IIS Presenting Wrong SSL Certificate

IT Support Forum Forums Web Servers IIS Troubleshooting IIS Presenting Wrong SSL Certificate

Tagged: ,

This topic contains 0 replies, has 1 voice, and was last updated by  Webmaster 10 months, 1 week ago.

  • Author
    Posts
  • #1647

    Webmaster
    Keymaster

    Sometimes IIS will present the wrong SSL certificate. IIS can either show the old certificate before you updated it or present an SSL certificate for the wrong site.

    First thing to do is to check the bindings, to make sure the site’s got the right certificate.

    Next, if you’re using a proxy server, you may need to update the certificate there.

    Finally, there is a bit of a bug in IIS where it may present the wrong certificate if you have multiple sites on the same IP / port and are separating these out using SNI. To fix this, remove all the bindings from the server and add them backone by one (restarting IIS after each then checking to see if it’s working). This will help you identify the buggy combination of IP / ports / certificates. Often doing this will fix the issue.

You must be logged in to reply to this topic.