Links from emails - blocked because cert did not match domain name

[timbo343]

Just recently our staff have been receiving emails with legit clickable links and the link starts with https://urlxxxx.domain.com/ (where x is a number). The Smoothwall is blocking and reporting this as "the server's certificate did not match the domain name".

 

The example for us is pkeducation.co.uk. Now, this domain is not listed in Smoothwall which might be the issue, however if this is not the issue, why would this be happening? Is it something to do with HTTPS inspection?

[machy]

We had an issue for a while with SW (and might still do and its just not caught) 

Where any subdomain not explicitly listed in the cert gave a cert error. 

Looking at the cet for PK, its only got the "standard" subdomains listed in the cert, it doesn't even have *.pk 

 

Off a filter it would just redirect once the page has loaded to wherever it was supposed to go, but SW stopped it before it got to that.

 

A mix of overzealous security settings and poorly managed SSL Certs 

 

Edit: Think its part of why Pearson breaks every few months when they change urls and redirect you 100 times

Edited January 23 by machy