Security certificate name

• 

  abechard2 · Member · Apr 6, 2013 at 4:57 am

  • Copy link
  • Add topic to favorites

  I was developing a custom tab app in Facebook, and I got this error:

  http://www.featheredspirit.wordpress.com uses an invalid security certificate.

  The certificate is only valid for the following names:
  *.wordpress.com , wordpress.com

  It looks right to me. Do you know if I need to be doing something other than adjusting how I type the url?

  The blog I need help with is: (visible only to logged in users)

• 

  auxclass · Member · Apr 6, 2013 at 5:00 am

  • Copy link

  I don’t know how to deal with it but the error happens with domain mapped sites – the security certificate is for a xx.wordpress.com URL which is not seen with a mapped domain name

• 

  thesacredpath · Member · Apr 6, 2013 at 5:01 am

  • Copy link

  This would be something only staff could possibly answer, so I’ll tag this for their attention and hopefully someone will be around soon to help you out with it. You might want to click the “notify me of… ” thingy down below the reply box so you are alerted to any further activity in this thread, or just check back if you wish.

• 

  thesacredpath · Member · Apr 6, 2013 at 5:02 am

  • Copy link

  Howdy auxclass.

• 

  auxclass · Member · Apr 6, 2013 at 5:05 am

  • Copy link

  Morning Morning @TSP – Have a nice weekend – rain wind & cool here

• 

  thesacredpath · Member · Apr 6, 2013 at 5:28 am

  • Copy link

  Going to the gulf coast tomorrow and back late Sunday. Galveston. Not Hawaii, but it IS ocean and I need my fix of salty water. :) Supposed to be in the 70s days and 60s nights. Do you want me to send you a tar ball?

• 

  auxclass · Member · Apr 6, 2013 at 5:54 am

  • Copy link

  Maybe burn one instead – know one of the Sr. NOAA folks – smart guy but I think the oil company scammed us.

• 

  staff-blorbo · Staff · Apr 6, 2013 at 9:49 pm

  • Copy link

  That’s actually quite normal. Rather, it’s a misguided warning more than anything, and only you will see it when logged in.

  When you connect to your Dashboard over an HTTPS connection, we use an SSL certificate to encrypt your connection. SSL certificates need to be signed to a specific domain, and we can’t provide certificates for every mapped domain, so our certificate is signed for WordPress.com.

  When you connect to your Dashboard via your own domain but your security software sees a certificate signed to http://wordpress.com/ it’s altering you that WordPress.com may be intercepting your connection, which of course is perfectly fine.

  Most security systems like this should have a way to add a permanent exception so you will never see the warning again in this instance.