>
> [Extensions]
> 2.5.29.17 = "dns=ad.winauth.mydomain.net&"
> _continue_ = "dn=CN=AD,OU=Domain Controllers,DC=winauth,DC=mydomain,DC=net&"
> _continue_ = "ipaddress=192.168.1.1&"
>

I got it! Essentially, I didn't follow the instructions. Note the missing "{text}" above! I thought the author was giving an example so excluded it. After a night's sleep, I checked my erroneous assumption.

[Extensions]
2.5.29.17 = "{text}"
_continue_ = "dns=ad.winauth.mydomain.net&"
_continue_ = "dn=CN=AD,OU=Domain Controllers,DC=winauth,DC=maydomain,DC=net&"
_continue_ = "ipaddress=192.168.1.1&"

Thank you for your help Fraser.

I reviewed the suggested log, thank you, which clearly showed DogTag complaining about something being provided in the CSR. I couldn't interpret exactly what was the problem but I removed the one thing I had never done before, the [Extensions] stanza with the SAN.

I successfully submitted!

What is the correct method to provide a 'Subject Alternative Name" in a CSR to DogTag? Or am I going about this all wrong? I was intending to provide FQDN, IP address, and DN in the SAN.

Thank you,

Richard