PCI Scan Fail - Server FQDN

Cody M. shared this question ago

Answered

Hello,

I did a scan on my website and it says there was one vulnerability found. The description says, "SSL Certificate - Subject Common Name Does Not Match Server FQDN." What comment should I make or what change should I make to fix this issue? Thank you!

The same question

Comments (1)

Brittany M. ● 3 months ago

Hello,

Please take a look at this article under Global Payments (OpenEdge) for more information on how to resolve issues for the PCI Compliance Scan.

Let us know if you have any questions.

Thank you

Reply URL

Cody M. ● 3 months ago

Hi Brittany,

I reviewed that page and it doesn't have any info about the server name not matching the server FQDN. Is there any info about that issue in the scan?

URL

Joel A. ● 3 months ago

Here is what I did to remediate the issue:

I adjusted it when you visit https://serverip address to not serve the SSL of the first site on the server but instead to use a default SSL certificate that isn't using SNI which is what the vulnerability was complaining about.

If they still won't approve it you can just start a new scan instead of arguing with them.

URL

Cody M. ● 3 months ago

Thanks Joel, I'll probably just start a new scan.

URL