Mobile app version of vmapp.org
Login or Join
Reiling115

: How cloudflare cdn cert passes domain check? How cloudflare-based site passes browser's domain check? when I visit cloudflare based site, it provides a cert for cloudflare domains(like sni007.cloudflaressl.com)

@Reiling115

Posted in: #Cloudflare #Https #SecurityCertificate

How cloudflare-based site passes browser's domain check?
when I visit cloudflare based site, it provides a cert for cloudflare domains(like sni007.cloudflaressl.com) but browser does not shows any security warning.

i.e. let demo.example.com as cloudflare-based site.
then visit demo.example.com with browser. it browses with no warning, though it provided a cert issued to sni007.cloudflaressl.com, not [demo.example.com | *.example.com].

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Reiling115

1 Comments

Sorted by latest first Latest Oldest Best

 

@Courtney195

If you want people to see something, provide true URLs not obfuscated one.

Also, you need to see far more inside the certificate, not just the CN but also in extensions the Subject Alternative Names. This is explained here: support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-CloudFlare-s-SSL-certificates- and here: support.cloudflare.com/hc/en-us/articles/204144518-SSL-FAQ

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme