4

After I have followed the instructions on heroku to add a certificate from DNSimple, I still have this error when I try to access the website:

www.web.com uses an invalid security certificate.

The certificate is not trusted because no issuer chain was provided. The certificate is only valid for the following names: *.herokuapp.com , herokuapp.com

(Error code: sec_error_unknown_issuer)

So, what could be the problem?

simo
  • 23,342
  • 38
  • 121
  • 218

1 Answers1

5

Your hostname points to the Heroku generic app endpoint.

➜  ~  dig www.dcaclab.com +short
web.herokuapp.com.
us-east-1-a.route.herokuapp.com.
54.243.166.168

The CNAME should point to the Heroku SSL endpoint.

simo
  • 23,342
  • 38
  • 121
  • 218
Simone Carletti
  • 173,507
  • 49
  • 363
  • 364
  • Doesn't work for me at the moment. I already have a CNAME record points to the Heorku SSL Endpoint but `dig` still shows the generic endpoint. It's really confusing. – JNN Apr 07 '15 at 13:54
  • 1
    It means the DNS configuration is incorrect, or the DNS lookup is cached on your side – Simone Carletti Apr 07 '15 at 13:55