[help] A question about the value of the subject.names.* field of pem certificates

[cscowx]

Hello, everyone

mkdir -p /download/ssl

cat > /download/ssl/ca-config.json <<EOF
{
"signing": {
"default": {
"expiry": "876000h"
},
"profiles": {
"kubernetes": {
"expiry": "876000h",
"usages": [
"signing","key encipherment",
"server auth",
"client auth"
]
}
}
}
}
EOF

cat > /download/ssl/feiji_dev-group_csr.json <<EOF
{
"CN": "feiji",
"key": {
"algo": "rsa",
"size": 2048
},
"hosts": [],
"name": [
{
"C": "CN",
"ST": "Jiangsu",
"L": "Nanjing",
"O": "dev-group",
"OU": "IT"
}
]
}
EOF

#Generating a certificate
cfssl gencert -ca=/etc/kubernetes/pki/ca.crt -ca-key=/etc/kubernetes/pki/ca.key -config=/download/ssl/ca-config.json -profile=kubernetes /download/ssl/feiji_dev-group_csr.json | cfssljson -bare feiji_dev-group

#Viewing certificate information
root@k8s-master-01:/download/ssl# cfssl-certinfo -cert /download/ssl/feiji_dev-group.pem
{
"subject": {
"common_name": "feiji",
"names": [
"feiji"
]
},
"issuer": {
"common_name": "kubernetes",
"names": [
"kubernetes"
]
},
"serial_number": "223711557935640467154917044379599514617937919738",
"not_before": "2024-12-27T08:41:00Z",
"not_after": "2124-12-03T08:41:00Z",
"sigalg": "SHA256WithRSA",
"authority_key_id": "35:DB:29:91:1C:85:21:0B:D3:D3:05:B4:DC:62:B7:ED:7C:D6:B0:93",
"subject_key_id": "AA:EE:BE:36:64:F6:26:98:C1:1D:42:14:D0:E8:35:84:B5:A8:CB:A0",
"pem": "-----BEGIN CERTIFICATE-----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\ndtlD/2Jf25zYEKTg\n-----END CERTIFICATE-----\n"
}

The generated feiji_dev-group.pem certificate does not see the value of the O field or any of the following fields

"C": "CN",
"ST": "Jiangsu",
"L": "Nanjing",
"O": "dev-group",
"OU": "IT"