Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have successfully configured an Extended-Validation Certificate on an Azure Website following this article:


The main (non-technical) stakeholder of the web application went through great lengths to validate that our site is secure. He went to this site to check the validity of our SSL: http://www.whynopadlock.com/

The site throw the following error: `SSL verification issue (Possibly mis-matched URL or bad intermediate cert.). Details: ERROR: no certificate subject alternative name matches``

The certificate is installed using IP Based SSL instead of SNI. This is done this way because some site visitors still use Internet Explorer 8 on Windows XP, which has no support for SNI and throws a security warning.

Is my certificate correclty installed? I received three .CRT files from my SSL provider:

  • PrimaryIntermediate.crt
  • SecondaryIntermediate.crt
  • EndCertificate.crt

This is how I exported our certificate as a .PFX file to Azure:

openssl pkcs12 -export -out myserver.pfx -inkey myserver.key -in myserver.crt

share|improve this question
What does myserver.crt contain? If all three certificates, in what order? –  Mathias R. Jessen Jan 10 '14 at 0:12
It contains only the end certificate –  amhed Jan 10 '14 at 5:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.