Firefox can't analyze my certificate while IE can. I imported my this at once, IE is fine, Firefox says that the certification is valid for the period of INQUIRY only, not the DNS name

Details: - created a CA with PfSense - created server SSL certificates imported from my own servers (ESX, PfSense, email,...) -the authority of certification in Internet Explorer as a certification authority root of new trust - connect to my server with their local DNS names and receive the page without warning - any HQ in Firefox as a new authority - to connect to my server using the DNS name - a error message: certificate is valid only for 172.31.1.20 (the IP address of the server) - to connect to my server using Firefox and the IP address and receive the page without warning

The AC is very good because it is used by IE and Firefox and even complaining, Firefox don't doubt the authority. The server certificate does not include the name, and can find it. It is true that when I created the certif, I added an additional field with the IP address. The certificate should be valid for both the DNS name and IP address. When I try to connect to the server with IE using the IP address, now it's THE who complains that the certificate is valid for the name :-)

What should I do for Firefox to accept my certificate in his name and validate with the CA instead of making several exceptions for everything?

This is the certificate sent by the server:

BEGIN CERTIFICATE-----

MIIF5jCCA86gAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCQ0Ex DzANBgNVBAgTBlF1ZWJlYzERMA8GA1UEBxMITW9udHJlYWwxDTALBgNVBAoTBEhv bWUxGzAZBgkqhkiG9w0BCQEWDGFkbWluQGpiLmxhbjESMBAGA1UEAxQJSkJfTGFu X0NBMQ4wDAYDVQQLEwVJVFNlYzAeFw0xNjExMTIwMjI1MjRaFw0yNjExMTAwMjI1 MjRaMIGCMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVlYmVjMREwDwYDVQQHEwhN b250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3DQEJARYMYWRtaW5AamIu bGFuMRMwEQYDVQQDEwplc3guamIubGFuMQ4wDAYDVQQLEwVJVFNlYzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWoRcxHoBjR2rKOPAI/dtpWlTiqOGDg zZZWJ6n24ZYUfh9L6vUmzqajfAbj6 + fndzKahb69PLi + tsnt39yGsKWkXUd3y7Wq 5PkaGSqi/mJKB7/H0qL4Ig2FK9/uK9QGK019NvDN1jnLgF6MoNAIZEOVjqalpnXD O8Eu + vaKPsHbvNziNj7uQR8CdcMU9lEF6gcmFu8xOrukb3ocpyJ307PHqx3AlrU0 sBuit21glineB9XKMyBaon9D3mrNUXmvHy3xcBvHPwcgqnNDKd7CZwdfaXw4Hb4i t7BYgSsn66UxPcrDvoho9aDbXnjmOuPCo/FMsZxfr9ETZyGIllsXE2UCAwEAAaOC AWQwggFgMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMDMGCWCGSAGG BEI DQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBTZXJ2ZXIgQ2VydGlmaWNhdGUwHQYDVR0O BBYEFEILwkf/4I50YT + fZ/2wcETS6CBVMIGuBgNVHSMEgaYwgaOAFEgmUROxoVJM txyWvypJ4wcF8B2RoYGHpIGEMIGBMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVl YmVjMREwDwYDVQQHEwhNb250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3 DQEJARYMYWRtaW5AamIubGFuMRIwEAYDVQQDFAlKQl9MYW5fQ0ExDjAMBgNVBAsT BUlUU2VjggEAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQgCAjALBgNVHQ8E BAMCBaAwDwYDVR0RBAgwBocErB8BFDANBgkqhkiG9w0BAQsFAAOCAgEABCFChNXJ ACISI + 7hNbpiwIsjpDB0fLKB/9sPXC1uiwzGv7o/fkImYPJzQcKP0a3V6elX4kd7 x1poYAfawVIpKJgwzgEWnMJADgPKVMymkxBr3Qlq + 3oAiC4pTdI79GKaZKshxANS 7OBoklRDYWStHnCdw96IWuu6Ih2mbsbRVUFIJnHPHpCFS1J45tLYWoxPL/L1uX3v /Pz8SollYXtZ +. uVhdkkzJcHcEsZjvBe3eMmxm93l7Cy/5kCDf2 + kx67weNRrxbFt VaEyFCypCJlJn4Gj17y0JnhPUN1/h7Ck4XcTLX28 + Ab2Ls9/rXnXMQvkKcrRhvyT CV4XJ756hap/zT + KJJzY8 + T5ggdkKlcbZsvvgVSuNNv1aSQmR + bbF5ry23oszXVO FaEEAtcofaHa5MMebNNWrz4o/qYuPGBnVq3NmxiNNKm + / Ed5ky4AdkXT7Ny11mgA C2DzGahyXfbfGFa21ig/R0NAxkP00TXWiuSE/7 b/EGe9qNDB + WF7Qb5I9U6EoWYZ EEmE8G/43ClaZCorJJN7iZwwMx2iQJgyuea hy9hgXU5GjmXmrpqmtvyGxrywalcXPzvFOs + aSXf1H2tLSMc9n3LH8g0lDgpcC6P484ef1cmG3/hVD5QLWyjblMnF0XjbMyij5Hj eTrPLTwW8AYjoIz0DZRoVPxpdz/o =

