Questions tagged [security-certificate]

Electronic document that proves ownership of a public key. E.g. for SSL connections.

Filter by
Sorted by
Tagged with
0 votes
0 answers
44 views

Is it fine form the viewpoint of security to track the SSL keys and certificate by the Version Control Systems?

As commonly known, the files with environments variables (.env and like) are being frequently excluded from the tracking by the Version Control Systems. What about SSL keys and certificates? Please ...
Takeshi Tokugawa YD's user avatar
1 vote
1 answer
32 views

How can I check the certificate validity of an email server?

I have this problem continuously. Thunderbird works fine, using POP and SMTP Crazy Domains changes something on the shared server Thunderbird stops fetching email I complain and provide the ...
Rohit Gupta's user avatar
  • 2,241
1 vote
1 answer
112 views

Two domains linked with CNAME - do I need two CA certificates for SSL?

I have a pretty simple question. Suppose I have a domain a.example and I add a CNAME record for the apex/root of that domain pointing to another domain I own: b.example. Suppose now that I want to ...
Joshua Schroijen's user avatar
1 vote
2 answers
59 views

HTTPS site on Chrome with paid SSL showing as Dangerous

I built a WordPress STAGING site on projectjustcause.com domain. I have installed and tested paid SSL cert and it worked fine. When I added directives to APACHE 2.4 .htaccess file to forward all http ...
Eric Hepperle - CodeSlayer2010's user avatar
0 votes
0 answers
29 views

SSL certificate for www sub-domain not valid on DigitalOcean WikiJS installation

I have set up WikiJS using a DigitalOcean droplet. If I access my site via https://example.com everything is fine. If I access it via https://www.example.com I get a certificate warning due a domain ...
WSC's user avatar
  • 101
1 vote
1 answer
198 views

Using CloudFlare with GitHub Pages and SSL/TLS Full or Full (Strict) and Proxied DNS prevents GitHub Pages' Certificate Renewal

I am hosting my personal webpage on GitHub Pages with a custom domain and using CloudFlare for DNS etc. I am using the Full (Strict) mode for TLS/SSL and Proxied DNS. When The GitHub Pages tries to ...
ARGYROU MINAS's user avatar
2 votes
1 answer
65 views

Unable to get SSL certificate in mailserver separate from web hosting

I use Firebase Hosting to host my website and a VPS to host a mailserver for the same domain. When I try to issue a certbot Let's Encrypt SSL certificate I get the following error: Could not request ...
nickh's user avatar
  • 123
3 votes
3 answers
1k views

Reverse proxy SSL with Nginx, do I need a wildcard or a separate cert for every host?

I have Nginx setup and successfully serving SSL to example.com using certbot/letsencrypt. But when I try to reverse proxy to a local machine I get NET::ERR_CERT_COMMON_NAME_INVALID. Here's the ...
THE JOATMON's user avatar
1 vote
2 answers
54 views

What type of security certificate do I need

Our website is information only, what we do, what we've done and contact info. We do not do any ecommerce or provide any downloads for visitors. The person that ran our web hosting company passsed ...
Platinum Goose's user avatar
-1 votes
1 answer
24 views

Alternative to SSL certificate? [closed]

I wanted to make a fun joke website for my friends and I. I'm using 000webhost because I don't care to spend money, as we would use it for a week. The website requires Node and a database. I set it ...
Trevor's user avatar
  • 11
1 vote
0 answers
30 views

Using Wildcard Cerificates in Ubuntu server fails to start apache2

I am using Ubuntu 22.04.1 with apache 2.4, and I was given a wildcard certificate *.domain.net from our IT Head, from a trusted CA and is supposed to be valid. However, a bunch of online forums to ...
popat-topa-green's user avatar
0 votes
0 answers
46 views

