How to get the Distinguished Names (DNs) in the certificate?

[rajesh1084]

Tried to embed the DNs in the subject something like -

export DN="C=AU,ST=Victoria,L=Melbourne,O=Digicert,OU=Sales,CN=www.knowledge.com"
step certificate create $DN test.crt test.key

Also tried providing the details using the flag --set key=value -

step certificate create ... \
 --set countryName=AU \
 --set stateOrProvinceName=Victoria \
 --set localityName=Melbourne \
...

However, I don't see this information while inspecting the received certificate. Any pointers?

[hslatman]

Hey @rajesh1084, you will need to configure a template to accomplish this. A user with a similar use case asked their question here.

If the organizational information in your DN is static and the same for each certificate, you can configure it on the authority level. Otherwise, you can do so on the provisioner level. It's also possible to make the user provided values, but you'll need to change the default template to do so.

Our documentation about templates can be found here.

[maraino]

These values can be set up in two different ways:

1. At the provisioner level in a template. They can be fixed values, they can come from the user like --set foo=bar, or they can come from a webhook. Like the first comment in Custom certificate subjects #662 (comment)
2. At the authority level, all provisioners will use these values unless they are overwritten at the provisioner level. Like the second comment Custom certificate subjects #662 (reply in thread)