Hi, I’m hosting mastodon for personal use on subdomain.domain.tld — it has a valid ssl cert. The issue is that when I set the vanity server name to domain.tld (no subdomain) and create a Let’s Encrypt cert for domain.tld. The namecheap ssl cert checker says that the Hostname doesn’t match the Common Name or/and the SANs.

I have domain.tld redirect via an Alias record to my Synology server (just like the subdomain) but for some reason it’s fine on the subdomain but not for the root domain.

Any one have any experience with this? TIA.

  • ziviz@lemmy.sdf.orgEnglish
    0·
    2 months ago

    Sounds like the cert is missing a required SAN name. I used namecheap and Let’s Encrypt together before. I had to ensure that *.ziviz.us and ziviz.us were both provided to certbot. I used manual DNS challenges, and it looked like this:

    certbot certonly --manual --preferred-challenges dns
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Please enter the domain name(s) you would like on your certificate (comma and/or 
space separated) (Enter 'c' to cancel): ziviz.us *.ziviz.us
    • TheRealCharlesEames@lemm.eeOPEnglish
      0·
      2 months ago

      What if I told you that the cert says the SAN is valid for the Synology DDNS but not the SAN that I entered (domain.tld)