# Apache: [ssl:warn] AH01909: example.com:443:0 server certificate does NOT include an ID which matches the server name

**Code:** `AH01909: server certificate does NOT include an ID which matches the server name` · **Category:** SSL / TLS · **Seen on:** SSL, Linux

Apache's SSL virtual host name does not match any name inside the certificate it loads.

## Meaning

Warning only, but it means browsers will show a name mismatch for that vhost. Fix the `ServerName`/`ServerAlias` to a name in the certificate, load the correct certificate for the vhost, or reissue the certificate to include the name. Often a default `*:443` vhost is serving the wrong cert.

## Common causes

- ServerName not present in certificate SAN
- Wrong certificate file for this vhost
- Default SSL vhost catching requests
- Certificate for example.com used with www host
- Copied vhost not updated

## Quick fix

1. Align `ServerName` with the certificate name
2. Point `SSLCertificateFile` to the right certificate
3. Run `apachectl -S` to review vhost mapping

## Detailed fix by platform

### Linux

1. `apachectl -S` and `openssl x509 -in cert.pem -noout -ext subjectAltName`

## How to diagnose

1. **ServerName** — In SAN?
2. **Cert** — Right file per vhost?
3. **Default** — Catch-all vhost?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/ssl/apache-ah01909-servername-mismatch)
