Cisco Cisco Email Security Appliance X1050 Guía De Información
Hosted Verify Algorithm
If the certificate contains SAN attributes, only these will be used and the CN will be ignored.
The CN will only be used if there are no SAN attributes in the certificate. This conforms to
The CN will only be used if there are no SAN attributes in the certificate. This conforms to
.
1.
The certificate is checked against the email domain.
2.
The certificate is checked against any SMTP route hostnames that may exist.
3.
The certificate is checked against the MX hostname(s).
4.
If none of the previous checks have succeeded, the verification fails.
5.
Verify Algorithm
SAN attributes are checked against the email domain.
1.
The CN is checked against the email domain. Note: Wildcard matches are not supported.
2.
The SAN attributes are checked against the PTR hostname.
3.
If none of the previous checks have succeeded, the verification fails.
4.