Forum Discussion

Militza's avatar
Militza
Icon for Nimbostratus rankNimbostratus
Mar 20, 2025

SNI Sites not taking correct certificate.

I have configured one VIP with two certificate 

aks.test.com

aks4.test.com

On SSL profile for aks.test.com i have enabled SNI feature and aks.test.com is working fine taking correct certificate (aks.test.com).

but aks4.test.com having not secure error on browser and taking the certificate of (aks.test.com).

Could someone please help what could be the issue in this case.

application delivery
asm
bigip
dns
gtm
irule
LTM
LTM VE
security
ssl

8 Replies

Sort By
  • Blue_whale's avatar
    Blue_whale
    Icon for Cirrocumulus rankCirrocumulus
    Mar 20, 2025

    I hope you have done this ..If so , it should have worked ..

    aks.test.com  >> On this ssl profile tick the check box - "Default SSL Profile for SNI"

    aks4.test.com

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP
        Mar 20, 2025

        Would you be able to provide your SSL profiles configuration associated to this virtual server and the virtual server configuration so we can look at this further?

  • F5_Design_Engineer's avatar
    F5_Design_Engineer
    Icon for MVP rankMVP
    Mar 21, 2025

    Hi Militza,

     

    You can use the openssl command-line tool to check if SNI is configured correctly.

    Here's a command you can run:

    openssl s_client -servername aks4.test.com -connect aks4.test.com:443 -tlsextdebug

    This command will show you the details of the SSL/TLS handshake, including whether the server is using the correct certificate for the specified hostname

    Check and share the test results.