This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Subdomain wildcard certificate not recognized

  • 1 reply
  • 1 has this problem
  • 2 views
  • Last reply by guigs

gpin
gpin
more options

We have created a self signed CA certificate that verifies a sub domain "*.dev.mydomain.example", NOT as in the more common case the whole domain "*.mydomain.example".

Firefox does not properly recognize a sub domain of this wildcard, e.g. cms.dev.mydomain.example.

The error message is:

cms.dev.mydomain.example uses an invalid security certificate. The certificate is only valid for *.dev.clearsense.at (Error code: ssl_error_bad_cert_domain)

using Firefox 36.0.4 on Mac OS X 10.9.5

We have created a self signed CA certificate that verifies a sub domain "*.dev.mydomain.example", NOT as in the more common case the whole domain "*.mydomain.example". Firefox does not properly recognize a sub domain of this wildcard, e.g. cms.dev.mydomain.example. The error message is: -------------------------------------------------------- cms.dev.mydomain.example uses an invalid security certificate. The certificate is only valid for *.dev.clearsense.at (Error code: ssl_error_bad_cert_domain) -------------------------------------------------------- using Firefox 36.0.4 on Mac OS X 10.9.5

All Replies (1)

guigs
guigs
more options

Does the cert have an OV? https://wiki.mozilla.org/CA:Problematic_Practices#Wildcard_DV...

For alternatives see also: http://stackoverflow.com/questions/29.../when-does-firefox-throw-ssl-error-bad-cert-domain-with-a-wildcard-certificate