[svlug] Certificates and www

[Walt Reed]

On Wed, May 02, 2007 at 08:21:14AM -0600, Skip Evans said:
> Apparently what happens when people go to 
> www.earbuzz.com and then access an https secured 
> section of the site they get a warning telling 
> them that the certificate was issued to 
> earbuzz.com, not www.earbuzz.com.
> 
> We did not install the cert; the hosting people 
> did that.
> 
> I can certainly make code changed to fix this, but 
> I was under the impression a certificate good for 
> earbuzz.com should also protect www.earbuzz.com 
> without issuing warnings?

Nope. Unless you get a wildcard certificate (which is generally a lot
more expensive,) certs are for one exact hostname.