Print

Print


We always found subject alternative names to be helpful. Much cheaper than wildcard. 

BTW while we are on the subject, has MSU explored getting its own publicly recognizable CA? 

Joshua Wortz
RHCT - RHEL5 | MCSE - 2K3 | MCTS - Exchange 2007 | MCTS - Vista - Configuration | MCDST
Systems Administrator
Michigan State University
College of Agriculture and Natural Resources
[log in to unmask]
517.588.9344 (Cell)
517.353.4890 x232 (Office)


-----Original Message-----
From: Alexander Hawley [mailto:[log in to unmask]] 
Sent: Monday, July 12, 2010 11:49 AM
To: [log in to unmask]
Subject: Re: [MSUNAG] www. required on URLs?

> angel ... invalid certificate

This is pretty common.

They ordered a cert for angel.msu.edu, but serve both from the same IP. SSL doesn't know about hostnames, so www.angel.msu.edu get's a bad cert.

This is hard to fix without splitting IP addresses (not advised).

Or buying a wildcard cert (strongly advised).