certificate error

Mark Felder feld at
Fri Mar 1 16:58:17 UTC 2013

On Fri, 01 Mar 2013 10:40:48 -0600, Brad Mettee <bmettee at>  

> On 3/1/2013 11:11 AM, Mark Felder wrote:
>> On Fri, 01 Mar 2013 09:42:58 -0600, <fbsd8 at> wrote:
>>> The fact remains, the ms/browsers do find the  
>>> wedsite's  certificate invalid because the certificate ip address does  
>>> not match the ip address the public dns points to.
>> You can put a certificate on any IP address you want. It's not embedded  
>> into the certificate. For the most part it only matters that the  
>> CommonName on the certificate matches the hostname of the website and  
>> the certificate chain is valid.
> And in this particular case, the certificate is for and  
>, and the browser is complaining because it's being used on  
> Their certificate should have been issued for * instead of  
> just the main site name. Unfortunately I think all of the certificate  
> issuers charge big $$$ for that type of cert......

More information about the freebsd-questions mailing list