These are all signed by normal public CA's so they “just work” in normal browsers.
This page is WIP.
We need a certificate which supports SubjectAltName (AKA SAN) with the following hostnames:
Possibles:
For mail servers we need the following:
This is an intentionally public clusteradm page.