Does the SSL certificate has to be valid for the www subdomain

The .htaccess successfully diverts all variants to @@@@.software on the browsers. And I have appropriate CSP headers (that work on all other sites in different installations) installed in htaccess. I ...
Rohit Gupta's user avatar
  • 2,241
0 votes
0 answers
53 views

SSL DV certificate not working uniformly across browsers, ISP and OS

I purchased SSL certificate through Namecheap. I am using Windows 11 OS, with BSNL Internet Service Operator(wifi) with Firefox v16, Microsoft Edge, Chrome v106 as browsers and iPad OS version 16 and ...
Manikandan's user avatar
2 votes
3 answers
54 views

TLS bound to another domain in the same hosting

I have a domain for a customer, say my-nice-restaurant.example hosted in a hosting company with cPanel. This cPanel takes all the time one domain like the "primary domain" of my account, say ...
Xavi Montero's user avatar
2 votes
2 answers
268 views

Do I need to renew my SSL certificate through my domain registrar when my web host is providing one for me?

My domain is through Network Solutions and it points to my WordPress site on Siteground. Siteground provides SSL certificate. However, I keep getting warnings from Network solutions that I need to ...
booksoverborders's user avatar
2 votes
1 answer
2k views

Is an SSL certificate installed on the server or domain?

I have an existing site with an SSL certificate, and the domain will be transferring to a different host. Does the SSL certificate carry over with the domain? Or does this need to be installed on the ...
user avatar
0 votes
0 answers
221 views

Can I Install a wildcard SSL certificate from a third party to a Hostinger domain?

I have a domain registered with Hostinger, along with hosting, which does not support wildcard SSL certificates. Is there any workaround for this issue? Is there any way I can manually install a ...
z123's user avatar
  • 101
3 votes
1 answer
333 views

Server's certificate is unknown when using ftp with cPanel

I have a VPS hosting with both WHM/cPanel and SSH root access, I created an FTP account using cPanel, now when I try to connect using FileZilla I get the following warning: The server's certificate is ...
Nishu Ali's user avatar
1 vote
0 answers
186 views

SSL certificate for Blogger on a custom sub-domain

I have Blogspot blog show casing my products running for many years on http:// which is running as http://products.example.com for many years. My DNS record for example.com (which I own) at the domain ...
Shyamal Bagchi's user avatar
3 votes
1 answer
148 views

Is there an official or safe way to use a LetsEncrypt certificate for the WHM UI?

To be specific, I am talking about using a LetsEncrypt (LE) cert for WHM itself, not a domain being managed by these tools. I'm well aware that I could install Certbot and reconfigure the underlying ...
Mikey T.K.'s user avatar
0 votes
1 answer
31 views

Why does a website present a certificate for a completely different domain? [closed]

The last couple of weeks I have had several websites temporarily present certificates for completely unrelated domains. A visit to docs.oracle.com presented a certificate for an internal service and ...
Big Tuna's user avatar
4 votes
0 answers
503 views

"Cert authority invalid" error from Chrome on Android when viewing my website which uses Lets Encrypt

I have installed and activated open SSL (letsencrypt.org R3 version V3) on my website. Website is working fine in Desktop browsers (Chrome, Firefox....) but in Google Chrome Android, I get security ...
Ali Sheikhpour's user avatar
3 votes
1 answer
289 views

WHM upload CA root certificate to validate Cloudflare certificates

I'm using Cloudflare's self-signed certificates to encrypt traffic between Cloudflare and my origin web server. A problem that cPanel shows a No Valid Certificate for the domain and the error ...
Alexius The Coder's user avatar
1 vote
3 answers
778 views

How do I install a security certificate for an alias (domain pointer) in DirectAdmin?

I have the following problem: I have 2 domains: domain1.example and domain2.example (domain pointer) => domain1.example. Previously, I used Let's Encrypt to create SSL for both in DirectAdmin and ...
Jimmy Phan's user avatar
1 vote
1 answer
54 views

Will the cancellation of the https agreement cause a significant drop in my website traffic?

