certificate error

Brad Mettee bmettee at
Fri Mar 1 16:45:03 UTC 2013

On 3/1/2013 11:11 AM, Mark Felder wrote:
> On Fri, 01 Mar 2013 09:42:58 -0600, <fbsd8 at> wrote:
>> The fact remains, the ms/browsers do find the 
>> wedsite's  certificate invalid because the certificate ip address 
>> does not match the ip address the public dns points to.
> You can put a certificate on any IP address you want. It's not 
> embedded into the certificate. For the most part it only matters that 
> the CommonName on the certificate matches the hostname of the website 
> and the certificate chain is valid.

And in this particular case, the certificate is for and, and the browser is complaining because it's being used on

Their certificate should have been issued for * instead of 
just the main site name. Unfortunately I think all of the certificate 
issuers charge big $$$ for that type of cert......

Brad Mettee

More information about the freebsd-questions mailing list