You can add additional DNS names and undetectable IP address to a Primary Server configuration.

In case the Primary Server is behind a NAT route and devices connected to the NAT external IP address/DNS name vs. the local network name, it should be possible to add a certificate signed to the external DNS name especially for mobile device communication, so end users can easier trust the certificate matching the actual external DNS name.


  • External certs can be generated with multiple DNS names.