Will the cancellation of the https protocol cause my website traffic to drop significantly? The https protocol of my website has expired and I will not update it. Now I can’t open it when searching ...
yuweitek.com's user avatar
2 votes
1 answer
91 views

Most cost effective option for securing 1000+ websites (SSL)

My company manages well over 1000 sites for various clients. Currently, we are paying for a Standard DV certificate for each individual site ($94.99 from GoDaddy). We are easily spending over $100k ...
Zach's user avatar
  • 23
3 votes
1 answer
108 views

Is there a rule that prevents CAs from issuing certificates for private networks (intranets)?

A while ago I encountered a question asking how to setup SSL/TLS on intranets, I gave an answer which basically says "use a public domain and associated certificate and resolve the domain to the ...
DannyNiu's user avatar
  • 133
2 votes
1 answer
304 views

CERTBOT_DOMAIN not set in hook

I am currently trying to set up a hook for certificate deployment. I have successfully retrieved the certificate and found out that you have to force renewal when testing, so I've now hit the rate ...
jack's user avatar
  • 123
0 votes
0 answers
70 views

Cloudflare returns SSL 525 error for the domain apex with domain hosted by Blogger even using flexible SSL to the origin

When I try to access my blogger using https://example.com I get a 525 error, but when I use https://www.example.com it works fine. I have changed the SSL/TLS encryption to flexible in Cloudflare but ...
user12500571's user avatar
9 votes
4 answers
4k views

Do I have to pay a web hosting company for an SSL certificate?

I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website? But my service provider has a variety of ...
Angus Comber's user avatar
2 votes
0 answers
78 views

how to reduce SSL handshake time - localhost/self signed cert

We have one .net exe running on local machine and browser make one API to that running service with https://localhost:45235/getInfo. Actual getInfo API returns response in < 1 sec. But when browser ...
Shital's user avatar
  • 21
4 votes
1 answer
211 views

Can Screaming Frog check for invalid SSL certificates?

I've been using Screaming Frog to test the home pages of a few hundred sites I manage, to see what status codes they return. I noticed in my browser that one of those sites has an invalid (expired) ...
Liam's user avatar
  • 361
0 votes
1 answer
466 views

iOS Safari not accepting certificates issued by custom CA

I'm trying to make iOS Safari accept an https website that runs a certificate I signed with my own CA. My CA cert is here: https://gist.github.com/BenMorel/014d7bd7802b75eec78b0bc0bad7e4e1 When I ...
BenMorel's user avatar
  • 271
1 vote
1 answer
33 views

Must an SSL certificate be renewed as soon as CSR is generated?

One of our production certs is expiring on Nov 27. A CSR to renew that cert was generated two days ago on Nov 10, and my co-worker now says that because it was generated too fast we cannot process ...
Faiz's user avatar
  • 13
0 votes
1 answer
25 views

Moving https website from server A (CentOS 7) to server B (CentOS 8) - what do I need to do regarding certificates?

I've copied all of the referenced files in my nginx configuration over: /etc/nginx/ssl/STAR_example_com/ssl-bundle.crt /etc/nginx/ssl/STAR_example_com/STAR_example.key /etc/ssl/certs/dhparam.pem I ...
Codemonkey's user avatar
2 votes
1 answer
232 views

Should I specify CAA records for www subdomain too?

I pre-paid 5 years of AlpiroSSL Premium (English info here), it's from Sectigo originally, but the certificate provider told me the right CAA is (or should be) trust-provider.com as per my current ...
Vlastimil Burián's user avatar
1 vote
0 answers
73 views

HubSpot CMS site is not secure unless someone types in "www."

so we connected our domain with HubSpot CMS. They only support SSL for subdomains, so when someone does not type in "www." they are prompted with a security warning. They told me I needed to ...
Chris Davis's user avatar
1 vote
1 answer
423 views

Wildcard SSL issued by Plesk not working for subdomains hosted by a third party

I've got a Plesk setup which issues Letsencrypt certificates and hosts part of my client websites. When passing the _acme-challenge and receiving a wildcard certificate / installing said certificate ...
RDAxRoadkill's user avatar
-3 votes
1 answer
1k views

Redirecting domains on https without creating a certificate for them?

I own, say, 100 domains. I want to add redirect for each of them to a new domain. And not only to a domain, but a custom query string. For instance domain1.example/url1 -> domain11.example/url2 ...
kosmosu05's user avatar
1 vote
0 answers
90 views

HSTS compatible .htaccess redirect from non-www to www that preserves URL path [closed]

UPDATE: The redirect actually does work! The site is a friends site and I was coming up with solutions and sending them to him. Turns out his website is running Joomla. After further troubleshooting ...
mkoontz's user avatar
  • 11
1 vote
0 answers
641 views

Certbot challenge error 404 in webroot mode

This web site runs under Apache on Windows. I installed Windows certbot client and ran it as suggested on its homepage, in webroot mode, since the web site cannot be stopped. This is what it reported: ...
user avatar
0 votes
0 answers
44 views

Set up SSL on NGINX

I'm having difficult setting up SSL on nginx running on Ubuntu. I have a .pfx, .crt, and .pem cert files to work with, but the documentation is for setting it up with .crt and .key files. The code ...
UltraJ's user avatar
  • 101
2 votes
2 answers
408 views

How does Cloudflare do HTTPS for my site when I haven't provided them with an ssl certificate?

I setup cloudflare today. It only asked me to add its nameservers to my domain. After doing that I'm able to access my site at my domain name but it's now cloudflare's IP. This is all good and as ...
Mani Bharathy's user avatar
1 vote
1 answer
153 views

Why letsencrypt certificate generation not done like domain verification done by GSuite?

I have used letsencrypt's certbot for creating certs for my domains. I have to download certbot and run in my machine and it gives a string to be placed in as dns record. I have to manually add the ...
Mani Bharathy's user avatar
3 votes
1 answer
462 views

Does having an extended validation SSL certificate increase your Google search ranking? [duplicate]

I am assisting an retailer obtain and install an extended validation (EV) SSL certificate for their online shop. After a week of back and forth paperwork with the CA, I wonder whether it's worth the ...
ATL_DEV's user avatar
  • 153
0 votes
1 answer
2k views

This server could not prove that it is LLLL.com; its security certificate is from *.dnsmadeeasy.com. This may be caused by a misconfiguration [closed]

I'm having difficulty figuring out why my site is giving this error only to some users (we just migrated the domain last night) https://DavidKim2020.com This is the error it's giving to some users: ...
sojim2's user avatar
  • 103
2 votes
0 answers
31 views

Allow users to point domains at web app - multi domain SSL

I have a web app, and when users sign up, we give them their own subdomain, e,g, user1.website.example We do this with a wildcard ssl for *.website.example However, users are requesting custom ...
Chris Collins's user avatar
4 votes
0 answers
857 views

Reload a domain certificate in prosody (wirhin jitsi-meet)

I have 2 servers both running Ubuntu 18-04: server A with apt install of jitsi-meet (fully working) server B with an edited install (from github) of jibri (fully working) The A server (the server ...
user avatar
0 votes
1 answer
36 views

Do the LetsEncrypt DNS01 challenges change and how to they interoperate with HTTP challenges?

I typically use HTTP challenges to generate LetsEncrypt certs. However, there are some cases where this is not practical. I've not used DNS challenges before So a couple of related questions - Do ...
davidgo's user avatar
  • 7,650
1 vote
0 answers
36 views

Cannot connect because of insecure connection (IE11 & Edge17)

Goodday, I stumbled upon a problem with both IE and Edge, where the entire website cannot load because of an 'insecure' connection. I checked and it uses TLS1.2 (which is a secure SSL, right?). ...
n247s's user avatar
  • 111

1
2 3 4 5
8