SSL error

I recently installed an Enterprise CA in our AD domain and have been issuing
certs successfully.

Question: Why is it that whenever the certificate common name doesn't match
the server name you get the SSL error about the mis-match. But when you get a
cert from Verisign this is not a problem. We have many sites that that have
Verisign certs that use common names not matching the server name but never
produce this error. Is there anyway around this?

Thanks

It's unclear what you want, do you want your certs to not produce an error?
Or do you want the Verisign certs to show an error upon mismatch?

In my expereience Verisign certs DO do that.

The admins are either setting it up for a redirect, or they are using a wild
card, or they have more than one cert and virtual web.

Checking the common name matches is one of the fundamental roles of a
certificate.

"akg414s" <akg414s RemoveThis @discussions.microsoft.com> wrote in message
news:45B35199-7E80-45C8-A2E5-37637DC656AD@microsoft.com...
>I recently installed an Enterprise CA in our AD domain and have been
>issuing
> certs successfully.
>
> Question: Why is it that whenever the certificate common name doesn't
> match
> the server name you get the SSL error about the mis-match. But when you
> get a
> cert from Verisign this is not a problem. We have many sites that that
> have
> Verisign certs that use common names not matching the server name but
> never
> produce this error. Is there anyway around this?
>
> Thanks