4

I received this warning from Google Webmaster Tools. I have SSL for www and non-www but they are in different SANS. Would that cause a problem?

SSL/TLS certificate does not include domain name https://www.example.com/

Google has detected that the current SSL/TLS certificate used on ... does not include ... domain name. This means that your website is not perceived as secure by some browsers. As a result, many web browsers will block users accessing your site by displaying a security warning message. This is done to protect users’ browsing behavior from being intercepted by a third party, which can happen on sites that are not secure.

1

Just saying your SSL Certificate does not bear your domain name which most browsers won't load it. Called Common Name

The Common Name is typically composed of Host + Domain Name and will look like "www.yoursite.com" or "yoursite.com". SSL Server Certificates are specific to the Common Name that they have been issued to at the Host level. The Common Name must be the same as the Web address you will be accessing when connecting to a secure site. For example, a SSL Server Certificate for the domain "domain.com" will receive a warning if accessing a site named "www.domain.com" or "secure.domain.com", as "www.domain.com" and "secure.domain.com" are different from "domain.com". You would need to create a CSR for the correct Common Name. When the Certificate will be used on an Intranet (or internal network), the Common Name may be one word, and it can also be the name of the server.

More info

  • Thanks for your answer. But i still have questions. Well, i have 60 domains and bought 2 different certificates, one for www and one for non-www. Since all 60 domains in the SAN there is only 1 domain which matches to Common Name. so i will get this warning from google for 59domains ? Will eveyone who uses SAN for multiple domain get the same warning from Google? – Şükrü Can Dec 6 '15 at 9:11
  • No, SAN is Subject Alternative Name - used for adding multiple Common Names to a certificate. If the domains are in SAN; they won't receive warning. – Jajo Dec 6 '15 at 14:14
  • I see the same Common Name when i check other domains in the SAN. If the hosting company made a misteke when they installed certificate within server? or the problem is related with CSR? – Şükrü Can Dec 6 '15 at 14:30
  • You'll see same CN but different SAN – Jajo Dec 6 '15 at 17:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.