1

I obtained a free CA certificate from https://www.startssl.com/.

I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under Domain Validations.

I configured Apache (running on Centos) per the instructions, and can access https://example.com/ without a "Untrusted Connection" warning, but when accessing https://www.example.com/, I get the warning.

How can I either rewrite https://www.example.com/ to https://example.com/, or configure the certificate to also work with http://example.com/?

1 Answer 1

1

You were meant to obtain an SSL certificate for www.example.com, not example.com.

Add subdomain in StartSSL certificates wizard

When you do this, StartSSL will give you a certificate that works for both hostnames.

Ready to create certificate

6
  • Thanks Michael. My only domain listed is example.com, and it displays Select the top target domain name for your certificate.. Do I need to validate www.example.com? When attempting to do so, it says I cannot validate a subdomain. May 26, 2014 at 13:29
  • You should have already validated your domain. I'm talking about obtaining the SSL certificate! May 26, 2014 at 13:35
  • I validated example.com. I requested a certificate for example.com. When proceeding, it states You must add one sub domain to this certificate. The base domain example.com will be included by default in the Alt Name section.. I entered www.example.com. But www.example.com results in the warning. May 26, 2014 at 13:38
  • I assume rewriting is not an option for me since the user will get the warning before it hits my server, right May 26, 2014 at 13:40
  • What warning are you talking about now? May 26, 2014 at 13:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .