Forum Discussion

Nfordhk_66801's avatar
Nfordhk_66801
Icon for Nimbostratus rankNimbostratus
Aug 04, 2014

ClientSSL Profile. Key and Cert mismatch. Applying to Virtual Server

Hi,   I have a VIP setup for HTTPS pointing to a pool of HTTP servers. We want to install the certificate on the BIG IP. I generated the CSR for a certificate authority, received the cert and impo...
application delivery
clientssl
design
LTM
ssl
mimlo_61970's avatar
mimlo_61970
Icon for Cumulonimbus rankCumulonimbus
Aug 05, 2014

I usually gen the certificate with the FQDN as the common name, and then the short name as a SAN on the certificate. Make sure you specify the FQDN as a SAN as well(so 2 SAN's, short and FQDN) as I have had problems in the past with browsers ignoring the CN when a SAN is present.