Arabic Organization Name in .cnf file for CSR

Onboarding, renewal and revocation
1

We are getting below error when we using Organization Name in Arabic language to generate CSR for Production Onboarding.
problems making Certificate Request
1:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:158:maxsize=64
error in req
OpenSSL>

2

Dear @mismail ,

if the issue still exists please schedule 1 to 1 meeting with us through the relationship manager and we will be more than happy to help.

Regards,

1 Like
3

Thanks for the reply. @kiaziz ,we have resolved this issue with the help of relationship manager…he suggested us not to use Arabic content and special characters.

1 Like
4

Some organization has only Arabic names and how they are going to be onboarded?

5

@sergei.shishov in Open SSL, Arabic name can be provided by enabling UTF-8 ( by adding utf8 = yes ) line to the csr-config.cnf. @idaoud can you please provide more details regarding this

6

Dears @sergei.shishov , @Ankit_Tiwari ,

To generate a CSR that supports UTF-8 unicode characters (Arabic in our example), we recommend to follow the below steps:

  • Include "utf8 = yes" in the CSR CNF config file
  • in some cases (depending on the OpenSSL version being used), you may need to include string_mask = utf8only
  • When generating the CSR config file, include the flag -UTF8 in OpenSSL command

Below, you can find an example of the CSR config file with UTF8 included for simulation environment

oid_section = OIDs
[OIDs]
certificateTemplateName = 1.3.6.1.4.1.311.20.2
[req]
default_bits = 2048
emailAddress = MyEmail@email.com
req_extensions = v3_req
x509_extensions = v3_ca
prompt = no
utf8 = yes
string_mask = utf8only
default_md = sha 256
req_extensions = req_ext
distinguished_name = dn
[dn]
C=SA
OU=A
O=B
CN=X
[v3_req]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment
[req_ext]
certificateTemplateName = ASN1:PRINTABLESTRING:ZATCA-Code-Signing
subjectAltName = dirName:alt_names
[alt_names]
SN=1-TST|2-TST|3-ed22f1d8-e6a2-1118-9b58-d9a8f11e445f
UID=3xxxxxxxxxxxxx3
title=1100
registeredAddress= MyAddress
businessCategory=Industry

If you follow the steps above correctly, [dn] device details will be displayed on fatoora portal in Arabic

1 Like