Enter the KX3 (or CC-SG or LDAP server) with the same fully
•
qualified host name as in the CN or SAN of the certificate into
KXUST.
Using IP addresses, both IPv4 and IPv6, for the CN/SAN or when
entering the KX into the KXUST does not work. IP addresses are
discouraged for use in certificates and out of scope in the TLS
spec (https://tools.ietf.org/html/rfc6125#section-1.7.2)
Appendix E: Certificate Requirements
209