[GH-ISSUE #204] How to customize CN? #131

New issue

Closed

opened 2026-02-25 22:32:41 +03:00 by kerem · 3 comments

kerem commented

2026-02-25 22:32:41 +03:00

Owner

Originally created by @ddnexus on GitHub (Oct 8, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/204

I need a certificate with a specific Common Name. I didn't find any doc about that. Is it possible to customize? Thanks.

Originally created by @ddnexus on GitHub (Oct 8, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/204 I need a certificate with a specific Common Name. I didn't find any doc about that. Is it possible to customize? Thanks.

kerem closed this issue

2026-02-25 22:32:41 +03:00

kerem commented

2026-02-25 22:32:41 +03:00

Author

Owner

@FiloSottile commented on GitHub (Nov 9, 2019):

We don't support this, you can see some of the reasons at #205

@FiloSottile commented on GitHub (Nov 9, 2019): We don't support this, you can see some of the reasons at #205

kerem commented

2026-02-25 22:32:41 +03:00

Author

Owner

@ddnexus commented on GitHub (Nov 10, 2019):

Thanks for your answer.

We understood that trying to use mkcert for our particular case was not a good idea for quite a few reasons.

We opt for a quite simple custom script that automates the creation of the CA root + a star-domain certificate and their addition to proxy server, java-truststore, FF trustore, etc.

@ddnexus commented on GitHub (Nov 10, 2019): Thanks for your answer. We understood that trying to use mkcert for our particular case was not a good idea for quite a few reasons. We opt for a quite simple custom script that automates the creation of the CA root + a star-domain certificate and their addition to proxy server, java-truststore, FF trustore, etc.

kerem commented

2026-02-25 22:32:41 +03:00

Author

Owner

@DoraTheExploder commented on GitHub (Aug 7, 2025):

I've discovered that if you use an external tool to generate a Certificate Signing Request (.csr) such as DigiCert CSR Tool (or do it manually with openssl), you can customize the relevant fields and then pass it as a sort of configuration file to mkcert with $ mkcert -csr <domain>.

I have not tested using a CSR for initial Root CA installation, but $ mkcert --help implies that it should be possible.

@DoraTheExploder commented on GitHub (Aug 7, 2025): I've discovered that if you use an external tool to generate a Certificate Signing Request (.csr) such as [DigiCert CSR Tool](https://www.digicert.com/easy-csr/openssl.htm) (or do it manually with openssl), you can customize the relevant fields and then pass it as a sort of configuration file to mkcert with `$ mkcert -csr <domain>`. I have not tested using a CSR for initial Root CA installation, but `$ mkcert --help` implies that it should be possible.