> The one certificate I'm using ( sierraprogress.crt) works fine for sierraprogress.org connections but, of course, will NOT work for www.sierraprogress.org connections because of the domain name mis-match. I've also tried using a wildcard certificate for *.sierraprogress.org (see below), but I couldn't get that to work at all. You can't fix a mismatched certificate with a redirect. It happens too late. You need a cert with a Subject Alt Name extension for each hostname (or, covered by wildcards) --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx