The TLS certificate is not valid for the domain name.

TLS_HOSTNAME_MISMATCH · Severity: Error

• ErrorTLS_HOSTNAME_MISMATCH

  The TLS certificate is not valid for the domain name.

  None of the DNS names in the certificate's subject alternative names matches the domain. RFC 9525 says clients compare the name with these DNS names only; the common name is not used, and a wildcard covers exactly one label.

  Recommendation: Issue a certificate that lists the domain (or a wildcard that covers it) as a subject alternative name, or point the name at a server that has one.

Reported by

• Site health check
• TLS certificate check

Available through the API

• Site health check API
• TLS certificate check API

Related findings

• Error TLS_CERT_EXPIRED The TLS certificate has expired.
• Info TLS_CERT_EXPIRING The TLS certificate expires within 30 days.
• Warning TLS_CERT_EXPIRING_SOON The TLS certificate expires in less than 14 days.
• Error TLS_UNAVAILABLE No TLS connection to the domain on port 443 could be made.
• Error TLS_UNTRUSTED The TLS certificate does not chain to a trusted certificate authority.
• Warning TLS_WEAK_KEY The TLS certificate uses a weak public key.

All findings