Hello, all!

I'm rolling out some new sendmail servers and I want to purchase some SSL certificates for these. However, given the configuration of these servers I don't know precisely how many to get.

The servers are Ubuntu Linux running sendmail. They are members of an Active Directory domain called network.net. However, the internet domain they'll be seen as is network.com. Sendmail will be masquerading the network.com domain to the outside world. These servers will also be accepting mail for several other domains; relaying some and processing some others.

My question is, then, will I need a single certificate with the masqueraded domain as the FQDN in the certificate, or will I need the FQDN for the machine name and a second SAN name in the certificate for the masqueraded name?

Thanks to all for looking!

Gregg

I think you need one certificate for one machine.