Cisco ISE integration for DigiCert Multi-Domain SSL Certificate 2 Years

[adeebtaqui]

Hi to all,

We are deploying Cisco ISE for a customer but he is asking for "DigiCert Multi-Domain SSL Certificate 2 Years"

Does anyone have any info about this and can this be integrated with ISE? Please advise

[Colby LeMaire]

Looks like it is just a regular certificate with multiple SAN's.  ISE supports this and also wildcard certificates.

[jj27]

It's just a certificate that can have multiple subject alternative names (SAN) on the certificate. For example, your common name might be isenode1.company.com and it can have other SAN on the certificate like isenode2.company.com, byod.company.com, guest.company.com, etc.  Multi-domain certs are usually cheaper than purchasing a wildcard certificate. 

Implementing with ISE is the same as any other certificate. Just create a certificate signing request (CSR) and fill out all of the fields, then add SANs as necessary to meet the requirements.

[Jason Kunst]

I'd recommend you also look at How To Implement Digital Certificates in ISE 

Also Apple iOS devices have trouble with certs that have sub of sub CA. 4 tiered. They are working with 3 tiered. Root, sub and then the server certificate