We have a subdomain (https://portal.company.com) that is the alias for a different hostname (defined in a CNAME record).
This dynamic DNS hostname (https://portal.dlinkddns.com) resolves to the public (dynamic) IP address of our office. At the office, the router is configured to forward port 443 to a server running a (Spiceworks) web portal that the staff can access from home. Even if the office's public IP address changes, the subdomain will still direct staff to the web portal. Everything works great- apart from the (expected) SSL certificate error staff see when they first connect to the site.
I've just purchased an SSL certificate, and am now in the process of completing a certificate signing request on the server.
Which leads me to my question...
When completing the certificate signing request, for "Common Name (e.g. server FQDN or YOUR name)", what should I enter?
Should I enter the canonical name (https://portal.dlinkddns.com) or the alias (https://portal.company.com)? The FQDN of the server itself is "servername.companyname.local"- so I can't use that.
Any suggestions or ideas would be much appreciated!