PowerShell New-​Self​Signed​Certificate ip address

Question

I am using New-​Self​Signed​Certificate to create ​certificate used for development purposes. I was able to create one for "DNS Name=localhost". I also want to support ip address range something like "IP.1 = 192.168. . " but i don't know how to pass it to the command? Is this supported at all?

Answer 1

IP address ranges are not supported by SAN extension (it is supported only in Name Constraints extension). When specifying an IP Address in the SAN, you have to specify unicast address. If you have multiple addresses, you have to explicitly specify all these addresses.