Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

My SSL certificate works on all modern browsers (IE 9+), but does not work on IE 8.

With modern browsers, the SSL certificate for my domain is used, but IE 8 wants to use the SSL certificate for my PaaS, resulting in a domain mismatch.

enter image description here

How do I fix this? Is this an issue with my PaaS?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

This is being caused by a problem with your server configuration for your SSL:

When I checked the SSL for your domain funraise.me using this SSL Installation Diagnostics Tool, it indicates the DNS resolves to IP address 107.21.216.112

When I used this tool to check the SSL for the IP address 107.21.216.112 however, it listed the domain onmodulus.net (which redirects to modulus.io).

Also, when https://107.21.216.112 is typed into any browser (not just IE 8), the certificate error states that the certificate is issued to onmodulus.net

SSL's require a unique static IP for each domain they're issued to (with the exception of UCC SSL's, which can have more than one IP). Therefore, I would suggest contacting your provider (modulus.io) to review your server's SSL configuration.

share|improve this answer
    
i have an a record on their load balance, which is that IP address. let me see what they say. –  Jonathan Ong Jul 11 '13 at 8:32
    
do you know why this only affects ie8, at least for me? –  Jonathan Ong Jul 11 '13 at 8:32
    
It affected my IE 8 on Win XP too, which lacks SNI support, creating an HTTPS problem when IP's are shared (not dedicated). See this for more: Understanding Certificate Name Mismatches –  dan Jul 11 '13 at 8:43
1  
It could be that onmodulus.net added your domain to their UCC SSL, which might require reissuing when they add domain names for this problem. See "Background of the problem" here: Server Name Indication –  dan Jul 11 '13 at 8:59

Normally IE compatibility is implemented via some special comments in your site header e.g.

<!--[if lt IE 9]><script src="ie8.js"></script><![endif]-->

If you have a discrepancy between IE8 and newer browsers, it might be worth checking to see if anything like this has crept into your html.

share|improve this answer
2  
what does this have to do with ssl? –  Jonathan Ong Jul 11 '13 at 5:35
    
I was wondering if there might be some external css or js being included from within a https request. I had something similar where an external reference to a google font (which was accessed via http) was being embedded in one of my sites htmls in a similar way. –  steve Jul 12 '13 at 7:37

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.