Re: certs and a secure website

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 05/05/04 

Date: Wed, 5 May 2004 22:21:58 +1000

When you create the certificate request, you are asked for a "common name".
This must match, exactly, the name that is used to access the site.

So, if you access the site as http://server then you must enter "server" as
the common name when requesting the cert. If you access the site as
http://www.mycompany.com then you must enter www.mycompany.com as the name
when you request the cert.

Cheers
Ken

"Allan Ackerman" <anonymous@discussions.microsoft.com> wrote in message
news:839997E8-231A-4A75-89D3-47E4E678FDCA@microsoft.com...
: I have set up a standalone root CA and have placed the required
certificates in the needed stores. I assigned the certificate through IIS5.
When I try and connect via https I get a message that the certificate date
is OK and that it is trusted. But I get a warning that the name on the
certificate it invalid or does not match the name of the site.
:
: When I hit do you want to proceed I go to the site and https is working
:
: How do I need to request the certificate to get this error message to go
away -- I have tried the FQDN of the machine and the name of the site when
requesting via the advanced form using a server authenication certificate
and neither work
:
: Thanks
: Allan Ackerman
:

Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: IIS / SSL + Pages not Loading (HTTPS)
    ... situation and they argued that we had to buy one cert for each server ... > The browser request has to match the registered common name exactly. ... >>allow us to create or request more than one certificate with the same ...
    (microsoft.public.inetserver.iis.security)
  • Re: Cannot request computer certificate.
    ... request a computer certificate for about 9 months. ... and verify that you can get a computer/server certificate from it. ... List of NetBt transports currently bound to the Redir ... DNS Host Name: srvr3.domain.com ...
    (microsoft.public.windows.server.security)
  • RE: SIMple SSL question ??
    ... OK - i would also delete a cert request file lying around. ... But a certificate is a pub key + extra info. ... That said - if someone compromises the server he will also find a way to retrieve the private key. ... traffic between the initial web server and the client. ...
    (microsoft.public.dotnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
Loading