Home / server / Questions / 348131
Accepted
FAtBalloon
Asked: 2012-01-10 08:30:27 +0800 CST

New SSL Certificate Installation Errors on

  • 772

We replaced an old SSL certificate with a new wildcard SSL certificate from GoDaddy. We switched out this certificate last week and have been receiving calls from customers trying to register ever since about the following error.

enter image description here

We cannot figure out what on earth is going on as we have tested this cert in IE 6,7,8, Chrome, & Firefox without receiving any errors, but we know there is a problem as we continue to get calls. For the record, we do have multiple SSL certificates installed on this box, but are using separate IP addresses to serve them up.

Any help or ideas would be greatly appreciated.

Thank you,

apache-2.2 web-server ssl godaddy ssl-certificate

3 Answers

  1. Best Answer
    $ curl -Iv https://classes.stcharleshealthcare.org/
* About to connect() to classes.stcharleshealthcare.org port 443 (#0)
*   Trying 67.59.90.121... connected
* Connected to classes.stcharleshealthcare.org (67.59.90.121) port 443 (#0)
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using DHE-RSA-AES256-SHA
* Server certificate:
*    subject: serialNumber=ESKZZ-OSKRZAHAnZ8ssPXoULbrv1/Obw; C=US; ST=Oregon; L=Bend; O=St. Charles Medical Center; OU=GT14856843; CN=*.scmc.org
*    start date: 2010-10-10 19:25:39 GMT
*    expire date: 2012-01-13 10:20:49 GMT
*    subjectAltName does not match classes.stcharleshealthcare.org
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):
* SSL peer certificate or SSH remote key was not OK
curl: (51) SSL peer certificate or SSH remote key was not OK

    So, the DNS for classes.stcharleshealthcare.org is going to a server that is presenting the SSL cert for *.scmc.org. Check your DNS and/or your virtual host definitions in Apache.

    • 3

  2. Certificate has been issued to *.scmc.org, you're trying to secure a site called stcharleshealthcare.org. Obviously you need a cert such as *.stcharleshealthcare.org

    • 0 
  3. You attempted to reach classes.stcharleshealthcare.org, but instead you actually reached a server identifying itself as *.scmc.om

    You are using a wildcard certificate that doesn't match your domain name.

    • 0