Microsoft KB Archive/239449

= Error message: "Internet Explorer can't open the site https:// The supplied certificate is invalid" =

Article ID: 239449

Article Last Modified on 6/13/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q239449



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When you use Server Gated Cryptography (SGC) certificates, the client attempting to access the site with the HTTPS protocol may receive the following error message:

IIS 4.0:

Internet Explorer can't open the site https://

The supplied certificate is invalid.

IIS 5.0:

The page cannot be displayed.

Cannot find server or DNS Error.



CAUSE
This is by design. Unlike non-SGC certificates, which allow the user to accept a situation where the name used in the certificate does not match the name used in the URL accessing the site, SGC certificates require that the names match. If the names do not match, the error message is returned instead of a dialog box.



RESOLUTION
To resolve this issue, obtain a new SGC certificate that has a common name that matches the DNS name of the Web site.

Additional query words: verisign

Keywords: kbprb kbpending KB239449

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.