Security Error: Domain Name Mismatch

[Joelee]

In my VPS (Fedora Core 2) there is a domain with a online epayment system. Each time when I try to do a checkout from my online shop, it will pop up a window mentioning below message:
----------------------------------------------------
Security Error: Domain Name Mismatch. You have attempted to establish a connection with "Secure.mydomain.com". However, the security certificate presented belongs to "Plesk". It is possible, though unlikely taht someone maybe trying to intercept your communication with this web site. If you suspect the certificate shown does not belong to "secure.mydomain.com", please cancel the connection and notify the site administrator.
--------------------------------------------------
It is very annoy. I think it scares people a lot to go ahead. Does anyony has any idea how I can remove this popup window please? Do I need to install a certificate for a SSH access server?

Any help would be highly appreciated .

Thank you in advance.

 

[Highland]

Anytime you use SSL (https://...) your browser checks to make sure the certificate is valid (who signed it, what domain is it issued for, etc). By default, every SSL connection on your Plesk server uses the unsigned Plesk certificate. If you're running SSL for things like credit payments then you need to install a signed SSL certificate on your domain to make the problem go away. The cheapest I've seen is Godaddy's quick SSL for like $30/yr. Remember you can only have one signed SSL cert per IP.

 

[Joelee]

Hi thanks, I will buy a ssl cert soon.

 

[Joelee]

Hi again, I have one more question here: I am using a VPS with Fedora Core 2. From Plesk 7.5.4 control panel, I found my server information is : httpd 2.0.51-2.9.1.swsoft . So
should I chose Apache2.0 server for producing a cert? or alternatively, chose Apache MODSSL or AppacheSSL please? thank you in advance.

 

[Highland]

None of the above. In your Plesk panel for each domain there's a Certificates panel. In there is where you will insert your information on your cert. You shouldn't need to manually modify anything Apache unless you're trying to put your cert on a subdomain (entirely different process)

 

[Joelee]

Hi Thanks,

I am sorry I didn't make my question clear in my previous post. I mean in the process of buying a SSL certificate, it asked me to provide my webserver software information, whcih includes Apache MODSSL, Apache Raven, Apache SSLeay, Microsoftware IIS 4.0, Apache OpenSSL, Apache 2.0, etc. So which one I should chose for generating a certificate please?

 

[Highland]

I've not ever been asked that but I've not used GoDaddy personally. I'd bet your server is just a regular Apache 2.0 (most Plesk servers seem to be). To be sure, do a
#rpm -q httpd
If it comes back with something like httpd-2.0.51-2.9 then it's a normal 2.0

 

[Joelee]

Hi thank you very much. It is httpd-2.0.51-2.9. I really appreciate your support.