title: Make a CA-signed certificate that works with a changing public ip counterbalanced with No-IP
body: <p>Right, so, just a bit of background : I've got a R-Pi 4 (2GB) that's running the latest version. Installed OMV (OpenMediaVault) on it. The NAS bit of this project works well... OMV has an online control panel (running with nginx) that I can access through its IP address on my PC. But this panel is HTTP by default, and as I'm opening ports to make this available for maintenance while I'm away, I wanted to activate HTTPS. I understand I need a certificate for that, but when I made a self-signed one, Chrome kept telling me &quot;the site is not secure&quot;.</p>
  <p>I've given my server a No-IP subdomain-name (grikirk-panel.ddns.net), and I selected the &quot;Web redirect&quot; option, because I want the simple URL (with no port at the end) to redirect to port 52000, which I port forwarded on my router.</p>
  <p>Now for the fun bit : I have tried many things, but I have to admit I'm now stumped. My certificate, either signed by TrustCor (they're built into the the No-IP panel) or CAcert.org, has the CN &lt;grikirk-panel.ddns.net&gt;, and I added as alternate URI &lt;grikirk-pabel.ddns.net&gt; and &lt;www.grikirk-panel.ddns.net&gt; (apparently CN isn't enough for Chrome anymore, I'll put the link of that if I find it).</p>
  <p>The problem with that is No-IP redirects to an IP address, and so the certificate isn't valid anymore ! Even if I add the IP to the certificate, 6 hours later, it's not valid anymore because my public IP address has changed !</p>
  <p>Just thought of this while typing : would it be worth giving &quot;grikirk-panel.ddns.net&quot; as the R-Pi domain name ? But then, I was planning on creating a new No-IP address such as &quot;grikirk-sftp.ddns.net&quot; for the shares. That would mean 2 domain names on the R-Pi, which is impossible, right ?</p>
  <p>Please help me, because I'm a bit desperate in front of :</p>
  <p><a href="https://i.stack.imgur.com/0zK0t.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/0zK0t.png" alt="1" /></a></p>
  <p>That's actually exactly the error I'm getting...</p>
  <p>Thanks, Silloky</p>