I am trying to update current http request both urls use https and have class 3 EV SSL certs from symantec.

The same code works in my staging environment, and the old https url works but not the new one...

Here is the code,
(I removed the actual urls for privacy concerns, I would like to have more info into the error on salesforces end first)

HttpRequest req = new HttpRequest();
HttpResponse res = new HttpResponse();
Http http = new Http();
req.setEndpoint('https://sub.domain.com');
req.setMethod('GET');
res = http.send(req);
result = res.getBody();

Here is the debug log from start to finish of http request with the error recevied.

SYSTEM_METHOD_ENTRY|[198]|System.HttpRequest.setEndpoint(String) 15:06:59.126 (126202906)|
SYSTEM_METHOD_EXIT|[198]|System.HttpRequest.setEndpoint(String) 15:06:59.126 (126227812)|
SYSTEM_METHOD_ENTRY|[199]|System.HttpRequest.setMethod(String) 15:06:59.126 (126248551)|
SYSTEM_METHOD_EXIT|[199]|System.HttpRequest.setMethod(String) 15:06:59.126 (126267855)|
SYSTEM_METHOD_ENTRY|[200]|System.Http.send(ANY) 15:06:59.126 (126326326)|
CALLOUT_REQUEST|[200]|System.HttpRequest[Endpoint=sub.domain.com, Method=GET] 15:06:59.159 (159381940)|
CALLOUT_REQUEST|[200]|System.HttpRequest retrying request in response to handshake failure: java.security.cert.CertificateException: No subject alternative DNS name matching sub.domain.com found. 15:06:59.172 (172988995)|
EXCEPTION_THROWN|[200]|System.CalloutException: java.security.cert.CertificateException: No subject alternative DNS name matching sub.domain.com found. 15:06:59.173 (173112841)|
SYSTEM_METHOD_EXIT|[200]|System.Http.send(ANY) 15:06:59.173 (173192253)|
SYSTEM_METHOD_ENTRY|[224]|String.valueOf(Object) 15:06:59.173 (173250513)|
SYSTEM_METHOD_EXIT|[224]|String.valueOf(Object) 15:06:59.173 (173269792)|
SYSTEM_METHOD_ENTRY|[224]|System.debug(ANY) 15:06:59.173 (173277551)|
USER_DEBUG|[224]|DEBUG|Callout error: System.CalloutException: java.security.cert.CertificateException: No subject alternative DNS name matching sub.domain.com found. 15:06:59.173 (173285069)|
SYSTEM_METHOD_EXIT|[224]|System.debug(ANY)

Hi,

We are trying to make a callout to "https://support.breadwinnerhq.com/bwpayment/v1/accounts/00Db0000000b9t" from Salesforce. But, we are facing an exception:

System.CalloutException: java.security.cert.CertificateException: No subject alternative DNS name matching support.breadwinnerhq.com found.

The domain has a valid SSL certificate.

We have checked from SSL shopper: https://www.sslshopper.com/ssl-checker.html?submit=submit&hostname=support.breadwinnerhq.com (https://www.sslshopper.com/ssl-checker.html?submit=submit&hostname=support.breadwinnerhq.com)

But, still we are facing this issue.

We don't understand why is Salesforce not allowing us to make callouts to this domain when it has a valid SSL certificate and the browsers allow it.


Thanks,
Rupali