[Info-vax] SSL Certificates questions

[Jose Baars]

>
> Is it also possible to have a certificate which would work when the
> server thinks its IP address is 10.0.0.20 while the remote client thinks
> the server's IP is 12.34.56.78 ?

I'm not completely confident about the other issues, but certificates
only
use the FQDN, ip addresses are left out of the check.
The check is done by the client, as long as the client thinks the FQDN
it
connected to is the same as the FQDN in the certificate, then you're
ok.