CERTIFICATE OF END-

This is the certificate of the CA that signed it

BEGIN CERTIFICATE-----

MIIGbjCCBFagAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCQ0Ex DzANBgNVBAgTBlF1ZWJlYzERMA8GA1UEBxMITW9udHJlYWwxDTALBgNVBAoTBEhv bWUxGzAZBgkqhkiG9w0BCQEWDGFkbWluQGpiLmxhbjESMBAGA1UEAxQJSkJfTGFu X0NBMQ4wDAYDVQQLEwVJVFNlYzAeFw0xNjExMDYxMTQzNTJaFw0zNjExMDExMTQz NTJaMIGBMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVlYmVjMREwDwYDVQQHEwhN b250cmVhbDENMAsGA1UEChMESG9tZTEbMBkGCSqGSIb3DQEJARYMYWRtaW5AamIu bGFuMRIwEAYDVQQDFAlKQl9MYW5fQ0ExDjAMBgNVBAsTBUlUU2VjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtRfmJ8HhxD6OeBSTdiK36DF/Gw7HmOIO CN9LktUCcnXZfsbkyPwGq8AtLTURfYU1VKHw066g0XD0hEbFEaYIWvVKijiqaPZg Pc / pIAj + M7vzojeCnv6QiRTcC9q5rY9 + Ff7MuTkWKEPzjuXpHd + IoS4To3sVZgsy YcxrdRndcirxm6aFjGXIYaImPm3hLuMteSagacsjduGEDOpJ5hJoMIIX4kHE/x8J DFBvlllXIGiOgCHU + 8hcN1IadNFqQcWA3eFB5SgLPFxOOmR4xpB1LsrESC4Zgk/E XmZYBCsYHzg58Cq6r4xuwckutcd5Gjo9ujaafCfAlUFHFJxqLxyy + N0nd3P + i5Kd zPpwpyIAzOCPeZvM2chspspl3pER + RlqZODLoU3gSAz4z + knxKxeyyiK8cttMHkV Di5veqSRIxYeYtJqu0asEaBiQ0ZpdqsNcQEU3rwzo6uoxxgvRr2Ujb6csr8CqhuA 2Sz0W1upgcpZhuL0VMTkMS8P8fgzZZeIU85v7drldXsvpjzaMwHdm/MKGewA0eCZ fUTI6V + uY9oaT9GH8MPzGWzB4oYb3sRgKgLkvWGckyHe3YVwUpb4z/MXRFB3bN/Z qxIyochY8pJMcJe2jrTw79Sf9FAR/txonPBAxuNtGLIdcL4ElGjlXPDXlQrI8XbI n/Abbs3iFHsCAwEAAaOB7jCB6zAdBgNVHQ4EFgQUSCZRE7GhUky3HJa/KknjBwXw HZEwga4GA1UdIwSBpjCBo4AUSCZRE7GhUky3HJa / KknjBwXwHZGhgYekgYQwgYEx CzAJBgNVBAYTAkNBMQ8wDQYDVQQIEwZRdWViZWMxETAPBgNVBAcTCE1vbnRyZWFs MQ0wCwYDVQQKEwRIb21lMRswGQYJKoZIhvcNAQkBFgxhZG1pbkBqYi5sYW4xEjAQ BgNVBAMUCUpCX0xhbl9DQTEOMAwGA1UECxMFSVRTZWOCAQAwDAYDVR0TBAUwAwEB /zALBgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAHVLp0nsXNHjvcjWado0 v1M167gEv8SnLMzDRJ7rOwfQlG0JWIXgrMk + 9bLQixFPbClG2MzOGhq2gyXbTFEH PYLfOxRy5gsrYhBYKso4PNrP8ouBaedl / + huobFtd1SR4bNrZ5Be3crQkZhULmlv hSVWklOC + o0rdfPnDffDRtoWH1x1 / + ZRS0N0MSwXqeoQTEgu9CYRCEeLnidcdd1v e6XR + Qw2qLfPqBCKzCVNGZvpVjqakERxaLgWPqwixIQ4sdPjvtnUJxsUEo5hN + 6 / + os/HZ1iO3Bgi6DgAGToTSmsf5 + pI/z + o2FjDrDvbBhvf4FulvvOCsRBNkA5BK NgisFXP / FN3WlkrbM1OZjWIan1phQAw5mDLfqwxJE + BuedK1HqLRNTay9eOGSRSu TRIi26fwwMAdsPnDj3X7/aUCWslVrvZPRmsIOgykLuHlCgYD99mpzF0v + t8y05iE V3115CCve + qFHH52j078jxo1aKyfQTnRGvdGehWI77Pd/l9CMgNJ7K0ZRx6RUoEV 9CMH6kgqagkXU7eT2CXszxrGHAgybnNaJ/z4BjxDme0TH3bgLc4AOIiP8doe7KlJ lYvrG8UMtCkL1jhYFX4Rz/BH5yte7aqzwBVUZrcmvM2gU9ZyPNaAfCDygCUMeMqt OWQEicvGZtRj2ZK6PKv5hk0a

