Incorrect SSL certificate presented

[dragonbornrex]

I have a server running OLS with CyberPanel. Following is the setup:

rootdomain.com(hostname for the server with OLS)
|__domain1.com
|__domain2.com
|__domain3.com

All domains have their own SSL through LetsEncrypt.
However, when I run the following command, the output returns the CN name as rootdomain.com.

openssl s_client -connect domain1.com:443 -showcerts

This happens for all 3 domains, which return certificate for rootdomain.

I have cross-checked multiple times, and each VirtualHost has SSL path pointed to the correct certificate in respective directories under '/etc/letsencrypt/live/'.

All this does not cause a problem in the browser, however, Cloudfront refuses to connect due to this issue, and throws a 502 error.

From what I know, OLS does support SNI, so what am I missing?

 

[Cold-Egg]

Hi,
For the cert part, if you can visit the site without issue on the browser, then it should be no problem.
You can also run this example to verify

openssl s_client -connect origin-domain-name:443 -servername CNAME

Read https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/http-502-bad-gateway.html for more information.