# Override Certificate Name

## Summary

Secure service communication can fail if the external certificate does not match the internally routed service hostname/[SNI](https://en.wikipedia.org/wiki/Server_Name_Indication).

**Override Certificate Name** allows you to override that value.

## How to configure

**Core:**

| **Config file keys** | **Environment variables** | **Type** | **Usage** |
| :-- | :-- | :-- | :-- |
| `override_certificate_name` | `OVERRIDE_CERTIFICATE_NAME` | `string` | **optional** |

### Examples

```yaml
override_certificate_name: authorize.corp.example.com
```

```bash
OVERRIDE_CERTIFICATE_NAME=authenticate.corp.example.com
```

```yaml
# wildcard support
override_certificate_name: *.corp.example.com
```

**Enterprise:**

`override_certificate_name` is a bootstrap configuration setting and is not configurable in the Console.

**Kubernetes:**

Kubernetes does not support **Override Certificate Name**