There is no root domain in the wildcard certificate

Help
1

My website: www.shirosaki-hana.fun
I have apply a wildcard certificate. But I find there is no root domainin the certificate. So if I visit the shirosaki-hana.fun ...

image
image708Ă—514 16.9 KB

1 Like
2

image
image470Ă—655 11.9 KB

1 Like
3

Yes, your wildcard certificate only covers subdomains. You need to also include shirosaki-hana.fun as a Subject Alternative Name (SAN). With certbot I believe this is done using certbot --expand -d *.shirosaki-hana.fun,shirosaki-hana.fun. Note that you will need to perform TXT validation for both identifiers which will mean your TXT record either has to hold two values or you need to validate one then move onto the other.

2 Likes
4

Now I have pass the TXT validation, but I have another trouble:

{
    “type”: “urn:ietf:params:acme:error:unauthorized”,
    “detail”: “Error finalizing order :: Order includes different number of names than CSR specifies”,
    “status”: 403 
}

I am confused about how to generate a CSR correctly.

1 Like
5

How do you generate the CSR files?
[maybe someone can spot the needed modification to that step]

1 Like
6

It would also help if we knew which ACME client software you are using. Not certbot?

1 Like
7

OpenSSL

1 Like
8

My Python program

1 Like
9

Could you provide the complete command used?
Otherwise, my only response can be: You are using the right program.

1 Like
10

image

1 Like
12

Here are some instructions I found online on how to add the multiple names into CSR (SAN field):

1 Like
13

I'm puzzled here.. What are you, in the grand scheme of things, trying to achieve? There are literally more than a dozen ACME clients out there. What's the reason why you're using OpenSSL to generate the CSR in combination with "[your] Python program", whatever that may be?

2 Likes
14

image
image1366Ă—728 33.7 KB

2 Likes
15

If that can be automated, then you are done :slight_smile:
Cheers from Miami :beers:

#FreeCUBA

1 Like
16

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.