Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
Does Edge Proxy Support SAN Certificates for the SSL Certificate (Multi-Domain (SAN) Certificates - Using Subject Alternative Names )? - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • Does Edge Proxy Support SAN Certificates for the SSL Certificate (Multi-Domain (SAN) Certificates - Using Subject Alternative Names )?
KB0623890

Does Edge Proxy Support SAN Certificates for the SSL Certificate (Multi-Domain (SAN) Certificates - Using Subject Alternative Names )?


909 Views Last updated : Apr 7, 2024 public Copy Permalink
KB Summary by Now Assist

Issue

Does Edge Proxy Support SAN Certificates for the SSL Certificate? |  (Multi-Domain (SAN) Certificates - Using Subject Alternative Names )



Use Case:


This concerns the SSL cert that resides on the Edge Proxy, inside the Java Keystore. The example use case is a configuration of four proxies (ServerA, ServerB, ServerC, ServerD) connected to one instance. This SSL cert is issued by an Enterprise CA, is not self-signed. SAN certificates use Subject Alternate Names and could potentially contain all four server names, the four Edge Proxies, in a single certificate, and is lower-cost to maintain long-term: https://www.digicert.com/subject-alternative-name.htm 

Generate a single SAN certificate that has CN=ServerA, SAN names: ServerB, ServerC, ServerD. Is this supported by Edge Encryption?

 

 

Answer:


Edge Proxy is using standard Java SSL libraries and API, which do support this feature, including Java keytool.   If the certificate was generated with alternative names, with corresponding CSR,, it can be imported into proxy keystore, and should work.


The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.