Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

One of our clients receives this error when attempting to access our app. The error message is:

"You attempted to reach, but instead you actually reached a server identifying itself as This may be caused by a misconfiguration on the server or by something more serious ... "

The only request in our application that goes to is a javascript file in our header (format:

I have been unable to duplicate this issue locally, and no other users are reporting this issue. I'm convinced it is a setting on the client's machine, but after trolling around in Chrome's content settings/certificate management pages, I am unable to figure out what might be causing this to only happen to one specific client.

(Note, all of the client's machines are affected. Maybe its some antivirus configuration, or a problem with their router?)

share|improve this question
Hi Mike. The reason the error is occurring is simple - the browser is making an SSL connection to and is getting a certificate for Are both sites the same - as in, serving the same content, with one configured as an alias of the other in the webserver config? – Andy Smith Nov 15 '11 at 15:59

Use PORT or IP based virtual hosting. HOSTNAME based virtual hosting is not compatible with using SSL on both hosts.

share|improve this answer
Yep. SNI is not ready for prime time yet. – David Schwartz Nov 15 '11 at 17:04

They're running Chrome on Windows XP, which doesn't support SSL SNI when running on XP because it uses the MS crypto library. (Update: Chrome versions 6.0 and newer on Windows XP do support SNI) It'll reproduce in that situation (or with IE on XP, as well). For a more complete list of browser support for SNI, see this Wikipedia section.

For working clients, they're accessing a resource within and, because they support SNI, they're getting the cert presented by the web server.

For this Windows XP client, it's requesting a resource from and getting the default certificate for that SSL port; the cert, which is invalid for that name.

What's your web server, and how are its SSL listeners configured?

share|improve this answer
FYI, Chrome on XP does support SNI (from version 6 and up). We're now at version 24 and with Chromiums auto-update functionality you won't encounter any clients running Chrome 5 or lower. Did you mean IE? IE8 on WinXP does not support SNI. Tested up to Safari 5.1 (XP) and it did not work either. The Wikipedia article on browser support is pretty accurate – Lekensteyn Jan 29 '13 at 21:53
@Lekensteyn You're absolutely right, just this answer showing its age. I'll update it. – Shane Madden Jan 30 '13 at 0:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.