how to get a new cert when old one is foul

Daniel noyn 1

I added both the endpoint and my domain to the route initially and so the certificate was created for the wrong link.

I tried a lot of things to get it to reissue the cert, but even deleting the IP and adding it back won't work. When I try to connect to my website, the browsers refuse and give the following error about the cert.

I realize the cert is wrong, but I can't get it to redo itself.

Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for www.lailasai.com. The certificate is only valid for the following names: *.azureedge.net, *.media.microsoftstream.com, *.origin.mediaservices.windows.net, *.streaming.mediaservices.windows.net

Silvia Wibowo 4,256 Reputation points Microsoft Employee

2024-12-22T23:25:09.49+00:00
Hi @Daniel noyn , I understand you have difficulty with certificate for Azure Front Door custom domain.

What type of certificate do you use:

Azure-managed certificates, or

Bring Your Own Certificates (BYOCs)?

Did you follow these steps correctly: Configure a custom domain on Azure Front Door by using the Azure portal ?
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-12-23T07:10:05.51+00:00
Hi @Daniel noyn

Welcome to Microsoft Q&A Platform, thanks for posting your query here.

Verify custom Domain configuration specifically on SSL:

Go to the Azure resource (Front Door) where your website is hosted.

Find the section related to "Custom Domains" or "TLS/SSL settings."

Make sure that your custom domain (www.lailasai.com) is correctly added and that you've completed domain ownership verification.

If you added the raw Azure endpoint as a custom domain alongside your proper domain, temporarily remove that one.

Check SSL Bindings:

Make sure you are using SNI-based SSL bindings. This allows multiple certificates to be served from the same IP address.

If there's an SSL binding associated with the incorrect Azure endpoint domains, remove it.

Certificate Renewal in Azure:

Go to frontend domains and select your custom domain

Make sure that custom domain HTTPS is enabled.

This can be managed by Front Door, or you can use your own cert. For your reference: https://learn.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain-https

Azure Front Door might have an option to re-validate the domain, which can sometimes trigger a certificate refresh. For your reference: https://learn.microsoft.com/en-us/azure/advisor/advisor-reference-reliability-recommendations

Clear your browser's cache and cookies completely. Alternatively, use a different browser or an incognito/private browsing window.

Flush your local DNS cache:

Windows: ipconfig /flushdns in Command Prompt.

macOS: sudo killall -HUP mDNSResponder in Terminal.

DNS changes and certificate propagation can take some time

If Azure's automatic certificate renewal fails, you can manually generate a certificate using a Let's Encrypt client on your local machine or a server.

Once you have the certificate files (Like a .crt or .pem), import them into your Azure resource's SSL settings.

Kindly let us know if the above helps or you need further assistance on this issue.

Thanks,

Sai.
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-12-24T04:53:16.3266667+00:00

Hi @Daniel noyn,
Greetings!

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Thanks,

Sai.
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-12-26T07:50:03.5966667+00:00

Hi @Daniel noyn,

Good day!

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Thanks,

Sai.

Share via

how to get a new cert when old one is foul

Your answer