This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Əgər kömək lazımdırsa lütfən yeni sual verin.

Subdomain wildcard certificate not recognized

  • 1 cavab
  • 1 has this problem
  • 2 views
  • Last reply by guigs

gpin
gpin
more options

We have created a self signed CA certificate that verifies a sub domain "*.dev.mydomain.example", NOT as in the more common case the whole domain "*.mydomain.example".

Firefox does not properly recognize a sub domain of this wildcard, e.g. cms.dev.mydomain.example.

The error message is:

cms.dev.mydomain.example uses an invalid security certificate. The certificate is only valid for *.dev.clearsense.at (Error code: ssl_error_bad_cert_domain)

using Firefox 36.0.4 on Mac OS X 10.9.5

We have created a self signed CA certificate that verifies a sub domain "*.dev.mydomain.example", NOT as in the more common case the whole domain "*.mydomain.example". Firefox does not properly recognize a sub domain of this wildcard, e.g. cms.dev.mydomain.example. The error message is: -------------------------------------------------------- cms.dev.mydomain.example uses an invalid security certificate. The certificate is only valid for *.dev.clearsense.at (Error code: ssl_error_bad_cert_domain) -------------------------------------------------------- using Firefox 36.0.4 on Mac OS X 10.9.5

All Replies (1)

guigs
guigs
more options

Does the cert have an OV? https://wiki.mozilla.org/CA:Problematic_Practices#Wildcard_DV...

For alternatives see also: http://stackoverflow.com/questions/29.../when-does-firefox-throw-ssl-error-bad-cert-domain-with-a-wildcard-certificate