@aral Today I learned there are clients apart from Internet Explorer that care about IP addresses in certificates. May I ask what the setup you're using to test this is?