Cisco asa 5506 scan shows ssl certificate is untrusted

[KEN COUSINO JR.]

I purchased a new ssl cert for my Cisco ASA 5506.  I installed it and there was an exterior scan run against it.  The scan failed. 

Here is the error:

SSL certificate is untrusted

How do I resolve these error?

Any help is appreciated.

[balaji.bandi]

Certificate always associated with FQDN, how are you scanning against with domain name  ? or IP address?

have you mapped the certificated correctly and right interface?

here is the information :

https://community.cisco.com/t5/security-documents/asa-ssl-vpn-certificate-authentication-per-tunnel-group/ta-p/3123868

[KEN COUSINO JR.]

The certificate is based on the FQDN as you said but they are scanning the external IP address.  Also, the cert is applied on outside and inside interfaces.