David Haycox
asked on
Wildcard certificate replacement on SBS2003 - website not displayed
We have a wildcard certificate in use on our SBS2003 and on other FreeBSD servers - it's working fine but expires soon.
We renewed the certificate (using a CSR created on one of the FreeBSD servers) and successfully imported this onto the FreeBSD boxes. We then exported the certificate to a .PFX file (including the private key) in order to import it onto the SBS2003 box. Following the usual procedure (e.g. http://www.digicert.com/ssl-support/pfx-import-export-iis.htm) we successfully imported the certificate. It shows up in the certificates snap-in right next to the old one, and appears identical apart from the expiry date (and serial number).
Next, we "Replace the current certificate" in IIS for the Default Web Site - this also works fine. However, from this point the website does not display, showing "Internet Explorer cannot display the webpage". If we change the certificate back to the old one, it works immediately.
What are we doing wrong?
We renewed the certificate (using a CSR created on one of the FreeBSD servers) and successfully imported this onto the FreeBSD boxes. We then exported the certificate to a .PFX file (including the private key) in order to import it onto the SBS2003 box. Following the usual procedure (e.g. http://www.digicert.com/ssl-support/pfx-import-export-iis.htm) we successfully imported the certificate. It shows up in the certificates snap-in right next to the old one, and appears identical apart from the expiry date (and serial number).
Next, we "Replace the current certificate" in IIS for the Default Web Site - this also works fine. However, from this point the website does not display, showing "Internet Explorer cannot display the webpage". If we change the certificate back to the old one, it works immediately.
What are we doing wrong?
Check on the IIS Default Web sites, Whether you have added any header which point to other name?
ASKER
Here's an image of the IIS websites. Does this tell you what you need? If not, please advise how to check the headers.
IIS-Headers.JPG
IIS-Headers.JPG
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.