title: I installed SSL certificate in Apache, but weakness scan software show it has a wrong host vulnerabilities
body: <p>OS:Microsoft Server 2019</p>
  <p>Web server:Apache</p>
  <p>Frontend: Vue.js</p>
  <p>Backend: Laravel</p>
  <p>I'm setting port 443 to connect my vue.js project, and set port 9999 to connect laravel project.</p>
  <p>When I going to &quot;https://my_domain&quot;, it show SSL is valid in front of URL bar.</p>
  <p>I use <a href="https://pentest-tools.com/website-vulnerability-scanning/website-scanner" rel="nofollow noreferrer">Pentest-tools</a> to scan &quot;https://my_domain&quot;, the tools show the website is not have any vulnerability.</p>
  <p>But when I using <a href="https://www.vegabird.com/vooki/" rel="nofollow noreferrer">Vooki</a> to scan my laravel API, it show I have a medium vulnerability which is &quot;SSL-certificate wrong host&quot;.</p>
  <p>where am I doing wrong? why when I go to vue.js using browser, it show I installed CA correct, but laravel API show &quot;wrong host&quot; in Vooki?</p>
  <p>This is my httpd-vhosts.conf.</p>
  <pre><code>&lt;VirtualHost *:443&gt;
      DocumentRoot &quot;C:\Apache24\htdocs\index&quot;
      ServerName my_domain
      ErrorLog &quot;C:\Apache24\logs\error.log&quot;
      CustomLog &quot;C:\Apache24\logs\access.log&quot; combined
      &lt;Directory &quot;C:\Apache24\htdocs\vue_project_name&quot;&gt; 
          Options Indexes FollowSymLinks
          AllowOverride All
          Require all granted
      &lt;/Directory&gt;
      &lt;Directory &quot;C:\Apache24\htdocs\vue_project_name\css&quot;&gt; 
          Options Indexes FollowSymLinks
          AllowOverride All
          Require ip my_ip
      &lt;/Directory&gt;
      &lt;Directory &quot;C:\Apache24\htdocs\vue_project_name\js&quot;&gt; 
          Options Indexes FollowSymLinks
          AllowOverride All
          Require ip my_ip
      &lt;/Directory&gt;
      SSLEngine on
      SSLProtocol -all +TLSv1.2   
      SSLCertificateKeyFile &quot;C:\Apache24\conf\ssl.key\my_domain.key&quot;
      SSLCertificateFile &quot;C:\Apache24\conf\ssl.crt\my_domain.crt&quot;
      SSLCertificateChainFile &quot;C:\Apache24\conf\DigiCertCA.crt&quot;
  &lt;/VirtualHost&gt;
  
  &lt;VirtualHost *:9999&gt;
      DocumentRoot &quot;C:\Apache24\htdocs\laravel_project_name\public&quot;
      ServerName my_domain
      ErrorLog &quot;C:\Apache24\logs\error.log&quot;
      CustomLog &quot;C:\Apache24\logs\access.log&quot; combined
      &lt;Directory &quot;C:\Apache24\htdocs\laravel_project_name\public&quot;&gt; 
          Options Indexes FollowSymLinks
          AllowOverride All
          Require ip my_ip
      &lt;/Directory&gt;
      SSLEngine on
      SSLProtocol -all +TLSv1.2   
      SSLCertificateKeyFile &quot;C:\Apache24\conf\ssl.key\my_domain.key&quot;
      SSLCertificateFile &quot;C:\Apache24\conf\ssl.crt\my_domain.crt&quot;
      SSLCertificateChainFile &quot;C:\Apache24\conf\DigiCertCA.crt&quot;
  &lt;/VirtualHost&gt;
  </code></pre>