Microsoft Knowledge Base Email Alertz

When you use Secure Sockets Layer (SSL) to open a Web site or Web page that is hosted on Internet Information Services (IIS), you may receive the following security message: The name of the security certificate is invalid or does not match the...

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 813618 - Last Review: November 21, 2006 - Revision: 1.2

Security Alert: The Name of the Security Certificate Is Invalid or Does Not Match the Name of the Site

SYMPTOMS

When you use Secure Sockets Layer (SSL) to open a Web site or Web page that is hosted on Internet Information Services (IIS), you may receive the following security message:
The name of the security certificate is invalid or does not match the name of the site

If you continue, you can view the site by using HTTPS.

CAUSE

The common name that you specified when you generated the certificate request for that Web site does not match the URL that is used to access the Web site. For example, if you access the site by typing an IP address or the server name, but the common name that is specified in the certificate request is www.adatum.com, you receive the security message.

RESOLUTION

To avoid this warning, make sure that the common name that is specified when you generate the certificate request matches the URL that will be used to access the site.

If the URL that will be used to access the site cannot be changed to match the common name on the certificate, follow these steps:
  1. Create another certificate request. Make sure that the common name matches the URL that is used to access the Web site.
  2. Have your certification authority generate a new certificate.
  3. Use the new certificate for the Web site.

STATUS

This behavior is by design.

MORE INFORMATION

If you see this behavior when you access a Web site that is published by someone else, the authors may have configured their site certificate incorrectly and you should provide feedback to the site administrator. In this case, use caution when you exchange personal information.

To avoid all security messages when you access a site by using HTTPS, the security certificate must meet the following two additional critieria:
  • The security certificate must be from a trusted certification authority.
  • The security certificate date must be valid.

REFERENCES

For more information about generating a new certificate request, click the following article number to view the article in the Microsoft Knowledge Base:
290625  (http://kbalertz.com/Feedback.aspx?kbNumber= 290625/ ) How to: Configure SSL in a Windows 2000 IIS 5.0 Test Environment by Using Certificate Server 2.0

APPLIES TO
  • Microsoft Internet Information Server 1.01
Keywords: 
kbprb KB813618
Retired KB ArticleRetired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate

Rod - lyonsr NOSPAM-AT-NOSPAM smart.net Report As Irrelevant  
Written: 2/8/2006 9:23 PM
This is not the case when using NLB. The CN and URL are the same in my case and I'm still receiving the message (The name of the security certificate is invalid or does not match the name of the site)????