How to run IBM Notes Traveler with two hostnames and multiple SSL certificates

Hello,

recently my company decided to update the certificates to SHA-2-signed-certificates.
The Traveler is accessed by several URLs. One internal URL that is used by "BES"-managed devices and one external URL that is used by Android devices. The server itself only provided one certificate for the public address. While setting up BlackBerry10 devices we needed to manually trust the certificate that was provided by the Traveler.

So....how can I update the certificate without getting security warnings on the BlackBerry10 devices again ? This would be a catastrophe because every device sync would stop until the user accepts the new certificate.


Solution A - Use a Multidomain-certificate

Solution B - Use two certificates and Internet Site Documents for each keyring/certificate on your IBM Notes Traveler server

And also another hint: Collect information about the used URLs for your Traveler by activating the Domino Weblog .


Greetings,
Jan