Error message: "Internet Explorer can't open the site https://<sitename> The supplied certificate is invalid" (239449)



The information in this article applies to:

  • Microsoft Internet Information Server 4.0
  • Microsoft Internet Information Server 5.0

This article was previously published under Q239449
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

SYMPTOMS

When you use Server Gated Cryptography (SGC) certificates, the client attempting to access the site with the HTTPS protocol may receive the following error message:

IIS 4.0:
Internet Explorer can't open the site https://<sitename>
The supplied certificate is invalid.
IIS 5.0:
The page cannot be displayed.
Cannot find server or DNS Error.

CAUSE

This is by design. Unlike non-SGC certificates, which allow the user to accept a situation where the name used in the certificate does not match the name used in the URL accessing the site, SGC certificates require that the names match. If the names do not match, the error message is returned instead of a dialog box.

RESOLUTION

To resolve this issue, obtain a new SGC certificate that has a common name that matches the DNS name of the Web site.

Modification Type:MajorLast Reviewed:6/13/2006
Keywords:kbpending kbprb KB239449