If you don't want to host the CF certs on your own load balancer, skip
HAProxy and terminate SSL at the Gorouter. In this scenario HAProxy is an
unnecessary network hop. Gorouter also only supports one certificate, but
you can support multiple domains in the same way David mentioned.

Shannon Coen
Product Manager, Cloud Foundry
Pivotal, Inc.

On Wed, Dec 9, 2015 at 4:40 AM, David Head-Rapson <dave(a)dhrapson.com>
wrote:

Adding your new custom domains as Aliases on 'SAN' SSL certificates is
the quickest way to get your SSL traffic enabled in the absence of
multi-cert support on HAProxy.