I just got a PositiveSSL cert from Comodo and then followed the steps here
to setup Apache. When I created the CSR I had specified mydomain.com as the FQDN. However, when I restart Apache and examine the error logs I see the message
RSA certificate configured for example.com:443 does NOT include an ID which matches the server name
openssl x509 -in server.crt -noout -subject
gives me the output
subject = /OU=Domain Control Vaidated/OU=PositiveSSL/CN=example.com
My apache2.conf file contains
<VirtualHost ip:443> ServerAdmin email@example.com DocumentRoot /var/www/html/ ServerName example.com ServerAlias www.example.com SSLEngine on SSLCertificateFile /etc/apache2/ssl/example.com.crt SSLCertificateKeyFile /etc/apache2/ssl/example.com.key SSLCACertificateFile /etc/apache2/ssl/example.com.cer
For good measure I have tried concatenating (in that order)
on their own and also with (last) AddTrustExternalCARoot.crt.
It makes no difference. I have to admit that I am fumbling in the dark here. I'd be most grateful to anyone who might be able to help here.