From August 19th 2020, SECTIGO issues SSL certificates with a maximum lifetime of 398 days (13 months) as specified by CA/Browser consortium. SSL certificates with a longer lifetime must be re-issued annually (free of charge). You'll receive reminders via e-mail. SSL certificates issued before August 19th 2020 remain valid until their planned expiry date. Code Signing & S/MIME certificates are not affected and remain valid until their planned expiry date.

Apache warning: server certificate does NOT include an ID which matches the server name

This warning may occur when the configured "ServerName" from apache does not exactly match the COMMON NAME field from the SSL certificate. Example:

Apache ServerName domain.com
Apache ServerAlias www.domain.com
SSL certificate Common Namewww.domain.com (incl. SAN entry for "domain.com")

-> Result: apache shows the warning, even though "domain.com" is perfectly covered by the SSL certificate (via it's SAN entry for "domain.com")

If you switch ServerName and ServerAlias:
Apache ServerName www.domain.com
Apache ServerAlias domain.com
SSL Common Namewww.domain.com (incl. SAN entry "domain.com")

... then the warning will be gone, das "ServerName" now exactly matches the domain name in the COMMON NAME field of the SSL certificate.


Conclusion: You may simply ignore this warning as it does not impact the validity of your SSL installation, or you simply swap ServerName and ServerAlias so that the domain is matching the COMMON NAME in your SSL certificate.

Was this answer helpful?

 Print this Article

Also Read

Exchange Server 2010 "The Certificate is Invalid for Exchange Server Usage" Error

This can occur when the certificate cannot be verified to a trusted certificate authority. To...

Tax free orders for companies inside European Union by providing a valid EU VAT number (tax-free intra-community supply)

Companies located in the European Union are able to order tax free if they are providing a valid...

RapidSSL DCV Email kommt nicht an

https://www.rapidssl.com/support/contact/https://www.digicert.com/ Support -> Chat

Can i redirect non-SNI capable web browsers to an alternative site?

YES, it's possible to redirect non-SNI capable browsers (Internet Explorer auf Windows XP). -...

How to create .well-known folder on Mac OS OSX Server ?

Edit this file: /Library/Server/Web/Config/Proxy/apache_serviceproxy.conf and comment out these...