<div dir="ltr">In this case, we're doing public certificates internally as well for CUCM Tomcat, Unity Connection Tomcat, UCCX Tomcat, and IM&P CUP-XMPP.<div><br></div><div>Adding the multiple presence domains is pretty easy on the IM&P side and it will automatically add SAN's for those domains in the CSR.</div><div><br></div><div>Expressway-E will also automatically add all domains to the CSR.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 30, 2020 at 4:07 PM Jonatan Quezada <<a href="mailto:jonatan.quezada@chemeketa.edu">jonatan.quezada@chemeketa.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Brian, How challenging was it to do the jabber on all three domains?<div><br></div><div>Where do you need the multiDomain cert, on the VCS-edge connector right? Im looking to see what it would take to get this going for our remote workers even though it seems </div><div>like there are few things to make sure are in place first.</div><div><br></div><div>for so far its the :</div><div><br></div><div>certs for dual domain- how </div><div>provision jabber users</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 30, 2020 at 12:28 PM Brian Meade <<a href="mailto:bmeade90@vt.edu" target="_blank">bmeade90@vt.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I was originally going to go with that wildcard option but this customer has 3 different presence domains to match their email domains which makes the CUP-XMPP cert more complicated.<div><br></div><div>This is my personal email so no access to InCommon certificates unfortunately.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 30, 2020 at 2:59 PM Matthew Ballard <<a href="mailto:mballard@otis.edu" target="_blank">mballard@otis.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">We used to use DigiCert Wildcard which offers that (where you can issue multiple certificates with different private keys from the same wildcard cert/purchase).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">We switched to using InCommon certificates, which it looks like your University also subscribes to. You should be able to get them internally from whomever licensed
that there, as it’s a flat fee service for unlimited certificates.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Matthew Ballard<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Director of Technology Infrastructure<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Information Systems<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Otis College of Art and Design<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><a href="mailto:mballard@otis.edu" target="_blank"><span style="color:rgb(5,99,193)">mballard@otis.edu</span></a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>>
<b>On Behalf Of </b>Brian Meade<br>
<b>Sent:</b> Monday, March 30, 2020 11:42 AM<br>
<b>To:</b> cisco-voip voyp list <<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br>
<b>Subject:</b> [cisco-voip] Cost-Effective Public Certificate Authority for CUCM certificates<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Does anyone know of any public certificate authorities that have cheaper multi-server SAN certificate options? I had seen some in the past that let you buy a wildcard and then can submit CSR's against that still but having trouble finding
that now.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Trying to avoid buying 4 multi-server certificates to cover CUCM Tomcat/Unity Connection Tomcat/UCCX Tomcat/IM&P XMPP.<u></u><u></u></p>
</div>
</div>
</div>
</div>
</blockquote></div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><font face="arial, helvetica, sans-serif">During this time of remote work, There will be the need for connectivity to other devices such as a cell phone. If you require assistance forwarding your desk phone to a remote cell or message phone, please email with desk number and where we are forwarding calls. I can do these remotely.</font></div><div><br></div><div dir="ltr"><font face="arial, helvetica, sans-serif" size="4">Johnny Q</font></div><div dir="ltr"><span style="font-family:arial,helvetica,sans-serif;font-size:small">Voice Technology Analyst II</span></div><div dir="ltr"><span style="font-family:arial,helvetica,sans-serif;font-size:large">Chemeketa Community College</span><br></div><div dir="ltr"><div><span style="font-size:12.8px"><a href="mailto:Johnny.Q@chemeketa.edu" target="_blank">Johnny.Q@chemeketa.edu</a></span></div><div><font size="1"><span style="font-family:arial,helvetica,sans-serif">Building 22 Room 130</span><br></font></div><div><font face="arial, helvetica, sans-serif" size="1">Work 5033995294 </font></div><div><font face="arial, helvetica, sans-serif" size="1">Cell 5035769873</font></div><div><span style="font-family:arial,helvetica,sans-serif;font-size:x-small">FAX 5033995549</span><br></div><div><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</blockquote></div>