Certificate name mismatch

Hi @romicva

checked both domains in my browser, there are redirects to port 5001.

https://romicva.duckdns.org:5001/
https://romicvawebtrees.duckdns.org:5001/

with the same result page. The first url has the correct certificate, the second url requires to create an exception.

But checking your domain via https://check-your-website.server-daten.de/?q=romicvawebtrees.duckdns.org

Domainname Http-Status redirect Sec. G
http://romicvawebtrees.duckdns.org/
108.51.118.201 302 http://romicvawebtrees.duckdns.org:5000/ 0.243 D
http://www.romicvawebtrees.duckdns.org/
108.51.118.201 302 http://www.romicvawebtrees.duckdns.org:5000/ 0.240 D
http://romicvawebtrees.duckdns.org:5000/ 302 https://romicvawebtrees.duckdns.org:5001/ 0.277 A
http://www.romicvawebtrees.duckdns.org:5000/ 302 https://www.romicvawebtrees.duckdns.org:5001/ 0.277 A
https://romicvawebtrees.duckdns.org/
108.51.118.201 302 https://romicvawebtrees.duckdns.org:5001/ 1.377 N
Certificate error: RemoteCertificateNameMismatch
https://www.romicvawebtrees.duckdns.org/
108.51.118.201 302 https://www.romicvawebtrees.duckdns.org:5001/ 1.127 N
Certificate error: RemoteCertificateNameMismatch
https://romicvawebtrees.duckdns.org:5001/ 200 1.067 N
Certificate error: RemoteCertificateNameMismatch

All https connections are wrong, all use the same certificate

CN=romicva.duckdns.org
	01.07.2019
	29.09.2019
expires in 75 days	romicva.duckdns.org - 1 entry

But the solution should be simple: Create one certificate with both domain names:

./certbot-auto certonly --manual --preferred-challenges dns-01 -d romicvawebtrees.duckdns.org -d romicva.duckdns.org

Every 443 vHost and the 5001 vHost should use this certificate with both domain names.

1 Like