Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I purchased an SSL certificate from Comodo and have followed their (terrible) setup instructions.

I'm confident I have all the files in the right places, but browsers are still giving an error.

When I try to go on it says the certificate is only valid for ip-10-112-47-5.ec2.internal (a dynamic Amazon IP), although I do have a static "elastic" IP set up.

Do I have to reissue the certificate?

share|improve this question

2 Answers 2

Well, in addition to having the wrong domain, the cert presented has not been signed by a trusted CA.

You're still likely using the self-signed cert that shipped with the distro. You need to verify that your purchased cert has been installed correctly.

share|improve this answer
Also, make sure when you are generating the cert, you use the proper domain name and not xxxx.ec2.internal. – Bart De Vos May 25 '12 at 12:37
In the virtualhost section in httpd.conf I'm specifying the correct certificate file – Rory May 25 '12 at 12:45
Well then you need to ensure that the correct virtual host is catching these requests. – EEAA May 25 '12 at 12:49
grep -r -i ssl /etc/httpd/* or whatever to see all the SSL configurations – cjc May 25 '12 at 13:40

Sounds like when you created the CSR.. you setup the CN wrong.. You set it to the hostname on the server and not

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.