# Are the Self Signed Certs bound by IP / Hostname **URL:** \ **Category:** Elastic Security\ **Created:** [April 15, 2025, 12:20pm UTC](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147 "2025-04-15T12:20:35Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![Umang\_Pachaury](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/umang_pachaury/32/113523_2.png) [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Post date:** [April 15, 2025, 12:20pm UTC](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147/1 "2025-04-15T12:20:35Z")
Hi, We have a cluster in which we have enabled TLS security. To enable the security we used the elastic cert utility to generate the cert and CA. While generation of the certs or the CA any of the prompts did not ask us about the Hostnames or IP. We generated just one certificate and used that cert in all the nodes. Now the machines are moving to new IP and we are confused if the previous cert which is working now will work or not. Are the certs generated with elasticsearch cert-util are bound by IP/Hostname? Will there be any changes with respect to already generated passwords which were generated using elasticsearch-setup-passwords? Any update regarding this --- _[View the full topic](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147)._