1: wrong SSL cert being presented for my site
Posted by Andy Holt on 22/09/25 10:03

I've been asked to help with the admin of a site hosted here ( https://www.digswellvillagechurch.org.uk/ ) - the perils of a day job covering a similar area. :-)

I've now added the bare domain to the domain list, setting the www as primary.  Things seems to be working, except for when visiting the bare domain over HTTPS, we get a cert presented for some other site ( 2ndkirkhamscoutgroup.org.uk ).  I can see from crt.sh that a cert has been requested/issued for our bare domain, but it doesn't seem to have made it to the web server.

Any ideas or something I've missed?  Thanks, Andy

2: Re: wrong SSL cert being presented for my site (response to 1)
Posted by Joe Oldak on 22/09/25 11:41

Should be fine now!

I've been a bit unhappy with the way certificates are auto-registering and renewing. The process is sometimes a bit flaky, which is odd as it's worked perfectly for several years untl recently!

This is also the reason there was some downtime the other day, as the system had created an invalid certificate which was preventing it starting up properly.

I'll look into this more fully over the next few days, and hopefully make the certificate system more robust!

Thanks

Joe

3: Re: wrong SSL cert being presented for my site (response to 2)
Posted by Andy Holt on 22/09/25 12:12

Ah, thanks for the speedy reply and fix, Joe. No errors from curl any more. 😎

Andy

4: Re: wrong SSL cert being presented for my site (response to 2)
Posted by Keith Hofgartner on 11/10/25 14:46

Seems we are having same problem after pointing domain at our website...

This server could not prove that it is www.winslowbigsocietygroup.info; its security certificate is from 2ndkirkhamscoutgroup.org.uk. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

can you take a look please..

 

 

5: Re: wrong SSL cert being presented for my site (response to 4)
Posted by Joe Oldak on 11/10/25 16:51

It can take a little while for the certificate to be issued once a new domain is associated with your Voice site. Mostly to do with DNS caches. 

Looks like it's working fine now! 

Joe

6: Re: wrong SSL cert being presented for my site (response to 5)
Posted by Keith Hofgartner on 10/11/25 10:09

I'm having same problem with another site just created (Friday).

stalbanswinslow.org.uk

Any chance of checking it out please?

7: Re: wrong SSL cert being presented for my site (response to 6)
Posted by Joe Oldak on 10/11/25 14:24

Seems to be working fine for stalbanswinslow.org.uk but not for www.stalbanswinslow.org.uk - though I can't see any errors.

Check that you've added both versions into the domain config for your site. And if you've just added a new domain name wait 20 mins or so to give Voice enough time to create the certificate before checking again.

Thanks

Joe

8: Re: wrong SSL cert being presented for my site (response to 7)
Posted by Keith Hofgartner on 10/11/25 19:35

All working thanks! Should I have both domain names with www and without or just one of them?

 

9: Re: wrong SSL cert being presented for my site (response to 8)
Posted by Joe Oldak on 10/11/25 20:17

You need both if you want the site to be accessible on both - even if you then set one of them as the Primary domain (so all traffic to the other domains gets redirected to it).

Since you have set up the DNS for both it makes sense to have certificates for both I think!

Cheers

Joe