Invalid X509 certificate provided : error 20 at 0 depth lookup:

[thorzeen]

Upgrading 24.7.6 and cannot create certificates using opnsense CSR and my 2 tier CA
Also seems that SANs not being applied DNS or IP

[MrPaul]

I also ran into this. When generating a CSR there were no SAN in the extensions. One I did sign the cert (externally) I could find no way to set the certificate without getting the error 20 error. I tried just the cert, the cert+intermediate, and the cert+intermediate+root,
(all cat together), all PEM. Certs generated with the same process have worked elsewhere.

24.7.7