Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have my chained certificate from Dreamhost set up and working for all browsers. I have 2 sites with 2 certs from dreamhost, example.com and sub.example.com.

All browsers are fine with the certs on both sites, except IE6, 7, and 8 (on XP, haven't tried other OSes). IE is fine with example.com, but it thinks that sub.example.com is trying to use the example.com cert.

Looking at the fingerprints in Firefox 3, Firefox is using the right cert for each domain. Looking at the fingerprints in IE, it's using the example.com cert and not the sub.example.com cert. (this part is really weird to me -- IE is going out of its way to go up a domain level and get the wrong cert?)

I'm using nginx.

Let me know if you'd like any more info. Thanks!

share|improve this question

2 Answers 2

up vote 6 down vote accepted

Just figured this out -- I forgot to give the subdomain its own IP address.

More info:

http://nginx.org/en/docs/http/configuring_https_servers.html#sni

http://en.wikipedia.org/wiki/Server_Name_Indication

share|improve this answer

Who is the CA (certificate authority) for the cert? It's possible IE does not have the chain imported.

Another thing to consider, are you running IE(x) on a different machine? Is the time correct? If the system time is wrong, the cert may appear to be expired.

share|improve this answer
    
Never mind, looks like you got it! –  ben lemasurier Nov 18 '10 at 19:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.