IP Addresses on Subject Alternative Name are not retrived from CSR on Service Catalog "Request New Certificate (Automated)" - Support and Troubleshooting

IP Addresses on Subject Alternative Name are not retrived from CSR on Service Catalog "Request New Certificate (Automated)" Issue .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } When CSR have below format in Subject Alternative Name(SAN), Service Catalog "Request New Certificate (Automated)" doesn't retrieve ip address value on SAN field.

IP Address:XX.XXX.XX.XXX, IP Address:XX.XXX.XX.XXX

- OpenSSL

% openssl req -noout -text -in kb.csr

Certificate Request:

Data:

Version: 1 (0x0)

Subject: C=US, ST=California, O=ServiceNow, CN=test.example.com

Subject Public Key Info:

Public Key Algorithm: rsaEncryption

Public-Key: (2048 bit)

Modulus:

00:ae:11:f5:4b:f9:5d:c2:14:44:ec:be:0b:a3:33:

ce:40:30:0a:ac:1f:00:44:05:e1:99:85:1b:b9:4e:

4f:04:ec:f2:de:b1:e0:47:f1:32:11:7d:85:42:3a:

60:95:c5:55:d4:e7:33:ae:d3:56:8f:66:9b:0a:cc:

47:68:1c:61:7c:65:50:8c:5a:9f:f2:a8:17:d8:93:

a3:f1:51:79:5e:34:f0:1f:16:cc:13:d3:a8:73:d8:

31:a6:c4:16:0f:d9:c8:e5:34:47:74:e1:f5:ac:cf:

5b:59:91:2f:74:5c:8e:b1:35:c4:1b:96:6d:50:ae:

94:4e:87:6e:19:b1:c2:6e:87:a8:63:40:54:19:ad:

11:8a:b5:94:64:41:11:02:b1:4d:13:32:b4:1d:ef:

b8:70:6d:a9:4f:02:15:4a:86:86:75:86:3c:82:a5:

da:17:c2:98:8d:88:a2:57:f0:5a:6b:2a:c7:f8:2c:

01:dc:4e:b6:65:bc:7a:c7:a4:53:41:8a:e5:27:62:

93:ae:c0:bf:a1:a7:4f:86:65:3f:df:5b:e4:8e:85:

8f:7c:e2:89:db:d6:74:ac:28:8b:34:10:95:81:80:

0a:bc:29:c6:e2:3e:d3:d2:55:04:44:9a:79:de:14:

ed:52:f5:27:c3:55:8c:b7:02:90:66:20:77:c2:3f:

73:29

Exponent: 65537 (0x10001)

Attributes:

Requested Extensions:

X509v3 Subject Alternative Name:

IP Address:192.168.1.1, IP Address:192.168.1.2

Signature Algorithm: sha256WithRSAEncryption

Signature Value:

97:31:d5:98:21:bc:43:a7:d8:27:72:99:20:77:a6:8b:48:21:

6c:47:99:cc:20:fa:18:b5:fe:d9:b4:f4:23:da:6b:82:8b:e0:

6f:48:b4:e3:b0:b4:8d:50:76:1e:69:83:91:a5:cc:0c:1e:ed:

fe:59:8e:c4:ac:07:6d:2d:a7:af:06:ca:02:73:b5:ab:22:28:

be:5a:2b:c0:74:37:37:e5:7b:aa:d7:72:0f:4d:bf:01:4e:ba:

3a:47:03:5d:11:d2:69:56:36:ed:7a:2b:65:f3:26:bb:41:76:

12:87:69:b9:24:06:21:14:0e:f0:ea:b4:14:aa:78:5c:ef:d5:

8a:79:52:4e:c1:de:f4:e9:19:35:51:f7:83:7c:6b:df:8b:74:

1b:21:8e:9f:1d:d4:0e:3d:44:f8:b6:39:c7:b4:72:37:50:dc:

74:5b:9e:a7:be:3c:0c:6e:94:19:93:e1:65:87:22:9a:cc:37:

80:4f:ca:40:15:8f:09:ba:04:6a:f6:e6:c3:6d:c0:9c:45:7e:

04:6f:a7:83:c1:61:9c:64:47:ad:99:9b:b1:c2:7e:e2:99:c1:

18:c5:dc:19:cb:70:83:22:0d:04:f9:ad:24:3c:56:41:f8:c3:

b0:44:1d:0a:6f:60:6a:16:32:df:2a:df:0c:1b:64:5b:86:ea:

21:52:c0:58

- Service Catalog screenshot

Release .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All

Resolution .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } If SAN contains only a value in the format "IP Address: " , the loading of that field will fail.

As a workaround, please use one of the following options:

Add the Common Name (CN) first in the format "DNS: " . Example: DNS: test.example.com, IP Address: 192.168.1.1, IP Address: 192.168.1.2

Configure the IP address in the format "DNS: " . Example a: DNS: 192.168.1.1, DNS: 192.168.1.2 Example b: DNS: 192.168.1.1, 192.168.1.2