req) is saved.

Type the following command, replacing "Software Engineer" with the desired title:

certreq -submit -attrib "Title=Software Engineer" <your_request_file.req>

This will add the "Title" attribute to the subject name of the certificate request. However, please note that the CA may still choose to exclude the "title" field from the final certificate.

For more Information, please refer to following resource :-

Plan for PKI certificates in Configuration Manager - https://learn.microsoft.com/mem/configmgr/core/plan-design/security/plan-for-certificates

If you have any other questions or need assistance with anything, please don't hesitate to let me know. I'm here to help.

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.