Re: Load balancer and Security Certificates

[phil@zimbra.com]

Another thing to consider if you want to avoid wildcard certs would be populating the 'subjectAltName' with any/all DNS names that apply for the environment.  Depending upon the environment (# of servers, types of services, etc) this can also work OK.

While purists might only want to use names that apply for a particular host, in theory there's nothing to stop you from populating all public host/service names for your environment and sharing the cert between all servers/services.

Phil
--
Phil Lobbes <phil@zimbra.com>
Y! Zimbra Professional Services

P.S. Not all clients may understand the subjectAltName scheme (eudora 6.x has been reported to fail) so testing your favorite clients is a good idea.