I have an SSL cert in which CN is "abc.xyz.com". But the url shared to 3rd party organization to access a web app on our server is: "def.stu.com/what-ever".
When this arrangement is working for some 3rd party organization since a long time, a new organisation trying to access the URL is getting SSL Exception. According to them, the URL must be in line with Common Name. Something like: abc.xyz.com/what-ever.
Is it really mandatory to have URL like this abc.xyz.com/what-ever? If yes, how are other integrator were able to call it successfully so far?
Note: Most of the search on internet agree to the point that URL should be based on Common Name. Then I also found that, we can have multiple domain name under one Common Name (Subject Alternative Name [SAN] concept). But no where I got a clear picture. Can I use any tool and check, if the cert is using SAN. I am from Dev team with limited knowledge on security. Will really appreciate a concrete ans to the mentioned behavior of SSL Cert or some pointer towards it.