[cisco-voip] [External] Re: expressway E GoDaddy certificate

[Hunter Fuller]

Since I just love being contrarian, we are running the same cert on
both Expressway-E. It is not GoDaddy though. But feel free to take a
look at how this works. Our expe are vbhexpe.voip.uah.edu and
libexpe.voip.uah.edu and I've also attached the cert to this email.

--
Hunter Fuller (they)
Router Jockey
VBH M-1C
+1 256 824 5331

Office of Information Technology
The University of Alabama in Huntsville
Network Engineering

On Tue, Aug 2, 2022 at 9:06 AM Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
>
> We’ve always been weary of wildcard and muti-San certs that preclude a certificate for each server. In our case, we have got a multi-san cert for each expressway E (and C for that matter) which includes the server as the primary host, and the peer, cluster name and domain as a SAN.
>
>
>
> I’m lucky that our cert team has got a contract with good inventory, so, a couple of extra multi-SAN certs isn’t a big deal for us.
>
>
>
> At some point, we may consider moving the Expressways to Let’s Encrypt. It’s the only Cisco collab platform that supports it for now.
>
>
>
>
>
> From: cisco-voip <cisco-voip-bounces at puck.nether.net> On Behalf Of Shaihan Jaffrey
> Sent: Tuesday, August 2, 2022 4:21 AM
> To: Cisco VOIP <cisco-voip at puck.nether.net>
> Subject: [cisco-voip] expressway E GoDaddy certificate
>
>
>
> CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to IThelp at uoguelph.ca
>
>
>
> what is the process to renew Public certificate on Expressway E through
>
> GoDaddy.
>
> Is one certificate sufficient for primary and secondary exp-e?
>
>
>
> do we have to get certificates based on FQDN?
>
>
>
> Regards
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
A non-text attachment was scrubbed...
Name: expe_voip_uah_edu_cert.cer
Type: application/x-x509-ca-cert
Size: 2902 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20220802/353ebfd5/attachment.bin>