# Certutil Extended fields

**URL:** <https://discuss.elastic.co/t/certutil-extended-fields/153764>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [October 24, 2018, 9:38am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764 "2018-10-24T09:38:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bodi4](https://avatars.discourse-cdn.com/v4/letter/b/57b2e6/32.png) [@bodi4](https://discuss.elastic.co/u/bodi4)\
**Post date:** [October 24, 2018, 9:38am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764/1 "2018-10-24T09:38:58Z")

</div>

Hi,  
Can anyone explain, is it possible to add information to OU and E fields while generating csr or cert?  
In documentation I see option `-E <KeyValuePair>` is that what I need?  
If so, what format of pair `-E OU=myunit` ? That way I don't see it in generated csr..

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [October 24, 2018, 10:29am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764/2 "2018-10-24T10:29:55Z")

</div>

Hi Bogdan,

Can you explain what you want to achieve? Not entirely sure what you mean by

> OU and E fields

If you want to set the Subject DN for the CSR to a specific value, you can use the `--name` parameter with `csr`. This will also set the name of the `csr` file but this should not be an issue.

Then again, I don't see why you'd want to set that specifically so maybe if you explain your use case, we'll be able to assist you in a more meaningful way.

---

<div class="post-metadata">

**Author:** ![bodi4](https://avatars.discourse-cdn.com/v4/letter/b/57b2e6/32.png) [@bodi4](https://discuss.elastic.co/u/bodi4)\
**Post date:** [October 24, 2018, 10:52am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764/3 "2018-10-24T10:52:53Z")

</div>

Sure,  
I would like to add information to fields "Organization Unit" and Email in csr while generating from input file. Is it possible?

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [October 24, 2018, 11:05am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764/4 "2018-10-24T11:05:33Z")

</div>

Thanks for the clarification Bogdan. Unfortunately, it is not currently possible to set these attributes when generating the CSR with `elasticsearch-certutil`.

You can use other tooling such as `openssl` to satisfy your use case.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 21, 2018, 11:05am UTC](https://discuss.elastic.co/t/certutil-extended-fields/153764/5 "2018-11-21T11:05:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.