× SSL247 joins forces with Sectigo CA - Find Out More...
Our accreditations and awards:
Cookies
0 items Total $0

Knowledge Base

  

Problem

You may see the following error message

mismatch name "ssl_bad_cert_domain"

Cause

1. The issued certificate was issued for another domain other than the one requested. This error is presented by a browser when accessing a website.

2. The common name should be exactly the same than the name displayed in the URL bar. Or simply, the domain name was mistyped/misspelled in the request. It is also possible that a self-signed certificate be installed instead of a server-specific security certificate issued by a certificate authority (like VeriSign or GlobalSign).

Examples on the most used browsers:

  • Google Chrome:"You attempted to reach www.site.com, but instead you actually reached a server identifying itself as othersite.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of www.site.com. You should not proceed."
  • Internet Explorer 6 :"The name on the security certificate is invalid or does not match the name of the site"
  • Internet Explorer 7 :"There is a problem with this website's security certificate."
    "The security certificate presented by this website was issued for a different website's address."
  • Firefox 3 : "www.example.com uses an invalid security certificate."
    "The certificate is only valid for the following names: www.otherdomain.com, otherdomain.com"
  • Safari 3 :"If you suspect the certificate shown does not belong to "www.site.com", please cancel the connection and notify the site administrator.
    "This certificate is not valid (host name mismatch)"

Resolution

Order a SAN/UC Certificate which is designed to secure multiple domains in one certificate (Including fully-qualified domain names, hostnames, server names or IP addresses) like example.com, example.local, 208.77.188.166, 10.1.1.7.
To check your certificate for a name error, we recommend using our SSL HealthCheck by entering the domain in question into the box "Server Address."

Was this information Useful?
Comments

Privacy Policy