For X15.5, Cisco recommends a private CA issuing both client and server EKUs for the client certificate, and says a public CA issuing server EKU only is acceptable for the server certificate.

Checked 2026-09-30

Vendor
Cisco
Product
Cisco Expressway
Subsystem
eku
Deployment
on-premises
Region
not restricted
Release range
X15.5 and later
Checked
2026-09-30

Sources

Cite this note

APA

WarmTransfer. (2026, September 30). Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-x155-ca-recommendation. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-x155-ca-recommendation

BibTeX

@misc{warmtransfer-claim-expressway-certificate-setup-x155-ca-recommendation,
  title  = {Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-x155-ca-recommendation},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-x155-ca-recommendation},
  note   = {Source note expressway-certificate-setup-x155-ca-recommendation, checked 2026-09-30}
}

Read in context