Skip to main content
karlos
New Member
May 23, 2021
Question

What kind of SSL certificate I need?

  • May 23, 2021
  • 2 replies
  • 2497 views

Hi guys, 

Let me introduce myself first, I am a Freelance IT, I setup computers, cabling and help users with common problems at office or with printers as well I can take care of servers hardware.

Actually one of my clients is a branch of the foreign affairs of my country, the security for them is very important as you can imagine.

 

I have a small linux web server installed at home, there I have a web ticketing system which I want to use to keep a fast contact with users and give a fast response and solution when they have problems.

 

From outside the office I can access but not from inside network, it seems there's a problem with the configuration of the SSL, I have few domains in that server, 2 of them with free SSL certificate provided by lets-encrypt and the other one was the cheapest I found just to try but with the same results (ComodoSSL).

 

In any case when I try to acces to such domains there's a message "timeout" or if I try from my smatphone "ERR_CERT_COMMON_NAME_INVALID" ) always from inside of office network.

 

From an external network I don't have any problem.

I tried to talk with the sysadmin, but it seems he didn't understand what I was talking..so I cannot count on him.

 

By the way these domains are setup with Google DNS dynamic domains (who knows maybe that's the problem) and the server is a Linux Debian machine with Apache.

 

So did you have a similar problem as it?

 

The address of one of the servers is www.trackoffers.net  I used in the past in another company don't worry there's nothing.

 

Kind regards

 

 

    2 replies

    jbindra
    Staff
    Staff
    October 17, 2024

    Hello Karlos,

     

    Are you using certificate inspection on the firewall policy for this traffic ? If yes, then to fix the above error, you need to install the SSL certificate which you are using in the certificate inspection.
    You can refer to this article for more information: 
    https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HTTPS-SSL-Certificate-Installation-PFX/ta-p/248447

    patelr
    Staff
    Staff
    October 17, 2024

    Hello @karlos 

     

    Please review https://community.fortinet.com/t5/FortiGate/Technical-Tip-Certificate-Error-in-Admin-Access/ta-p/216971, as this document will provide more ideas on why did receive an error related to ERR_CERT_COMMON_NAME_INVALID .

     

    Thanks,

    Ronak Patel