Questions tagged [security-certificate]
Electronic document that proves ownership of a public key. E.g. for SSL connections.
340
questions
0
votes
0answers
7 views
Trying to force Apache to use only TLSv1.3 on a vhost, but it refuses to disable TLSv1.2 [migrated]
I have a test vhost on my web server for which I'm trying to enforce TLSv1.3-only but Apache refuses to disable TLSv1.2. TLSv1.3 does work however the following validation services all show that ...
2
votes
1answer
65 views
Most cost effective option for securing 1000+ websites (SSL)
My company manages well over 1000 sites for various clients. Currently, we are paying for a Standard DV certificate for each individual site ($94.99 from GoDaddy). We are easily spending over $100k ...
2
votes
1answer
47 views
Is there a rule that prevents CAs from issuing certificates for private networks (intranets)?
A while ago I encountered a question asking how to setup SSL/TLS on intranets, I gave an answer which basically says "use a public domain and associated certificate and resolve the domain to the ...
2
votes
1answer
55 views
CERTBOT_DOMAIN not set in hook
I am currently trying to set up a hook for certificate deployment. I have successfully retrieved the certificate and found out that you have to force renewal when testing, so I've now hit the rate ...
0
votes
0answers
39 views
Cloudflare returns SSL 525 error for the domain apex with domain hosted by Blogger even using flexible SSL to the origin
When I try to access my blogger using https://example.com I get a 525 error, but when I use https://www.example.com it works fine. I have changed the SSL/TLS encryption to flexible in Cloudflare but ...
9
votes
4answers
3k views
Do I have to pay a web hosting company for an SSL certificate?
I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website?
But my service provider has a variety of ...
2
votes
0answers
45 views
how to reduce SSL handshake time - localhost/self signed cert
We have one .net exe running on local machine and browser make one API to that running service with https://localhost:45235/getInfo. Actual getInfo API returns response in < 1 sec. But when browser ...
0
votes
1answer
32 views
iOS Safari not accepting certificates issued by custom CA
I'm trying to make iOS Safari accept an https website that runs a certificate I signed with my own CA.
My CA cert is here: https://gist.github.com/BenMorel/014d7bd7802b75eec78b0bc0bad7e4e1
When I ...
1
vote
1answer
26 views
Must an SSL certificate be renewed as soon as CSR is generated?
One of our production certs is expiring on Nov 27. A CSR to renew that cert was generated two days ago on Nov 10, and my co-worker now says that because it was generated too fast we cannot process ...
0
votes
1answer
17 views
Moving https website from server A (CentOS 7) to server B (CentOS 8) - what do I need to do regarding certificates?
I've copied all of the referenced files in my nginx configuration over:
/etc/nginx/ssl/STAR_example_com/ssl-bundle.crt
/etc/nginx/ssl/STAR_example_com/STAR_example.key
/etc/ssl/certs/dhparam.pem
I ...
2
votes
1answer
43 views
Should I specify CAA records for www subdomain too?
I pre-paid 5 years of AlpiroSSL Premium (English info here), it's from Sectigo originally, but the certificate provider told me the right CAA is (or should be) trust-provider.com as per my current ...
1
vote
0answers
25 views
HubSpot CMS site is not secure unless someone types in “www.”
so we connected our domain with HubSpot CMS. They only support SSL for subdomains, so when someone does not type in "www." they are prompted with a security warning. They told me I needed to ...
1
vote
1answer
58 views
Wildcard SSL issued by Plesk not working for subdomains hosted by a third party
I've got a Plesk setup which issues Letsencrypt certificates and hosts part of my client websites. When passing the _acme-challenge and receiving a wildcard certificate / installing said certificate ...
-3
votes
1answer
54 views
Redirecting domains on https without creating a certificate for them?
I own, say, 100 domains. I want to add redirect for each of them to a new domain. And not only to a domain, but a custom query string. For instance
domain1.example/url1 -> domain11.example/url2
...
1
vote
0answers
50 views
HSTS compatible .htaccess redirect from non-www to www that preserves URL path [closed]
UPDATE: The redirect actually does work! The site is a friends site and I was coming up with solutions and sending them to him. Turns out his website is running Joomla. After further troubleshooting ...
1
vote
0answers
265 views
Certbot challenge error 404 in webroot mode
This web site runs under Apache on Windows. I installed Windows certbot client and ran it as suggested on its homepage, in webroot mode, since the web site cannot be stopped. This is what it reported:
...
0
votes
0answers
30 views
Set up SSL on NGINX
I'm having difficult setting up SSL on nginx running on Ubuntu. I have a .pfx, .crt, and .pem cert files to work with, but the documentation is for setting it up with .crt and .key files. The code ...
0
votes
0answers
15 views
Is it possible to set the Plesk default certificate as a Let's Encrypt wildcard cert which can also be used for preview URLs?
I can add a wildcard cert to a domain, but how do I get it to show up in the "Server Pool" under Tools & Settings > SSL/TLS Certificates?
I've looked through the psa database and file ...
0
votes
2answers
102 views
How does Cloudflare do HTTPS for my site when I haven't provided them with an ssl certificate?
I setup cloudflare today. It only asked me to add its nameservers to my domain. After doing that I'm able to access my site at my domain name but it's now cloudflare's IP. This is all good and as ...
0
votes
0answers
14 views
IIS 10 bindings getting messed up with multiple sites?
I have site A with URL - great.example.com and a certificate.
I have site B with URL - good.example.com and a certificate.
Both certificates are installed and look good. When I go into each site I ...
1
vote
1answer
77 views
Why letsencrypt certificate generation not done like domain verification done by GSuite?
I have used letsencrypt's certbot for creating certs for my domains. I have to download certbot and run in my machine and it gives a string to be placed in as dns record. I have to manually add the ...
3
votes
1answer
88 views
Does having an extended validation SSL certificate increase your Google search ranking? [duplicate]
I am assisting an retailer obtain and install an extended validation (EV) SSL certificate for their online shop. After a week of back and forth paperwork with the CA, I wonder whether it's worth the ...
0
votes
1answer
78 views
This server could not prove that it is LLLL.com; its security certificate is from *.dnsmadeeasy.com. This may be caused by a misconfiguration [closed]
I'm having difficulty figuring out why my site is giving this error only to some users (we just migrated the domain last night) https://DavidKim2020.com
This is the error it's giving to some users:
...
2
votes
0answers
26 views
Allow users to point domains at web app - multi domain SSL
I have a web app, and when users sign up, we give them their own subdomain, e,g, user1.website.example
We do this with a wildcard ssl for *.website.example
However, users are requesting custom ...
3
votes
0answers
571 views
Reload a domain certificate in prosody (wirhin jitsi-meet)
I have 2 servers both running Ubuntu 18-04:
server A with apt install of jitsi-meet (fully working)
server B with an edited install (from github) of jibri (fully working)
The A server (the server ...
0
votes
1answer
19 views
Do the LetsEncrypt DNS01 challenges change and how to they interoperate with HTTP challenges?
I typically use HTTP challenges to generate LetsEncrypt certs. However, there are some cases where this is not practical. I've not used DNS challenges before
So a couple of related questions -
Do ...
1
vote
0answers
25 views
Cannot connect because of insecure connection (IE11 & Edge17)
Goodday,
I stumbled upon a problem with both IE and Edge, where the entire website cannot load because of an 'insecure' connection.
I checked and it uses TLS1.2 (which is a secure SSL, right?).
...
3
votes
1answer
242 views
Intermittent problem establishing a secure HTTPS connection to my site
My site gives this error when I try to visit, both on windows and ios. The thing is that it doesn't always happens, some days it works fine and the other it doesn't. Does anyone know what could be the ...
0
votes
1answer
417 views
Is it possible to redirect HTTPS to HTTP without warning?
One of my clients now doesn't want to use a SSL certificate. But the home page of their site has been indexed with HTTPS. I have already redirected HTTPS to HTTP but it shows a warning every time.
Is ...
3
votes
1answer
195 views
Are short expiration and lack of warranty disadvantages of cPanel's AutoSSL?
I am trying to make my site HTTPS due to SEO and integration support with websites such as facebook. For this, I need to purchase an SSL certificate. But I saw control panel & WHM gives me option ...
1
vote
1answer
488 views
SSL certificates: Does a secondary domain which does only redirect need a seperate SSL certificate?
Some customer gave me the input that if you have a website with a domain like
https://www.example.com
which has a lot of secondary domains only redirecting like
https://www.example.eu
https://www....
1
vote
0answers
24 views
All HTTP URIs redirect to the HTTPs of homepage [closed]
I have an issue on my website, where all http URLs redirect to the https of the homepage. For example,
http://example.com/ppc-services/ redirects to https://example.com/
I have added this to ....
