Table of Contents

HTTPS Certificate is not properly selected on virtual hosts with some browsers

Reproductible cases

Visit a SSL/TLS enabled website that is hosted on a virtual host with any application that uses SSL/TLS, but that does not support SNI. The virtual host certificate does not include the default server host name.

Here is a short list of platforms and clients that does not support SNI.

Description of the problem

When accessing a webpage with a browser or a software listed above, a SSL error may be triggered. It warns that the certificate does not matches the server name, displaying the default host name instead of the virtual host name.

Solutions

Include the server default host name in a SubjectAltName field when creating the virtualhost certificate signature request.