asked on
LDAP SSL and Subject Alternate Names
It seems that when using SAN names with the domain controller certificate, only the first name is of importance, all other names are being ignored?
Active Directory
Last Comment
Tony Massa
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
You can use an additional SAN, but the first SAN attribute name MUST match the FQDN of the server. If you wanted to use LDAPS.US.YOURDOMAIN.COM for multiple servers to provide round-robin load balancing of LDAPS, for example, you would use the SAN attribute as:
SAN:server1.yourdomain.com
SAN:server2.yourdomain.com