4 ms·
Fun fact: they had never issued an IPv6 SAN before (which Safari fails to validate due to a bug). Try browsing to https://[2606:4700:4700::1111] https://[2606:
by prdonahue 9y ago
Fun fact: they had never issued an IPv6 SAN before (which Safari fails to validate due to a bug).
Try browsing to https://[2606:4700:4700::1111] https://[2606:4700:4700::1111] with desktop Safari. (It's a known issue and we're working with Apple to get it fixed.)
- RKearney 9y agoI understand that, and I've had to use the IPv6 address since Comcast is null routing 1.1.1.1 in my area, but that doesn't explain how a wildcard certificate was issued with IP addresses in the SAN. Am I able to buy one for my own website? If so, how? If not, why not? I couldn't even get past the DigiCert cert selection page since a wildcard cert can't have SANs, and a SAN cert can't contain a wildcard. The only thing I haven't tried yet is supplying my own CSR.