In some cases customers would like to apply the same certificate to multiple devices. Some applications allow this by having one FQDN defined in the "cn=" field, and other FQDNs populating the SAN (Subject Alternative Name) field in the certificate Unfortunately, the DME does not support this.
Certificates applied to the DME need to be either a wildcard certificate (*.domain) or a host based certificate (dmefqdn.domain). Note, the SAN field does need to be populated for browser security requirements and should match whatever is configured for the "cn=". Populating the SAN field with additional DME FQDNs (dme1fqdn.domain, dme2fqdn.domain, etc.) is not supported. |
