I have several related services on different first level subdomains of one domain. The goal is enable https in all of them.
So I've bought a wildcard SSL certificate from GoDaddy for my domain: *.domain.com.
Than I made a key like stated here: http://blog.dynamic50.com/2011/02/15/ssl-on-wildcard-domains-on-heroku-using-godaddy/
Next thing I've updated two of services: one of them is a standalone Ruby app (goliath), hosted on Rackspace, and the second is hosted on Heroku. Standalone one is working ok (certificate is valid, but Chrome says it cannot check if it's revoked), but on the Heroku app browser says "panic, certificate is revoked, go away". Both apps use same crt and key files. Where can be the problem?
here is CURL output for the services (there is a difference in last lines):
1. standalone
* SSLv3, TLS handshake, Client hello (1):
...
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
* subject: O=*.mydomain.com; OU=Domain Control Validated; CN=*.mydomain.com
* start date: 2012-05-17 12:37:43 GMT
* expire date: 2012-08-02 12:34:51 GMT
* subjectAltName: standaloneservice.mydomain.com matched
* issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certificates.godaddy.com/repository; CN=Go Daddy Secure Certification Authority; serialNumber=07969287
* SSL certificate verify ok.
2. heroku
* SSLv3, TLS handshake, Client hello (1):
...
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
* subject: O=*.mydomain.com; OU=Domain Control Validated; CN=*.mydomain.com
* start date: 2011-08-02 12:34:51 GMT
* expire date: 2012-08-02 12:34:51 GMT
* subjectAltName: herokuservice.mydomain.com matched
* issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certificates.godaddy.com/repository; CN=Go Daddy Secure Certification Authority; serialNumber=07969287
* SSL certificate verify result: self signed certificate in certificate chain (19), continuing anyway.
Any advices and debugging tips are most welcome.
Thanks!