Microsoft KB Archive/300865

= Downlevel clients in a Windows Server 2003-based domain display &quot;No Alternative Name&quot; on certificates =

Article ID: 300865

Article Last Modified on 3/1/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Millennium Edition
 * Microsoft Windows 98 Second Edition
 * Microsoft Windows 98 Standard Edition
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT 4.0 Service Pack 1
 * Microsoft Windows NT 4.0 Service Pack 2
 * Microsoft Windows NT 4.0 Service Pack 3
 * Microsoft Windows NT 4.0 Service Pack 4
 * Microsoft Windows NT 4.0 Service Pack 5
 * Microsoft Windows NT 4.0 Service Pack 6
 * Microsoft Windows NT 4.0 Service Pack 6a
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows 95

-



This article was previously published under Q300865



SYMPTOMS
If a user is on a downlevel client computer that is joined to a Windows Server 2003-based domain that enrolls for certificates from an Enterprise certification authority in the Windows .NET domain, the downlevel client does not correctly display the user principal name (UPN) in the Subject Alternative Name field.

When this field is viewed from the downlevel clients, the field in the issued certificate is displayed as: &quot;No alternative name&quot;.



CAUSE
The certificate has been issued correctly and does have the correct information in the field. Windows 95, Windows 98, Windows Milennium Edition (Me), and previous versions of Windows NT are not able to display this field correctly.



STATUS
This behavior is by design.



MORE INFORMATION
The Subject Alternative Name extension in the details section of the certificate normally lists the UPN of the account of the user in Active Directory.

Keywords: kberrmsg kbenv kbprb KB300865

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.