A Citrix Administrator wants to consolidate three SSL websites behind a single SSL virtual server. Which certificate approach enables this consolidation?

• A. Bind the certificate of each website to a single SSL virtual server.
• B. Bind a multiple Subject Alternative Name (SAN) certificate to a single SSL virtual server.
• C. Bind a Wildcard certificate to a single SSL virtual server.
• D. Bind a Wildcard certificate to a Content Switching virtual server.

Answer: (B)

Using a certificate that lists all the hostnames lets one TLS endpoint serve multiple sites. A certificate with multiple Subject Alternative Names (SAN) includes each website’s domain in a single certificate, so a single SSL virtual server can terminate TLS for all three names. This means clients see a single TLS endpoint and the appliance can route the requests to the appropriate back-end services based on the host header or your routing rules, without needing separate certificates for each site.

Wildcard certificates can cover subdomains under one domain, but they’re limited to a specific domain structure (for example, *.example.com) and may not cover three distinct, unrelated hostnames. Binding separate certificates for each site defeats consolidation, and using a wildcard on a content switching vserver doesn’t achieve the same TLS consolidation at the SSL vserver level.