I have tried creating one certificate for one set and then another certificate for the other set. The entries keep mis-matching so that the forums give errors about being bound to the www certificate.
I tried creating individual certificates for every single entity separately. Those also give errors with the individual items like www suddenly being bound to a random other one like forums.
and so on that should all be secure. But when I tried to set up all those bindings in IIS, win-acme choked and said I had too many. So I had to take those all out again.
For now I would just like to have both my site and the forums to be alive and secure without one or the other giving security warnings.
Thank you for the suggestion rg305 - that is actually the way it is set up right now. I made one and only one certificate and chose all six of those names. When I go in to the binding for
This server could not prove that it is forum.bellaonline.com; its security certificate is from www.bellaonline.com. This may be caused by a misconfiguration or an attacker intercepting your connection.
was showing up as the name in the IIS interface, when I looked at the binding entry for the secure version of forum.bellaonline.com. I agree that looking from the browser interface, it would just say the forum.bellaonline.com was mismatched to the www.bellaonline.com entry.
To try to help troubleshoot I just went into mmc and installed the certificate plugin. Under web hosting / certificates I can now see the list of certificates. I changed the friendly name of the one which said:
3,2,10,9,8,11 2018/7/10 0:36:52 AM
To just say *.bellaonline.com
That didn’t help :).
But I do for some reason have multiple entries in here. Even though I cancelled and revoked everything before beginning again. Do they need to time out?
Aha I was restarting each site before but not the entire IIS system. I didn’t realize I needed to restart the entire IIS.
Also, once you showed me that the single certificate had all the various subdomains included in it, I deleted the other certificates so now I just have one. So maybe that helped too:
and so on and those were all conflicting with each other. So I will go do the same thing there, make one master certificate that has them all included. And that should do the trick there, too.
Thank you so much, I appreciate your help immensely!
