I have a certificate, that has CN=*.some.domain
and then alternate names DNS:*.sub1.some.domain
, DNS:*.sub2.some.domain
(2 more like this).
I provided the certificate to an nginx-ingress in kubernetes, which serves host.some.domain
. And it is giving me error:
controller.go:1041] unexpected error validating SSL certificate default/tls-cert for host dwarf30.epiqa.certicon.cz. Reason: x509: certificate is valid for *.sub1.some.domain, *.sub2.some.domain, not host.some.domain
The message notably fails to mention the Common Name, it only lists the alternates.
Is it my misunderstanding how CN and Alternates interact, or is it an issue in the nginx-ingress controller (note: helm insists on installing rather old version 0.13.0 of the container)?