We're serving the web service using nginx.
A client has established a CNAME record pointing from their subdomain:
sub.example1.com to their subdomain on our domain
sub.example2.com (secured with a wildcard SSL certificate)
Currently, when you attempt to view:
sub.example1.com, the error:
The certificate is not valid (host name mismatch). is displayed and the mismatch error must be ignored to continue.
I have attempted generating a SAN certificate for the subdomain
sub.example1.com and serving it separately, but they are really viewing
sub.example2.com and this results in the same error.
Is it possible for us to add a SAN to our wildcard certificate to avoid this mismatch error?
Are there any other possible solutions to resolve the mismatch?
Is it possible for us to secure this secondary subdomain on the same certificate or chain them?
EDIT Main nginx.conf, sites-enabled/sub.example1.com and example2.com config example: http://pastebin.com/7AKLag4w
With the above configuration, I am still receiving a mismatch host name certificate error.
curl -I results in:
curl: (60) SSL certificate problem: Invalid certificate chain
The sub.example1.com certificate was created with
letsencrypt including the
sub.example2.com SANs, while the
example2.com.crt was created by a standard issuing authority as a wildcard ssl certificate.