ssl.CertificateError: hostname doesn't match

Help! (Home for newbies)
1

Hello,

I’m trying to add an alias domain .de to my current main domain .com. But it is not possible to request Let’s Encrypt for that new alias domain.
It says hostname doesnt match. I checked DNS, they all use the same NS addresses, they all have same A record. When open in browser, they all resolve correctly to the common public_html folder (main website). What else I should check, any idea please?

Parsing account key…
Parsing CSR…
Registering account…
Already registered!
Verifying only-approved.com…
only-approved.com verified!
Verifying only-approved.de…
Traceback (most recent call last):
…

File “/usr/lib/python2.7/ssl.py”, line 269, in match_hostname
% (hostname, ', '.join(map(repr, dnsnames))))
ssl.CertificateError: hostname ‘www.only-approved.de’ doesn’t match either of ‘only-approved.com’, ‘only-approved.dk’, ‘www.only-approved.com’, ‘www.only-approved.dk’

2

all domains point to the same address already but Virtualmin failed to match hostname. I Suspect this has something to do with the fact that I add 2 domains from beginning and the last domain is added after I upgraded Virtualmin several times?

3

Default the webmin virtualmin ui interface adres itself ( as this is what you mean?) is on a kind of subdomain
Here thes are aded to the encrypt domain
autoconfig.puthereyourdomain.tld
autodiscover.uyourdomain.tld

Redirection is then somehow also in a config file from admin. and so on

4

For others having this issue. i hope this helps. under server configuration > manage ssl certificate. under the tab “Create signing Request”. Check the input “Other domain names” does not include a different domain. then press “generate CSR Now”. After this is finished try generating a ssl using lets encrypt tab

5

I experienced this issue. I registered an alias domain (Lets Encrypt run OK), and after 3 months I added another one (and Lets Encrypt failed).
My solution was to create a self signed certificate for all the (3) domains, and then request a new Lets Encrypt for them all. Then it worked.

6

I can confirm that Luiz’s solution works.

Go to Manage SSL Certificate:

  • Click the Create Self-Signed Certificate tab
  • Add in the other domains you’ve just aliases to this account.
  • Click Generate Self-Signed Key
  • Click on Let’s Encrypt
  • Click on the Request Certificate button.
7

Requesting a certificate for www.example.com, example.com from Let’s Encrypt …
… request failed : Web-based validation failed : Failed to request certificate :

even both are pointer at same directory, i not know what is the problem, Can any one help please.

8

Requesting a certificate for www.example.com, example.com from Let’s Encrypt … … request failed : Web-based validation failed : Failed to request certificate :

I not know what is the problem, Can any one help please.

when i try separately it work, it will work.

But not for both, it work only for last request no matter naked domain or with www.

9

Requesting a certificate for www.example.com, example.com from Let’s Encrypt … … request failed : Web-based validation failed : Failed to request certificate :

I not know what is the problem, Can any one help please.

when i try separately it work, it will work.

But not for both, it work only for last request no matter naked domain or with www.

10

both ping to the same directory
www.example.com, example.com

11

both ping to the same directory www.example.com, example.com

SAND IT SOLUTION

12

+1 for Luiz’s solution (create BEFORE Let’s Encrypt a self signed certificate with all subdomains to include in Let’s Encrypt)

13

Thanks, Luiz’s solution solves the problem for me too!

14

Luiz’s solution worked for me as well, still can’t get wildcard certs to work though as virtualmin doesn’t detect the zone being hosted on itself.

https://www.virtualmin.com/node/67280