Last Modified: Feb 13, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
21.0.0, 21.0.0.1
Opened: Feb 10, 2026 Severity: 3-Major
When using the Certificate Order Manager to request new Multi-Domain certificate from the DigiCert Certificate Authority (CA), the request the BIG-IP sends is missing the field 'subjectAltName'.
The BIG-IP system sends a request to the DigiCert CA that is missing the 'subjectAltName' field. That makes Certificate Order Manager not suitable for requesting Multi-Domain certificates.
-- Certificate Order Manager is configured to send requests to the Digicert CA. -- Configure a new key with Subject Alternative Name (SAN).
There is no workaround other than not using Certificate Order Manager for Multi-Domain certificates.
None