1
vote
2answers
31 views
Does “Secure domain space” mean I won't be able to access my domain over unsecure protocols?
I am about to buy .dev domain. However registrars warn that it is a "secure domain space" and that I will need SSL certificate for the domain. I am more than happy to make sure the web runs over SSL, ...
1
vote
0answers
19 views
How to prevent Chrome from showing “🛈 Not secure” for my website in the URL bar? [duplicate]
I have uploaded my website in my IIS using static IP. whenever I access it from local or remote it was showing "not secure".
How do I resolve this issue?
2
votes
1answer
35 views
Verify SSL Cert with Bind
My company renew our wildcard SSL certification today through DigiCert and I am trying to validate ownership of the domain through DNS. We manage our own DNS server using BIND. I have added the ...
2
votes
1answer
124 views
When does Squarespace renew TLS/x.509 certificates?
I have a website on Squarespace and the TLS certificate is set to expire in less than 24 hours.
Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
Validity
Not ...
1
vote
1answer
326 views
Is CloudFlare full SSL less secure than Cloudflace full (strict) SSL?
I have a Linux shared hosting on Hostgator, and am using a Full SSL from Cloudflare which Encrypts end-to-end, using a self-signed certificate on the server.
How secure is it?
What are different ...
1
vote
1answer
903 views
Trouble activating free SSL from Domain.com when using Hostinger as a web host
Recently, I transfered my domain from GoDaddy to Domain.com. My hosting is still provide by Hostinger.com. Domain.com have an option of Free SSL. You just enabled it to get SSL Certificate and you don'...
0
votes
0answers
23 views
move SSL file from Cpanel to VPS
I have a Cpanel with valid SSL and now I wanna move SSL file from Cpanel to VPS. my VPS os is ubuntu and i use apache. how I can move SSL to VPS or create new SSL with old SSL file.
1
vote
0answers
12 views
Explicitly Validating Certificates [closed]
I am unable to make any API calls to the API I'd like to because the certificate is invalid. How do I go about adding the certificate to a trusted group so that it is automatically trusted? As it ...
2
votes
2answers
372 views
What makes Open Graph checkers unable to detect Open Graph data?
My page, after adding SSL certificate, cannot have preview fetched by Facebook or Twitter when sharing the link. I have followed The Open Graph protocol and include the following open graph tags:
&...
65
votes
5answers
10k views
Why should I pay for an SSL certificate?
I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
1
vote
1answer
236 views
update virtual host's SSL cert after cpanel has expired
I had setup the server, virtual hosts via cpanel.
I didnt renew my cpanel subscription because I no longer needed it.
Now my SSL certificate has expired. I have SSH access to the server.
How do I ...
0
votes
1answer
393 views
New SSL certificate is not propagated
I have installed a new SSL certificate on my server and removed the old one but when I open the website using new PC and new browsers, I still view the old certificate in the browser.
I have windows ...
0
votes
1answer
64 views
Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?
Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains?
How are they different from self-signed ...
2
votes
2answers
154 views
Why do SSL certificates expire?
Why do SSL certificates usually expire after a certain given period of time?Can't it really be a thing of once applied and verified, then it should be a lifetime venture?
2
votes
1answer
49 views
Upload a chain through PLESK where there are only fields for the certificate and the authority?
I have a free certificate bundle which include a root, intermediate, server and CA crt files. I am trying to use this 3rd-party certificate in a GoDaddy PLESK hosted solution and have the option to ...
1
vote
0answers
1k views
Let's Encrypt certificate renewal failure: “too many failed authorizations recently”
I am running a website on my Raspberry Pi with 2 different domain names.
Installing the certificate for https:// when it became necessary was no problem. But renewing it seems impossible.
I have ...
0
votes
1answer
39 views
Is it recommended to add SSL certificate protection to the domain's subdomains (webmail,webdisk,cpanel)?
I bought web hosting under FastComet and they have a free Let's Encrypt SSL service that comes with the package. There is an option to include the domain's subdomains (webmail,webdisk,cpanel) to ...
0
votes
0answers
118 views
Verify a root domain on Google search consol (or webmaster central) when http url is already verified
I am having a few issues uploading my SSL certificate on Google Cloud.
It says that "You are not an authorized owner of the domain for this certificate" while I have already validated the property ...
