two DNS records on SAN Certificate explanation.

Janus Bariñan 1,126 Reputation points
2020-10-11T02:26:59.86+00:00

Hi,

I was browsing a website then got curious about it's certificate. I checked the certificate and this is what the cert tree looks like.
31328-cert1.jpg

Upon checking the SAN I see two DNS entries:
DNS Name=sni.cloudflaressl.com
DNS Name=www.globe.com.ph

31423-cert2.jpg

My question is can someone explain these two entries in DNS Name?

Why when I enter sni.cloudflaressl.com in the browser it does not bring me to the same website as www.globe.com.ph?

Isn't it suppose to bring me to the same website?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,730 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. gastone canali 236 Reputation points
    2020-10-11T09:14:12.013+00:00

    SNI.cloudflaressl.com is part of the service offered and not relay with the site hosted (in your case https://www.globe.com.ph/)
    https://www.cloudflare.com/learning/ssl/what-is-sni/
    "SNI is somewhat like mailing a package to an apartment building instead of to a house. When mailing something to someone's house, the street address alone is enough to get the package to the right person. But when a package goes to an apartment building, it needs the apartment number in addition to the street address; otherwise, the package might not go to the right person or might not be delivered at all."

    The site sni.cloudflaressl.com has a permantent redirect to https://www.cloudflare.com/


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.