Wildcard/UCC SSL Certificates

[networkadmin]

Are there any issue(s) when using one of these for the reverse proxy (i.e. DMZ websites that use SSL) on the PAN please?

Specifically thinking of using Digicert.

[nrice · Accepted solution]

The PAN supports Digicert Wildcard/UCC certificates for SSL inbound proxy.

[networkadmin]

Brilliant, thanks very much

[networkadmin]

Actually here's a question.  I read this on Digicert:

http://www.digicert.com/uc-certificate-add-subject-alternative-names.htm

Does this mean that if I have a wildcard cert installed on the PA on day one for inbound SSL decryption, that if six months later I add some SANs to the certificate, that I now need to also install the new cert on the PAN, or will the initial install of the wildcard cover it?

Hope that makes sense - the reason for looking at using a wildcard is to avoid duplication of effort.

[migration]

I suppose using PAN is capable of using wildcard SSL Certs, however, are there any specific vendors we do not support? or unable to decipher? How about the formats? I know we can only the pem formats, but do we also have to change to ".crt" for the file name in order to install into PAN?

[r37775]

Did your question ever get answered?  I have the same question.