# Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for because it doesn't contain any IP SANs I' **URL:** \ **Category:** Elastic Agent\ **Tags:** fleet\ **Created:** [November 21, 2023, 4:22am UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576 "2023-11-21T04:22:12Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Virtual\_Box](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/virtual_box/32/122402_2.png) [@Virtual\_Box](https://discuss.elastic.co/u/Virtual_Box)\ **Post date:** [November 21, 2023, 4:22am UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576/1 "2023-11-21T04:22:12Z")
Hello there! I have a problem with fleet server. When I'm trying to install fleet server, I had a next error: Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for because it doesn't contain any IP SANs I've created selfsigned certificate. What should I do? Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for because it doesn't contain any IP SANs ---
**Author:** ![raymond74](https://avatars.discourse-cdn.com/v4/letter/r/58f4c7/32.png) [@raymond74](https://discuss.elastic.co/u/raymond74)\ **Post date:** [November 21, 2023, 1:02pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576/2 "2023-11-21T13:02:28Z")
Are you trying to connect to an IP address and expecting TLS to work ? Did you try to connect to the hostname ? What hostname/domain did you use when creating the certificate ? ---
**Author:** ![raymond74](https://avatars.discourse-cdn.com/v4/letter/r/58f4c7/32.png) [@raymond74](https://discuss.elastic.co/u/raymond74)\ **Post date:** [November 21, 2023, 1:05pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576/3 "2023-11-21T13:05:20Z")
If you really need to it is possible to create an IP SAN certificate. But I am sure this is not the way you want to go ahead. IP SAN: medium[.]com/@antelle/how-to-generate-a-self-signed-ssl-certificate-for-an-ip-address-f0dd8dddf754 ---
**Author:** ![Virtual\_Box](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/virtual_box/32/122402_2.png) [@Virtual\_Box](https://discuss.elastic.co/u/Virtual_Box)\ **Post date:** [November 21, 2023, 1:05pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576/4 "2023-11-21T13:05:21Z")
Thank you so much for getting feedback! Yeah, I've checked everything. And 5 minutes ago I found a solution for this problem. It was my bad)) I have not payed attention at the domain name while generated certificate. Problem was there. Appreciate you! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 19, 2023, 1:05pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576/5 "2023-12-19T13:05:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.