CERTIFICATE OF END-

In Firefox, a list of other names of the non-empty object overrides and replaces the common name field. If you need to list all the relevant host names in the field of SAN in your certificate.

Tags: Firefox

Similar Questions

Maybe you are looking for

  • problem of Time capsule

    Got a new modem from comcast, but now my time capsule will blink orange.  Utility box airport continues to appear on my screen.  Says that it cannot connect to the new modem.  When I click around. Looks like I'm missing a step easy connection to conn

  • Thin client HP 420: thin client usb problem

    We test a workstation 420 and everything seems to work fine except when you are connected to an RDP session to our server 2012R2 farm, usb storage disks/keys are not recognized. Everything seems to be ok on the thin client in local resources and the

  • [Resolved] find versions and generations of MotoGP

    There are (from August 2015) 3 'generations' of MotoGP. How can we distinguish between them, alias "distinguish their"? Note I am not asking "what is the best", or what are their different feature sets. What I'm asking is more like this: Suppose some

  • Gets the ati2dvag error message when online.

    Original title: ati2dvag bug or problem. The ati2dvag bug does not disappear after the download and the application of new drivers for ati cards or bios for cards. I tried with own removal tools. The problem seems sturdiness only when running from we

  • Windows Server 2008 SP1: The C:\Windows\winsxs folder consuming 15Gb (!) of disk space.

    It's really annoying because at the time of installation, we thought that 25 GB should be plenty for the drive that contains the operating system only! Now we ran out of disk space on C:! (The only software installed on top of Windows is SQLServer 20