Forum Discussion

Amarpreet_Sing1's avatar
Amarpreet_Sing1
Icon for Nimbostratus rankNimbostratus
Aug 13, 2014

Certificate to be generated on Cname record or actual url

Hi,   We have a users sending the request to url ( example : q1.abc.com ) which goes for dns resolution to local dns.   Local dns has a cname record for q1.abc.com pointing to q1.wip.abc.com. ...
application delivery
design
LTM
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Aug 13, 2014

A longer answer to explain why, is that the certificate CN is checked by the broader against the hostname specified i the URL that is type dingo the browser. if the user types the name 'fred.domain.com', then the certificate has to be 'fred.domain.com'. It's this check that is used to verify (i..e the certificate CA is vouching for the authenticity of the name) that the end-user browser is connecting to the expected website.

 

H