Re: SweetAda 0.1g released

[Mart van de Wege <mvdwege@gmail.com>]

Gabriele Galeotti <gabriele.galeotti.xyz@gmail.com> writes:

>> If I visit https://www.sweetada.org it looks OK. If I drop the "www." I 
>> get a "Not secure" warning from my browswer (Chrome on Windows). 
>
> Thanks Keith.
>
> I don't know exactly why, unfortunately I am not a very skilled person
> in website administration.

That's because Let's Encrypt issued you a certificate for
www.sweetada.org, with www.sweetada.org as a Subject Alternative Name.

Subject: CN = www.sweetada.org

X509v3 Subject Alternative Name: 
   DNS:www.sweetada.org

I'd say that's a broken certificate. I have no clue why they would issue
it that way, unless you made a mistake in your Certificate Signing
Request. Unfortunately, I do not use Letsencrypt, so no clue where it
went wrong. The norm is to have a cert with Subject (in this case)
sweetada.org with www.sweetada.org as the SAN.

Mart

-- 
"We will need a longer wall when the revolution comes."
--- AJS, quoting an uncertain source.