Two certificates are returned for a single domain

[PramodC]

My domain is: https://goo.gl/NA0d16

My operating system is (include version): Fedora 26

According to SSLlabs test tool https://goo.gl/Gs3jhA, my site has two SSL certificates instead of 1. I enabled HTTPS for two domains on the VPN with the same letsencrypt certificate.

Why two certificates returned when the client expects only 1?

[Osiris]

Previously, SSL Labs mentioned the second certificate is for the situation without SNI. But for some reason, they are leaving that piece of information away.

When I tested from the CLI, I get the same results:

• With SNI: openssl s_client -connect techwayz.com:443 -servername techwayz.com | openssl x509 -noout -text
  ->
  “X509v3 Subject Alternative Name: DNS:techwayz.com, DNS:www.techwayz.com”

• Without SNI: openssl s_client -connect techwayz.com:443 | openssl x509 -noout -text
  ->
  “X509v3 Subject Alternative Name: DNS:bestcellphones.xyz, DNS:techwayz.com, DNS:www.bestcellphones.xyz, DNS:www.techwayz.com”.

The latter certificate is probably the “default” certificate of your webserver. In any case, nothing to be worried about, because almost every browser nowadays supports SNI.

[PramodC]

thanks for the clarification!

[Osiris]

As an addition to my post above, I think the “No SNI” label is removed from your second certificate, because this second certificate is also valid for the tested domain!

Most of the time, this second certificate without using SNI is for another (set of) hostname(s) altogether, which would also trigger a “This site only works with SNI” warning at the top of the page. Perhaps the “No SNI” label on the second certificate also is limited to situations where the warning is present.