0

I bought a SSL certificate from Globalsign (AlphaSSl). According to their site, all certificates secures both www and non-www.

But when I go to https://www.kanzan.se, I get invalid SSL certificate (only valid for kanzan.se).

What have I done wrong?

Improve this question
1

Your domain isn't loading for me, but, did you specify www.kanzan.se as a SubjectAlternativeName on the certificate request, or use the wildcard function?

https://support.globalsign.com/customer/portal/articles/1674632-add-or-remove-subject-alternative-names

Improve this answer
2
  • Yes, this is possible too. Some certificate issuers don't add the www. hostname automatically, and require you to specify it explicitly. – Michael Hampton Jul 6 '18 at 21:34
  • Correct. AlphaSSL requires the SubjectAlternativeName to be specified in the CSR subjectAltName=DNS:example.com,DNS:www.example.com. if using openssl. – Gmck Jul 6 '18 at 21:48
2

You didn't do anything wrong; AlphaSSL did. Your certificate is only valid for kanzan.se, and not www.kanzan.se. Contact them to have the certificate fixed.

Certificate Viewer: kanzan.se

Improve this answer
2
  • I added www.kanzan.se as a A record to the DNS, could that help? – user2908112 Jul 6 '18 at 21:28
  • 2
    @user2908112 It doesn't make any difference. The problem is that the certificate never included www.kanzan.se. It must be reissued. – Michael Hampton Jul 6 '18 at 21:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.