Source note · Setting up certificates on Cisco Expressway

Cisco's option of moving to a private PKI that issues combined EKUs applies to Expressway-C only, not to Expressway-E, whose external-facing services need public CA certificates.

Checked 2026-09-30

Vendor: Cisco
Product: Cisco Expressway
Subsystem: eku
Deployment: on-premises
Region: not restricted
Release range: X14 to X15.5
Checked: 2026-09-30

Sources

Field Notice: FN74362 - Cisco Expressway: Impact on Secure Communication due to Upcoming Changes to TLS Certificates Issued by Public Certificate Authorities with Client Authentication EKU, Starting May 2026 - Workaround Provided — Cisco Systems · tier 2 current vendor documentation · Workaround/Solution > Option 3

Cite this note

APA

WarmTransfer. (2026, September 30). Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-eku-private-pki-c-only. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-eku-private-pki-c-only

BibTeX

@misc{warmtransfer-claim-expressway-certificate-setup-eku-private-pki-c-only,
  title  = {Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-eku-private-pki-c-only},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-eku-private-pki-c-only},
  note   = {Source note expressway-certificate-setup-eku-private-pki-c-only, checked 2026-09-30}
}

Read in context