Certificate name mismatch

"To prevent browser warnings, use an SSL certificate with a common name or subject alternative name that contains the fully-qualified domain name of the server that hosts the certificate."

Problem

If the domain name (FQDN) in the TLS/SSL certificate doesn't match the domain name displayed in the browser's address bar, the browser stops the connection to the website and displays a name mismatch error. Errors create mistrust when connecting to a site and can cause clients to avoid your site (see Name Mismatch in Web Browser).

When ordering a TLS/SSL certificate, the domain name on the TLS/SSL certificate must match the domain name for the website shown in the address bar of the browser exactly.

For example, to get a certificate for www.example.com, you must add www.example.com as a common name or SANs (FQDN) in the order form.

Possible reasons for receiving the mismatch error

  • Self-signed certificates
    Self-signed certificates are often automatically generated and don't use the correct domain name (FQDN).
  • Exact domain name (FQDN) misspelled
    Occasionally, typos happen when filling out the order form for a TLS/SSL certificate.
  • Wrong type of TLS/SSL certificate
    Not all certificates are created the same. For example, a Standard SSL certificate automatically secures both www.example.com and example.com. If you want a Multi-Domain SSL certificate to secure both www.example.com and example.com, you must add both FQDNs to the certificate order form.

Solution

  • Only use certificates issued by a trusted Certificate Authority (CA), such as DigiCert.
  • Reissue/renew certificates with the exact domain name spelled properly.
  • Order the correct type of TLS/SSL certificate.

About

DigiCert is the world's leading provider of scalable TLS/SSL, IoT and PKI solutions for identity and encryption. The most innovative companies, including 89% of the Fortune 500 and 97 of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS and other digital certificates for PKI deployments at any scale through its certificate lifecycle management solution, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.

©2020 DigiCert, Inc. All rights reserved. DigiCert, its logo and CertCentral are registered trademarks of DigiCert, Inc. Norton and the Checkmark Logo are trademarks of NortonLifeLock Inc. used under license. Other names may be trademarks of their respective owners.