At one time our company hosted our own blog which we hosted with our wildcard cert for the domain, *.example.com
. We moved our company blog to Hubspot and the team at Hubspot setup a second SSL cert for www.example.com
for the Hubspot hosted blog (I have no idea why this all happened before I started here).
We are now having an intermittent issue with our apex domain https://example.com. Sometimes it resolves fine but sometimes in Chrome you get the scary "Your connection is not private" warning. Hubspot's response was to have us create a redirect with EasyRedirect, which I have done, but that hasn't resolved it.
If I curl -vL example.com
it works fine but curl -vL https://example.com
gives me SSL: no alternative certificate subject name matches target host name 'example.com'
Is there something I can do about these competing SSL certs for our apex domain?
example.com
for your AD domain? If yes, then you are probably getting the wrong IP occasionally, and hitting a DC. In the domain used for AD, the apex of the zone is owned by the domain.nslookup example.com
is it reporting multiple IPs?server { listen 80 default_server; listen [::]:80 default_server; server_name example.com www.example.com; return 301 https://www.example.com$request_uri; }
Non-authoritative answer
is reporting 2 IPs