CSS 11500 Certificate Signing Request (CSR)

boisverte · ‎09-25-2008

Would any of you know if and how to configure / general a wildcard or multi-domain SSL certificate on a CSS 11500 appliance? The "SSL gencsr ..." command doesn't seem to allow me to add more than one domain name during the information gathering.

Any help or input would be greatly appreciated.

Thanks,

Syed Iftekhar Ahmed · ‎09-25-2008

WildCard certs are supported on CSS.

The only thing that makes it a CSR for a wildcard certificate would be that the common name would be something like "*.yourdomain.com".

Since a wildcard certificate represents multiple domains, it can be re-used on the

multiple https content rules of different IPs.

The CSR procedure for a wildcard certificate on the CSS is not different than the CSR

procedure for a regular certificate (You just need to put something like "*.yourdomain.com" in front of common name):

CSS11506(config)# ssl gencsr app1key

Country Name (2 letter code) [US]US

State or Province (full name) [SomeState]CA

Locality Name (city) [SomeCity]San Jose

Organization Name (company name) [Acme Inc]Yourdomain Inc.

Organizational Unit Name (section) [Web Administration]SSL Admin

Common Name (your domain name) [www.acme.com]*.yourdomain.com

Syed