Firefox only error

marcozeus · October 19, 2016, 10:45pm

Hello,
I have problems with the domain www.asilobabyclub.it and only on Firefox browser.
I get error “SSL_ERROR_BAD_CERT_DOMAIN” but if I refresh the page one or two times (cache clean) the site appears but with some css errors.
The site is an update Joomla nad my control panel (used to create SSL certificate) is DirectAdmin. The creation process was succesfully.
This is the message of Firefox:

https://www.asilobabyclub.it

Impossibile stabilire una connessione sicura con il peer: il nome di dominio richiesto non corrisponde al certificato del server.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

Catena di certificati:

The message is in Italian language and the first error is: the requested domain name doesn’t match with the server certificate.
Infact, the error is “the certificate is valid for [myserver-hostname] only”.
What I’m doing wrong?
There are other 2 ssl on the same server and they are working fine.
Thank you very much for your help.
Regards

schoen · October 19, 2016, 11:05pm

It seems to me that you must have fixed the problem in the meantime, because I can access that site with no error, and the SSL Labs test also says that your certificate is valid.

marcozeus · October 19, 2016, 11:28pm

Hi Schoen,
unfortunately I think the situation is worse than before, now I see error with all browser.
I tested it with this site: https://ssldecoder.org/?host=asilobabyclub.it&port=&csr=&s=
What do you think? It seems that the certificate is for my server hostname instead of the domain.
Of course, on my server are hundreds domains with the sape IP.
Thank you

schoen · October 19, 2016, 11:33pm

Oh yeah, you’re right about that.

marcozeus · October 19, 2016, 11:37pm

what do you think I can do to solve it?

schoen · October 19, 2016, 11:42pm

I unfortunately don’t know about DirectAdmin; maybe someone else on this forum does?

Osiris · October 20, 2016, 7:49pm

All seems to be working now? On SSLDecoder as wel as SSLLabs.

marcozeus · October 20, 2016, 11:43pm

yes, but I did nothing to solve it.
This is very strange…

ahaw021 · October 21, 2016, 9:56am

hi macrozeus

was there a server restart?

some web servers require a restart before the installed certificates are used.

also if you are using a hosted provider that shares hosting amongst multiple clients their may have been

I can confirm it’s working now (green padlock)

I can also confirm that the certificate you pasted above is different from the certificate currently installed in your server so there has been a change (by someone for the better)

SERIAL of ceritificate Above:‎03 a5 ff bb a3 f1 4c eb 36 a4 b3 a0 ea 35 43 97 c1 22
SERIAL of certificate currently on website: 03:BA:B5:70:67:9B:CA:6E:50:85:80:0D:C6:2F:90:98:42:DB

marcozeus · October 21, 2016, 11:00am

Hi ahaw021,
yes, I restarted the server and it’s a dedicated server.
Do you think I have to restart it every time for a new SSL?

serverco · October 21, 2016, 11:22am

Normally no, you simply need to restart / reload your webserver ( apache / nginx)

ahaw021 · October 21, 2016, 11:29am

hi macrozeus

to clarify @serverco answer a little more

a server restart will restart the web server as well.

you don’t need to do a full server restart but you may need to reload your webserver.

For speed some webserver load the certificates into memmory and serve it from there. This is quite a common issue. The new cert is installed and the config is pointing to the right certificate however the server is still serving the old one.

Certificate serials are a good way of checking for this.

Using wappalyzer I can see you are using apache which is one of the servers that has this behaviour

marcozeus · October 21, 2016, 1:48pm

Thank you very much to both

system · November 20, 2016, 1:51pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
SSL_ERROR_BAD_CERT_DOMAIN Erro in Firefox Only Server	2	1747	July 17, 2017
Off topic: SSL_ERROR_BAD_CERT_DOMAIN from BestBuy? Help	2	840	May 27, 2017
Error code: SSL_ERROR_BAD_CERT_DOMAIN Help	5	3478	March 28, 2020
LE Certificate Error (Firefox only) Server	4	2759	January 11, 2016
Certification is not working in Firefox. Your connection is not secure Server	6	8693	October 27, 2017

Firefox only error

Related topics