The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

AutoSSL providing incorrect SSL for a subdomain

Discussion in 'Security' started by madnoob2, May 3, 2017.

Tags:
  1. madnoob2

    madnoob2 Member

    Joined:
    Apr 18, 2017
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Croatia
    cPanel Access Level:
    Root Administrator
    Hello. I've just created a subdomain that will host my wordpress site (https://blog.mydomain.com)
    I've run AutoSSL and it has done it's job of assigning a SSL certificate to the subdomain. However the certificate is showing errors :

    The security certificate presented by this website was issued for a different website's address.

    I've run it on SSL checker , and I got the following issue :
    None of the common names in the certificate match the name that was entered (blog.mydomain.com). You may receive an error when accessing this site in a web browser.
    Common name: main.mydomain.com
    SANs: main.mydomain.com, www.main.mydomain.com
    Valid from April 16, 2017 to April 17, 2018
    Serial Number: serialnumberedited
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: cPanel, Inc. Certification Authority

    The main.mydomain.com is the domain of my cPanel. When I run the SSL checker for my domain (mydomain.com) it works fine , common name is mydomain.com and SANs are also mydomain.com .
    Why was the certificate issued with main. common name and SANs? I think that is the problem , but then again I have no ideas how SSL work.
     
    #1 madnoob2, May 3, 2017
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    36,999
    Likes Received:
    1,275
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @madnoob2,

    We introduced new functionality in cPanel version 64 to better establish which domains to add to the certificate first. Here's the corresponding quote from the cPanel 64 Release Notes:

    This is further explained on the following document:

    Which Domain Does AutoSSL Add To The Certificate First

    Could you verify which version of cPanel is installed on this system? Also, how are you reproducing the above error message?

    Thank you.
     
    #2 cPanelMichael, May 4, 2017
  3. madnoob2

    madnoob2 Member

    Joined:
    Apr 18, 2017
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Croatia
    cPanel Access Level:
    Root Administrator
    Hi Michael.
    I've got version 64.0 (build 19) installed currently. That error is reproduced when visiting the https://blog.mydomain.com on IE. Mozilla also reports it , but can't remember the exact error since I added the certificate exception for the blog in Mozilla.
     
    #3 madnoob2, May 4, 2017
  4. madnoob2

    madnoob2 Member

    Joined:
    Apr 18, 2017
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Croatia
    cPanel Access Level:
    Root Administrator
    The issue seemed to resolve itself after rebooting the server.
     
    #4 madnoob2, May 4, 2017
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    36,999
    Likes Received:
    1,275
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    It's possible the issue was related to cached data, however it's difficult to know for sure since the reboot addressed the issue. Let us know if you encounter any additional problems going forward.

    Thank you.
     
    #5 cPanelMichael, May 5, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - AutoSSL providing incorrect
  1. CODE grunt

    AutoSSL inadvertently port sniffing on sub-domains

    CODE grunt, Aug 15, 2017 at 12:52 PM, in forum: Security
    Replies:
    1
    Views:
    30
    cPanelMichael
    Aug 15, 2017 at 1:11 PM
  2. amalendukundu

    AutoSSL is including primary domain with addon domain in certificate

    amalendukundu, Aug 13, 2017 at 2:20 AM, in forum: Security
    Replies:
    3
    Views:
    83
    cPanelMichael
    Aug 15, 2017 at 10:59 AM
  3. itmonitor

    WHM server subdomain not added to AutoSSL

    itmonitor, Aug 12, 2017 at 4:15 PM, in forum: Security
    Replies:
    1
    Views:
    51
    cPanelMichael
    Aug 14, 2017 at 1:11 PM
  4. My1

    AutoSSL ignore subdomains that dont pass DV check

    My1, Aug 12, 2017 at 4:58 AM, in forum: Security
    Replies:
    6
    Views:
    63
    cPanelMichael
    Aug 14, 2017 at 1:39 PM
  5. cseufert

    SOLVED AutoSSL generating certificate with multiple TLD's

    cseufert, Aug 11, 2017 at 1:23 AM, in forum: Security
    Replies:
    5
    Views:
    71
    cPanelMichael
    Aug 16, 2017 at 11:00 AM

Share This Page