Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have my chained certificate from Dreamhost set up and working for all browsers. I have 2 sites with 2 certs from dreamhost, and

All browsers are fine with the certs on both sites, except IE6, 7, and 8 (on XP, haven't tried other OSes). IE is fine with, but it thinks that is trying to use the cert.

Looking at the fingerprints in Firefox 3, Firefox is using the right cert for each domain. Looking at the fingerprints in IE, it's using the cert and not the cert. (this part is really weird to me -- IE is going out of its way to go up a domain level and get the wrong cert?)

I'm using nginx.

Let me know if you'd like any more info. Thanks!

share|improve this question
up vote 8 down vote accepted

Just figured this out -- I forgot to give the subdomain its own IP address.

More info:

share|improve this answer

Who is the CA (certificate authority) for the cert? It's possible IE does not have the chain imported.

Another thing to consider, are you running IE(x) on a different machine? Is the time correct? If the system time is wrong, the cert may appear to be expired.

share|improve this answer
Never mind, looks like you got it! – ben lemasurier Nov 18 '10 at 19:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.