SSL sert from Thawte after renewing does not work.

websmith

Verified User
Joined
Apr 6, 2008
Messages
8
Hello,

After renewing ssl certificate from Thawte it does not work. Address is http://my.granthost.org/
This site is hosted on dedicated ip. Could someone advise how to solve the problem?

In the log:
[Sun Jun 19 19:25:12 2011] [warn] RSA server certificate CommonName (CN) `my.granthost.org' does NOT match server name!?

What does it mean?

Output of phpinfo: http://my.granthost.org/kukaner_info.php

Regards, Dmitriy
 
Last edited:
Certificate appears to be working for me; only problem I see is that expires later this year, and not next year as I'd expect if you just renewed it.

Jeff
 
Thank you Jeff for reply. The strange thing is I do not see any security alert in Mozilla Firefox for Ubuntu 4.0.1 but there is security alert in Opera 11.10 and IE
 
If it's working on one browser but not another I'd investigate whether or not issuer (Thawte) requires an intermediate (chain) Certificate, and if so, if you've installed it. I strongly suggest you bring it up with Thawte customer service as it's not a DirectAdmin issue if it works in some browsers but not in others.

Jeff
 
I got reply from resellerclub:

“As we can observe that the intermediate CA certificates is installed incorrectly. I request you to, please re-install the CA certificate at your hosting provider's end. When you install CA certificate please install Thawte Cross Root CA and SSL123 Intermediate CA. For more details please refer
http://bit.ly/boGD3H

Could you please advice where to insert in my DirectAdmin box Cross Root CA and SSL123 Intermediate CA?
 
Last edited:
Have you checked the DirectAdmin help system? You should be able to call it from your SSL installation screen; it's here (site-helper.com); look for:

Step 4: Install the CA Root Certificate

Note that while all the intermediate Certificates need to be installed in that one window, one after the other, with no intervening spaces, we can't tell you the order; only your vendor can tell you that. Next time perhaps buy Certificates with installation from one of those of us who post here; search the advertising forum. We know how to do the installs :D.

Jeff
 
Back
Top