# Kibana SSL verification Trust Issues

**URL:** <https://discuss.elastic.co/t/kibana-ssl-verification-trust-issues/322836>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [January 10, 2023, 12:43pm UTC](https://discuss.elastic.co/t/kibana-ssl-verification-trust-issues/322836 "2023-01-10T12:43:17Z")\
**Posts on this page:** 1\
**Showing post:** 19

<div class="post-metadata">

**Author:** ![hanna](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hanna/32/109117_2.png) [@hanna](https://discuss.elastic.co/u/hanna)\
**Post date:** [January 25, 2023, 1:46pm UTC](https://discuss.elastic.co/t/kibana-ssl-verification-trust-issues/322836/19 "2023-01-25T13:46:24Z")

</div>

Alright it turned out that the certificates, that I am providing are probably missing some stuff.  
A kibana certificate created with elasticsearch-certutil looks like this:

```auto
Bag Attributes
    friendlyName: kibana-01
    localKeyID: 54 69 6D 65 20 31 36 37 34 31 33 36 31 33 35 31 30 34 
subject=CN = KIBANA-01
issuer=CN = Elastic Certificate Tool Autogenerated CA
-----BEGIN CERTIFICATE-----
MIIDY.........redacted........A5q5WgCp
-----END CERTIFICATE-----
Bag Attributes
    friendlyName: ca
    2.16.840.1.113894.746875.1.1: <Unsupported tag 6>
subject=CN = Elastic Certificate Tool Autogenerated CA
issuer=CN = Elastic Certificate Tool Autogenerated CA
-----BEGIN CERTIFICATE-----
MIIDS...............redacted..............1aF0=
-----END CERTIFICATE-----

```

The difference to my own certificates is the "Bag Attributes" and that the ca certificate is also appended to the kibana certificate. The kibana-cert.pem that I generated with my own CA ist simply the public certificate:

```auto
-----BEGIN CERTIFICATE-----
MIID......redacted.....WgCp
-----END CERTIFICATE-----

```

I don't have any more time to tinker with it but searching for bag attribute related issues I found [this post](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724), in which someone got it to work. Maybe this will help someone who stumbles across this thread.  
Thank you all for your help ☀

---

_[View the full topic](https://discuss.elastic.co/t/kibana-ssl-verification-trust-issues/322836)._