Hello, For your connection to be shown as secure going to hostname and IP, both have to be on the certificate. In our environment, each server has a fqdn (i.e. server1.MyBiz.com) for their connection on the production network, and a fqdn (i.e. server1.MyBiz.local) for their connection on the local admin network. So their certificates are requested with CN of the production network fqdn, and a SAN of the admin network SAN. And because we want to continue to access them securely if/when DNS has a bad day, their public and private IP addresses also get SANs. Maybe lucky, but we've not had any problems getting certificates with multiple SANs. Hope this helps!
... View more