Google warning: SSL/TLS certificate does not include domain name

[sahsanu]

Hi @arpitmandliya,

@arpitmandliya

Can any help me with above warning. What is wrong with my SSL certificate

There is nothing wrong with your cert, it is ok. The mail received from Google refers to browsers and applications that don't support SNI like Java 6u45, IE8 in Windows XP, Android 2.3.7... pretty old technology.

So, the browsers and applications that don't support SNI, when trying to connect to your site, will receive a certificate only valid for *.web-hosting.com and web-hosting.com domains.

$ echo | openssl s_client -connect www.java2blog.com:443 2>/dev/null |openssl x509 -noout -text | grep DNS
            DNS:*.web-hosting.com, DNS:web-hosting.com

Browsers or applications using SNI will receive the right cert:

$ echo | openssl s_client -connect www.java2blog.com:443 -servername www.java2blog.com 2>/dev/null |openssl x509 -noout -text | grep DNS
                DNS:java2blog.com, DNS:www.java2blog.com

So, if your users don't use old browsers... there is nothing to worry about.

Cheers,
sahsanu