Commercial CA questions

[cdyer]

Apologies in advance that these may be more tomcat questions than Zimbra questions....

BACKGROUND:
Both zimbra.domain.com and mail.domain.com are pointing to my server and both work fine with the self-signed cert.

I created a CSR on the Zimbra server, submitted it, and got a commercial cert from www.instantssl.com for mail.dyers.net.

The Zimbra hostname is zimbra.dyers.net.

QUESTIONS:

As far as Zimbra/Tomcat are concerned, is it OK that the SSL cert name is different from the Zimbra hostname?

When I created the CSR I used the alias zimbra-gte instead of tomcat. Is there a way to get this to work even though I used a different alias? Or do I need to recreate the CSR and get a new cet?

Thanks

[cdyer]

I'm an idiot.

The hostnames names in question are:
zimbra.dyers.net
mail.dyers.net

not
zimbra.domain.com
mail.domain.com

[cdyer]

I ended up re-doing it with the tomcat alias and the matching hostname. It works but not sure if I screwed something up with the CSR the first time or if one of these was necessary for it to work.

Anyhow - cert from www.instantssl.com worked flawlessly when I did it this way.

[bobby]

btw the server doesn't care what names are in the cert. other computers (mail clients, mta's) talking to the server over ssl will care.