新的SSL证书安装错误

我们用GoDaddy的新通配SSL证书replace了旧的SSL证书。我们上周已经把这个证书交出去了，并且自从下面的错误以来一直接到试图注册的客户的电话。

在这里输入图像说明

我们无法弄清楚究竟是怎么回事，因为我们已经在IE 6,7,8，Chrome和Firefox中testing了这个证书，却没有收到任何错误，但是我们知道在我们继续接听电话时有一个问题。为了logging，我们确实在这个盒子上安装了多个SSL证书，但是使用不同的IP地址来提供它们。

任何帮助或想法将不胜感激。

谢谢，

$ curl -Iv https://classes.stcharleshealthcare.org/ * About to connect() to classes.stcharleshealthcare.org port 443 (#0) * Trying 67.59.90.121... connected * Connected to classes.stcharleshealthcare.org (67.59.90.121) port 443 (#0) * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS handshake, Server key exchange (12): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using DHE-RSA-AES256-SHA * Server certificate: * subject: serialNumber=ESKZZ-OSKRZAHAnZ8ssPXoULbrv1/Obw; C=US; ST=Oregon; L=Bend; O=St. Charles Medical Center; OU=GT14856843; CN=*.scmc.org * start date: 2010-10-10 19:25:39 GMT * expire date: 2012-01-13 10:20:49 GMT * subjectAltName does not match classes.stcharleshealthcare.org * Closing connection #0 * SSLv3, TLS alert, Client hello (1): * SSL peer certificate or SSH remote key was not OK curl: (51) SSL peer certificate or SSH remote key was not OK

因此，classes.stcharleshealthcare.org的DNS将转到为* .scmc.org提供SSL证书的服务器。在Apache中检查您的DNS和/或您的虚拟主机定义。

已经向* .scmc.org发出证书，您正试图确保一个名为stcharleshealthcare.org的网站。显然你需要一个证书，如* .stcharleshealthcare.org

 You attempted to reach classes.stcharleshealthcare.org, but instead you actually reached a server identifying itself as *.scmc.om

您正在使用与您的域名不匹配的通配符证书。