Skip to main content
OCLC Support

Why am I getting a browser warning of ERR CERT COMMON NAME INVALID after updating the SSL certificate on EZproxy

  1. Last updated
  2. Save as PDF
Symptom
  • Users are getting a web browser warning about the EZproxy SSL certificate right after SSL certificate was updated.  The warning is ERR_CERT_COMMON_NAME_INVALID
  • The EZproxy prefix being used for HTTPS does not start with login.  https://cptest.idm.oclc.org/login?url= is an example.
  • The SSL certificate being used does not include the exact EZproxy name in either the CN or SAN fields only the wildcard entry is present.
Applies to
  • EZproxy all versions
Resolution

Here is what you need to do to fix the issue:

  1. Update the SSL certificate to include both the exact EZproxy name and also the wild card of the EZproxy name.  Using the example about *.cptest.idm.oclc.org and cptest.idm.oclc.org must be present on the SSL certificate.  It does not matter which value is in which field just both must be present or https://cptest.idm.oclc.org/login?url= will generate the ERR_CERT_COMMON_NAME_INVALID browser warning
Additional information

The EZproxy prefix can also be updated to https://login. to resolve this issue as well.

Page ID
39049