truested cert expired in Cisco expressway

[techguy]

Hi,

We have two trusted certificate in both expressway. One certificate is expired and jabber stopped working. But we have one valid as well. If i delete expired certificate then it could start working over MRA. Any idea? Thanks

[Adam Pawlowski]

The expressway’s trusted CA only contains the authorities that sign the cert if it cares about that. If the Expressways’s cert has expired , or one behind the expressway has, then it will not work . Refer to the MRA guide for the SANs needed for a MRA cert and ensure yours are valid and trusted by the Jabber client (public CA or asserted root CA)