# Strange behavior observed with SNI

**URL:** <https://discourse.haproxy.org/t/strange-behavior-observed-with-sni/8935>\
**Category:** Help!\
**Created:** [August 17, 2023, 7:16am UTC](https://discourse.haproxy.org/t/strange-behavior-observed-with-sni/8935 "2023-08-17T07:16:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fbrisset](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/fbrisset/32/2012_2.png) [@fbrisset](https://discourse.haproxy.org/u/fbrisset)\
**Post date:** [August 17, 2023, 7:16am UTC](https://discourse.haproxy.org/t/strange-behavior-observed-with-sni/8935/1 "2023-08-17T07:16:17Z")

</div>

Hi all,

I have a server with Haproxy CE 2.5.9 and one public IP address. Instead of using multiple IPs for my three differents domains, I used SNI in my configuration as described here : [Enhanced SSL Load Balancing with Server Name Indication (SNI)](https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension#choose-a-backend-using-sni-tls-extension)

My configuration is like this example as the difference that I have three domains with three SSL certifcates different : \*.mydomain.com, [a.mydomain.com](http://a.mydomain.com) and [b.mydomain.com](http://b.mydomain.com)

I configured the backend in HAProxy config to redirect to frontend where I do a binding to localhost on different ports with the different certificates. What surprises me is when I use testssl to check for my certificates on the different domains for [a.mydomain.com](http://a.mydomain.com), it presents me two certificates (wildcard and its own) and for rdd only one.

Is it normal or maybe I made a mistake on my configuration ?

Regards

Fabien

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [August 17, 2023, 8:23am UTC](https://discourse.haproxy.org/t/strange-behavior-observed-with-sni/8935/2 "2023-08-17T08:23:06Z")

</div>

You will have to share your configuration and the output of testssl, explaining them is not enough.