Return
-
Title
Viewing website in Chrome 58 shows a "NET::ERR_CERT_COMMON_NAME_INVALID" error -
Description
When accessing TPAM using Chromr 58 or above the error is shown:
Your connection is not privateAttackers might be trying to steal your information from web.yourdomain.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID
Clicking Advanced shows further information:
"This server could not prove that it is web.yourdomain.com; its security certificate is from [missing_subjectAltName]. This may be caused by a misconfiguration or an attacker intercepting your connection"
After clicking Advanced and Proceed, the browser states "Not secure"
No errors are seen when using Internet Explorer or Firefox -
Cause
From Chrome 58, Chrome ignores the "Common Name" attribute within the certificate, and only uses the "Subject Alternative Name". -
Resolution
Ensure the certificate installed on TPAM has a Subject Alternative Name set.
If generating the wevb certificate request from TPAM, ensure the Subject Alt. Name field includes the primary identity of the website.