Azure Storage Static Website HTTPS certificate hostname mismatch

Time Bokka 0 Reputation points
2026-10-14T06:49:26.5266667+00:00

Question

My Azure Storage Static Website is enabled and index.html and profile.jpg uploaded successfully using Terraform. Endpoint: https://kittuportfoliostg2026.z58.web.core.windows.net/ Chrome shows NET::ERR_CERT_COMMON_NAME_INVALID. curl reports SEC_E_WRONG_PRINCIPAL. The website returns HTTP 200 only when I bypass certificate verification using curl -k. This happens on both laptop and mobile. I am accessing the Azure-generated endpoint directly, not a custom domain. Terraform reports dns_endpoint_type = Standard. Please help investigate the TLS certificate mismatch.

Azure Storage
Azure Storage

Globally unique resources that provide access to data management services and serve as the parent namespace for the services.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. TP 164.6K Reputation points Volunteer Moderator
    2026-10-14T08:54:33.47+00:00

    Hi,

    The certificate does not have *.z58.web.core.windows.net as a Subject Alternative Name (SAN), which is why you are seeing the certificate error. Another person recently reported the same issue.

    The SANs on the certificate go from *.Z1.web.core.windows.net to *.Z50.web.core.windows.net

    A potential workaround would be to have your primary endpoint be within this Z1 to Z50 range. To do this you could try creating a new storage account in a different Azure region, enabling Static website, verify that primary endpoint is within the Z1 to Z50 range, and then copy files over from old storage account to new one.

    I'm sure eventually Microsoft will fix the above certificate issue, but I don't know when that will happen. I mentioned the above workaround because it would allow you to get things working yourself relatively quickly.

    Alternatively you could submit a Technical support request asking for this issue to be fixed, however, this will require paid Azure support plan, and you will need to wait for the issue to be fixed.

    If possible, please try the above workaround and reply back with your results.

    Thanks.

    -TP

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.