Incorrect SSL Certificate

[BillyS]

I have several domains on the server and all work except for one. What happens is upon automatic renewal through DA / LetsEncrypt, the certificate shows the Common Name (CN) as:

ftp.domain.com

Whereas the other sites show as the naked domain (which is what I want)

domain.com

When I manually renew the certificate for the ftp.domain.com site, it renews correctly as the naked domain. Any idea why this might be happening?

 

[Zhenyapan]

maybe you have configured generate for domain and subdomains, and at moment of generation domain wasn't resolved, but subdomain was. some DNS issues maybe.

 

[BillyS]

some DNS issues maybe

I took a look and all the domains have the same configuration for DNS. I was wondering if it was the order the subdomains appear in a DA file that might be different.

 

[Richard G]

That could be the case. Had something similar before, where it was mail.domain.com instead of domain.com. I changed the order in some file which DA generated for the request, just don't remember where/what that file was at the moment and F1 racing starts in 5 minutes so no time to search.

You could try there or otherwise remove the SSL certificate and request new one, selecting the right order might fix it. I don't see the issue anymore since we now always use wildcard certificates.

 

[Richard G]

I realized Zimbra is still using the old certificate.

You had best create a new thread for this. Because your cause is totally different. Most of us do not use Zimbra.
We use either Letsencrypt or ZeroSSL which is supported by Directadmin.