I really can't make disappear mismatch errors for SSL

[Bibi40k]

Hi,
i found this subject so many times, i read ten's of comment and no success

First of all, SNI works and all certs are accepted by all email clients and browsers.

The only think i hate is when i check mail.domain.com on https://www.ssllabs.com/ or https://www.sslshopper.com/ it gives me the mismatch error and returns hostname.server.com. That cert i requested only for the server with

./letsencrypt.sh request_single `hostname` 4096

If i check for domain.com everything is green and returns domain.com,mail.domain.com,ftp.domain.com,webmail.domain.com,www.domain.com which is correct and generated at user level.

Services:
DirectAdmin 1.53.2
Exim 4.91
dovecot 2.3.2.1 (0719df592)

Config files:
directadmin.conf
SSL=1
enable_ssl_sni=1
mail_sni=1

Note:
i've checked both on domains managed by admins (not "admin" user) and regular users.

I think i'm going crazy What am i missing ?

Thank you very much.

 

[Richard G]

I think i'm going crazy What am i missing ?

I think these tests are in normal mode only testing web domains, not mail domains which is a difference. So you can test domain name or servers hostname on ssllabs.com
Not a subdomain like which in fact mail.somedomain.com also is.
And I doubt very much that your server's hostname is mail.domain.com or is it? So I have the same issue on ssllabs.com when using subdomains (ftp, mail, smtp).

However, a test on sslshopper.com works, did you test this way?
https://www.sslshopper.com/ssl-checker.html
then fill in:
mail.domain.com:465

and if everything should be green.

If not, something else is missing.

 

[Bibi40k]

You're right, on www.sslshopper.com everything is green when i check mail.domain.com:993, on www.ssllabs.com it says port is not supported.

hostname is named da1.domain.com

Thank you

 

[alinajafi]

hi after installing DA I dont change the default nameserver it was https://server-185-252-29-4.da.direct
so after change still the ssl sert is for https://server-185-252-29-4.da.direct

 

[alinajafi]

 

[Active8]

Your DNS and hostname is still wrong, please search on this forum. explained and solved many times.
Please don't necro post, this thread is from 2018 !

 

[alinajafi]

Your DNS and hostname is still wrong, please search on this forum. explained and solved many times.
Please don't necro post, this thread is from 2018 !

can you send me link if you pls?

 

[Richard G]

can you send me link if you pls?

Start a new thread for your problem, and search forum please.