The certificate must include:
The external interface IP that you need to specify in the Listen IP field while creating a reverse proxy service for Avaya Aura® Web Gateway
Avaya Aura® Web Gateway FQDN because external clients use this FQDN to access Avaya Aura® Web Gateway