We migrated a bunch of our sites (changed static IP addresses) from an NGINX proxy to a Citrix NetScaler VPX instance. We tested our sites using every browser available, and they all appeared to be working properly. I changed my hosts file and navigated to each site to check if any browser would throw an exemption, and they didn't. However, after the migration we tested the SSL certs with Wormly's tool (see links below) and the sites failed in two different categories:
After seeing this, we quickly migrated our sites back to our NGINX proxy for fear of a MIM exploit.
If anyone can give me some ideas as to what to check for or some steps that I can take to resolve this, I would appreciate it.
PS, please do not ask what the site names are, not only are they no longer on our netscaler, but posting compromising info about an eCommerce site seems like a really bad idea.