I have various devices that I connect to over the LAN using https which have self-signed certificates (routers, printers, etc). Since they are only being accessed over the LAN I am perfectly happy with self-signed.

To avoid security warnings, and to allow Chrome to save the login details, I import the self-signed certificates as Trusted Root Authorities on my PC.

However, Chromes latest update to version 58 has broken this.

Everything I am reading says it is because of the certificates not having a SAN, however Chrome is reporting two problems with the certificate. One says "Subject Alternative Name Missing" but the other says "ERR_CERT_AUTHORITY_INVALID".

What little I can find about this change says that replacing the certs with new self-signed ones that have a SAN will sort both problems, however when I do this it only resolves the first error. I still get the second error "ERR_CERT_AUTHORITY_INVALID" and the cert is still not trusted by Chrome. I have imported the new cert as a Trusted Root Authority.

Does anyone now how I can get Chrome to trust a self-signed certificate on version 58?