CN should be `foo.host.domain` where cert is `*.ho...
# kolideg
Gavin
08/19/2019, 9:10 PMCN should be
foo.host.domain*.host.domainh
harveywells
08/20/2019, 2:18 PMDoes cert order matter?
harveywells
08/20/2019, 2:18 PMI think we did this with a Vault issued certificate (internal PKI) and it was leaf, then issuing CA.
harveywells
08/20/2019, 2:19 PMWe are now using a Digicert cert and have an intermediate cert too.
g
Gavin
08/20/2019, 10:29 PMyes
Gavin
08/20/2019, 10:30 PMGavin
08/20/2019, 10:30 PMthen confirm with https://www.digicert.com/help/
h
harveywells
08/21/2019, 8:22 PM@Gavin thank you so much for your help and sharing those resources. I was able to switch out the certs with little effort
harveywells
08/21/2019, 8:23 PM🤜 🤛
g
Gavin
08/21/2019, 8:34 PMAwesome