SSL client profile based on hostname

From LTM's perspective it doesn't make a difference. LTM will use either type of cert to decrypt the SSL. There is a difference in functionality though:

 

 

wildcard cert *.example.com

 

valid for: www.example.com, ftp.example.com, mail.example.com and any other subdomain of example.com

 

not valid for: example.com

 

 

SAN cert:

 

valid for www.example.com, www.example.co.uk, www.example.net, www.example.org

 

not valid for any domain that isn't explicitly specified

 

 

Also note that there might not be universal browser support for SAN's. I haven't seen issues with modern browser versions, but it's something to look into.

 

 

Aaron