No subject alternative DNS name matching example.com found
The certificate doesn't cover this hostname
Seen in Java (java.security.cert.CertificateException), Spring, Android
Java received a certificate that does not list the hostname or IP address it connected to.
Common causes
- The certificate does not include this name (www, apex or subdomain).
- Connecting by IP address to a certificate that has no IP entries.
- An internal certificate with only a common name and no subject alternative names.
How to fix it
- Reissue the certificate with the name or IP in its subject alternative names.
- Connect using a hostname the certificate covers.
- For internal CAs, include SANs when signing (for example -ext SAN=dns:host,ip:10.0.0.5 with keytool).
Got a different message? Paste it into the error explainer.
Related errors
- [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed · Python couldn't verify the server's certificate
- certificate verify failed: Hostname mismatch, certificate is not valid for · The certificate doesn't cover this hostname
- PKIX path building failed · Java can't build a trusted certificate chain
- javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure · The server rejected the TLS handshake
- x509: certificate signed by unknown authority · Go doesn't trust the certificate's issuer
- x509: certificate is valid for X, not Y · The certificate doesn't cover this hostname
- remote error: tls: handshake failure · The server rejected the TLS handshake
- The SSL connection could not be established, see inner exception. · .NET could not complete the TLS handshake
- The remote certificate is invalid according to the validation procedure · .NET doesn't trust the server's certificate
- The request was aborted: Could not create SSL/TLS secure channel. · .NET Framework could not negotiate TLS
- cURL error 60: SSL certificate problem: unable to get local issuer certificate · PHP cURL can't verify the server's certificate
- stream_socket_enable_crypto(): SSL operation failed with code 1 · PHP failed to set up TLS on a stream