Re: tied to a domain?

From: Matjaz Ladava (matjaz_at__nospam_ladava.com)
Date: 06/19/03 

Date: Thu, 19 Jun 2003 10:02:27 +0200

Certificates are verified using certificate common name (cn) field. This
must match domain name (www.fred.org) if this field doesn't match, then you
are given a warning, that the name on the certificate is not valid. For
testing purposes it is OK and you could ignore this. So issue your
certificate to www.gred.org and don't worry. 

-- 
Regards
Matjaz Ladava, MCSE (NT4 & 2000)
matjaz@ladava.com
http://ladava.com
"michela rossi" <michela_rossi66@hotmail.com> wrote in message
news:1ed550fd.0306181507.6bf14cc2@posting.google.com...
> Hi,
> Wonder if anyone can help.
>
> I have a domain, e.g. www.fred.org that is currently live. I have a
> new production server on an IP e.g. 1.2.3.4 which the domain will be
> moved to.
>
> I have a couple of folders that I wish to SSL protect (this is in
> ASP.NET), and I wish to both test the SSL cert and the setup of the
> folders. These are on the new production server.
>
> Is it possible to get an SSL cert that is both set to www.fred.org OR
> the IP so that I can run it on the production server in advance of the
> domain being switched over? Or is an SSL cert tied solely to a domain?
> Or is it that one can tie either to an IP or to a domain?
>
> I've been told the answer is tied solely to a domain, but I'm not sure
> of this. Anyone know of a company that will allow generation of a cert
> tied to a domain or IP?
>
> Second query: if I setup this cert on the production server before the
> domain is switched to pt to the production server, and I setup a SSL
> folder - what will happen when you browse to it? Will the user simply
> get an error message saying "incorrect key" or will IIS/ASP.NET simply
> not generate the page?
>
> Any help gratefully received,
> Thanks, Michela.

Relevant Pages

  • Re: BizTalk.SendHTTPX.1 server certificate issue
    ... Usually in the error log, below the Request information, you should see a ... The certificate chain was issued by an untrusted authority. ... Did your partner's production server name/url changed? ... So I can assure that the root certificate was installed correctly on my ...
    (microsoft.public.biztalk.server)
  • Re: Installing an existing GoDaddy SSL on another SBS box....
    ... Certificate' and then 'Assign an existing certificate'. ... I've got a functional GoDaddy SSL cert installed and working on my ... vanilla install so far. ... I got an error that there was no pending request for the ...
    (microsoft.public.windows.server.sbs)
  • Re: Create certificate with makecert for LDAPS on a DC ?
    ... It helps avoid having to know the more confusing options with makecert for generating a proper SSL cert ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... but I am not able to create my self-signed certificate with certreq as I dont have any CA in my domain to submit the "request.req" file. ... MVP Windows Server - Directory Services ...
    (microsoft.public.windows.server.security)
  • Re: OWA goes to RWW...
    ... then your ssl cert needs to exactly match the name you are ... "There is a problem with this websites security certificate". ... I just did some work on a buddy's SBS server setting up Exchange, ... access OWA internally successfully. ...
    (microsoft.public.windows.server.sbs)
  • Re: SSL CSR questions
    ... From what I understand, once the SSL cert is issued, you must install it on the specific IIS server that generated the CSR. ... can't you export the private key used to generate the CSR and then import it into another IIS server? ... Let's say I generated the CSR on IIS-01 and before I received the SSL cert back, IIS-01 started having some hardware problems and I decided to move all my sites to IIS-02. ... You need the original certificate, ...
    (microsoft.public.windows.server.security)