# Error scanning a QR code on Android

**URL:** <https://community.passbolt.com/t/error-scanning-a-qr-code-on-android/5526>\
**Category:** Installation Issues\
**Created:** [June 30, 2022, 5:15am UTC](https://community.passbolt.com/t/error-scanning-a-qr-code-on-android/5526 "2022-06-30T05:15:51Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![AnatomicJC](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/anatomicjc/32/962_2.png) [@AnatomicJC](https://community.passbolt.com/u/AnatomicJC)\
**Post date:** [June 30, 2022, 6:56am UTC](https://community.passbolt.com/t/error-scanning-a-qr-code-on-android/5526/4 "2022-06-30T06:56:58Z")

</div>

Hi,

When you generate your certificates with this command:

```auto
openssl req -x509 \
    -newkey rsa:4096 \
    -days 120 \
    -subj "/C=LU/ST=Luxembourg/L=Esch-Sur-Alzette/O=Passbolt SA/OU=Passbolt IT Team/CN=passbolt.domain.tld/" \
    -nodes \
    -addext "subjectAltName = DNS:passbolt.domain.tld" \
    -keyout key.pem \
    -out cert.pem

```

You get 2 files:

- key,pem
- cert,pem

The generated cert.pem file is the certificate you want to be added in Android.

I noticed you are using an IP address instead of a domain name. As written in [our documentation](https://help.passbolt.com/configure/https/ce/debian/manual.html):

> You can use an IP address instead of a domain name for your self-signed certificate. If you do that, replace DNS with IP in subjectAltName.

So in case of an IP address, the correct command is:

```auto
openssl req -x509 \
    -newkey rsa:4096 \
    -days 3650 \
    -subj "/C=LU/ST=Luxembourg/L=Esch-Sur-Alzette/O=Passbolt SA/OU=Passbolt IT Team/CN=192.168.1.138/" \
    -nodes \
    -addext "subjectAltName = IP:192.168.1.138" \
    -keyout key.pem \
    -out cert.pem

```

Best,

---

_[View the full topic](https://community.passbolt.com/t/error-scanning-a-qr-code-on-android/5526)._