Can't load site in Safari

AI-generated summary

The user A5AA is having trouble loading their Discourse site in Safari, but it works in Chrome. The issue occurs when trying to access the site from the naked domain pila.cc, which is redirected to www.pila.cc via a CNAME record.

A5AA initially wants to redirect www.pila.cc to pila.cc, but later clarifies the intention is to redirect pila.cc to www.pila.cc, since the Discourse site is set up at www.pila.cc.

Jericson investigates and finds an SSL certificate error: “Certificate name mismatch”. This issue arises because the SSL certificate only covers www.pila.cc, not the naked domain pila.cc.

Jericson advises A5AA to update the SSL certificate to include the naked domain, providing instructions for Let’s Encrypt users. A5AA plans to update their app.yml file to resolve the issue.

Hi everyone. Sorry for my silly question :sob:

I set up discourse at the subdomain name www.pila.cc. I use a CNAME record and redirect pila.cc to www.pila.cc. Here are all the records:

I can’t load my site in Safari. The page keeps showing loading. However, it opens in Chrome. After opening the website in Chrome, I can also open it using Safari.

I guess this is a problem with DNS parsing. Is it because I added CNAME records to the naked domain? If so, is there any way to redirect www.pila.cc to pila.cc without the CNAME?

Sorry for my poor expression, because I’m not a native English speaker

Hi, welcome!

This is a little confusing on what you really want to do.

If you want to redirect www.pila.cc → pila.cc, I believe it would make sense to do this way:

@     A        8.219.210.255
www   CNAME    pila.cc.

I’m sorry that I made a typo. I want to redirect pila.cc to www.pila.cc, since the discourse is set up at www.pila.cc, and I hope users can also open the forum when entering pila.cc.

Still waiting for help :sob:

It says: “Safari browser cannot open this page because it is unable to establish a secure connection with the server.”

I’m not getting this error.

However, I do see an error running this online SSL certificate check:

Certificate name mismatch

I believe that’s because the certificate only covers www.pila.cc.

Thank you for your reply! How can I add certificate for the naked domain pila.cc?

I think it depends on your SSL certificate provider. For Let’s Encrypt these instructions ought to do the trick:

Thank you for the advice!

I am using Let’s Encrypt. I will try to update app.yml late tonight in my timezone.