Re: FN-FORUM Wildcard SSL certificates

date posted 9th January 2002 23:35

Quoting Charles Lecklider [EMAIL REMOVED]
> James Fidell wrote:
>
> > Has anyone else used wildcard certs with success across a range of
> > versions of IE, or should I give up and hand over more money to
> > Thawte than I really ought to have to?
>
> IE should work with wildcard certs. After all, Thawte let you buy
> them.... Making one yourself should work just as well, except for the
> CA. Are you sure you built it right? Later versions of IE are much
> stricter on certs than they used to be.

Thawte lets you buy 128-bit SuperCerts, too, and they're all manner of
trouble with IE :) However, this works fine in Netscape for me, and works
fine in IE 5.00.2919. I can't see anything obvious that I've done wrong.

> Is it available online? I'll take a look if it is.

Thanks. Try https://www2.swreg.org/ and see what happens. It's a
self-signed certificate, so you should get a warning that the CA isn't
recognised, but what I don't want is a "certificate doesn't match server
name" error.

James