Questions tagged [security-certificate]
Electronic document that proves ownership of a public key. E.g. for SSL connections.
356
questions
2
votes
2
answers
18
views
Reverse proxy SSL with Nginx, do I need a wildcard or a separate cert for every host?
I have Nginx setup and successfully serving SSL to example.com using certbot/letsencrypt. But when I try to reverse proxy to a local machine I get NET::ERR_CERT_COMMON_NAME_INVALID. Here's the ...
- 6,570
1
vote
2
answers
43
views
What type of security certificate do I need
Our website is information only, what we do, what we've done and contact info. We do not do any ecommerce or provide any downloads for visitors. The person that ran our web hosting company passsed ...
- 96.2k
-1
votes
1
answer
24
views
Alternative to SSL certificate? [closed]
I wanted to make a fun joke website for my friends and I. I'm using 000webhost because I don't care to spend money, as we would use it for a week.
The website requires Node and a database. I set it ...
dan♦
- 15.1k
1
vote
0
answers
18
views
Using Wildcard Cerificates in Ubuntu server fails to start apache2
I am using Ubuntu 22.04.1 with apache 2.4, and I was given a wildcard certificate *.domain.net from our IT Head, from a trusted CA and is supposed to be valid. However, a bunch of online forums to ...
2
votes
1
answer
20
views
TLS bound to another domain in the same hosting
I have a domain for a customer, say my-nice-restaurant.example hosted in a hosting company with cPanel. This cPanel takes all the time one domain like the "primary domain" of my account, say ...
CommunityBot
- 1
0
votes
0
answers
28
views
Does the SSL certificate has to be valid for the www subdomain
The .htaccess successfully diverts all variants to @@@@.software on the browsers. And I have appropriate CSP headers (that work on all other sites in different installations) installed in htaccess. I ...
- 850
3
votes
1
answer
94
views
Is there an official or safe way to use a LetsEncrypt certificate for the WHM UI?
To be specific, I am talking about using a LetsEncrypt (LE) cert for WHM itself, not a domain being managed by these tools.
I'm well aware that I could install Certbot and reconfigure the underlying ...
- 141
0
votes
0
answers
31
views
SSL DV certificate not working uniformly across browsers, ISP and OS
I purchased SSL certificate through Namecheap.
I am using Windows 11 OS, with BSNL Internet Service Operator(wifi) with Firefox v16, Microsoft Edge, Chrome v106 as browsers and iPad OS version 16 and ...
- 85.9k
9
votes
5
answers
857
views
Is GoDaddy SSL standard certificate compatible with all browsers?
Could you answer to at least one of these questions:
Is GoDaddy SSL standard certificate compatible with all browsers
(Chrome and Safari on iPhone, or Android browsers included)?
http://www.godaddy....
- 111
4
votes
1
answer
132
views
Can Screaming Frog check for invalid SSL certificates?
I've been using Screaming Frog to test the home pages of a few hundred sites I manage, to see what status codes they return. I noticed in my browser that one of those sites has an invalid (expired) ...
- 5,731
8
votes
3
answers
11k
views
Performance: 4096 Bit RSA-Key compared to 2048 bit RSA-Key
Is there a comparison between 4096 Bit RSA-Key and a 2048 Bit RSA-Key? I'd like to know what impact on performance it has, if I'm choosing a 4096-Bit key for ssl-encryption. Is there any info which ...
- 11
2
votes
2
answers
91
views
Do I need to renew my SSL certificate through my domain registrar when my web host is providing one for me?
My domain is through Network Solutions and it points to my WordPress site on Siteground. Siteground provides SSL certificate. However, I keep getting warnings from Network solutions that I need to ...
- 96.2k
23
votes
6
answers
35k
views
Is unique IP address a must for SSL?
The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
- 96.2k
27
votes
3
answers
37k
views
IIS 7 Require SSL automatically redirect to https://
I've configured IIS 7 to require SSL. Can I automatically redirect non-SSL requests to be encrypted?
For example, if a user types in http://domain.example, can IIS redirect the request to https://...
- 96.2k
0
votes
0
answers
32
views
ERR_SSL_PROTOCAL_ERROR - users unable to access site
Occassionally, I am told by users they're are unable to access my site due to this error:
"This site can't provide a secure connection - [mydomain] sent an invalid response. ...
- 9
2
votes
1
answer
209
views
Is an SSL certificate installed on the server or domain?
I have an existing site with an SSL certificate, and the domain will be transferring to a different host.
Does the SSL certificate carry over with the domain? Or does this need to be installed on the ...
- 96.2k
0
votes
0
answers
103
views
Can I Install a wildcard SSL certificate from a third party to a Hostinger domain?
I have a domain registered with Hostinger, along with hosting, which does not support wildcard SSL certificates. Is there any workaround for this issue? Is there any way I can manually install a ...
- 96.2k
3
votes
3
answers
3k
views
Single SSL certificate for web and email
I would like to purchase a basic SSL certificate, which allows me to secure a single domain (as opposed to a wildcard certificate for multiple subdomains). I was going to apply this to mail.example....
- 1
3
votes
1
answer
163
views
Server's certificate is unknown when using ftp with cPanel
I have a VPS hosting with both WHM/cPanel and SSH root access, I created an FTP account using cPanel, now when I try to connect using FileZilla I get the following warning:
The server's certificate is ...
- 103
1
vote
0
answers
54
views
SSL certificate for Blogger on a custom sub-domain
I have Blogspot blog show casing my products running for many years on http:// which is running as http://products.example.com for many years.
My DNS record for example.com (which I own) at the domain ...
- 96.2k
1
vote
0
answers
605
views
How to install/update/upgrade SSL certificate in Tomcat?
I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration
Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371....
- 1
0
votes
1
answer
25
views
Why does a website present a certificate for a completely different domain? [closed]
The last couple of weeks I have had several websites temporarily present certificates for completely unrelated domains. A visit to docs.oracle.com presented a certificate for an internal service and ...
- 6,570
4
votes
0
answers
428
views
"Cert authority invalid" error from Chrome on Android when viewing my website which uses Lets Encrypt
I have installed and activated open SSL (letsencrypt.org R3 version V3) on my website. Website is working fine in Desktop browsers (Chrome, Firefox....) but in Google Chrome Android, I get security ...
- 96.2k
3
votes
1
answer
163
views
WHM upload CA root certificate to validate Cloudflare certificates
I'm using Cloudflare's self-signed certificates to encrypt traffic between Cloudflare and my origin web server.
A problem that cPanel shows a No Valid Certificate for the domain and the error ...
- 96.2k
1
vote
2
answers
431
views
How do I install a security certificate for an alias (domain pointer) in DirectAdmin?
I have the following problem: I have 2 domains: domain1.example and domain2.example (domain pointer) => domain1.example.
Previously, I used Let's Encrypt to create SSL for both in DirectAdmin and ...
- 8,092
4
votes
1
answer
129
views
How to promote the quality/security of your a website to your its customers?
Our organization is building a Drupal web platform that we aim at reselling as a cloud service. In order to provide our customers with maximum confidence in our solution, we're looking at ways of ...
- 15.2k
3
votes
2
answers
5k
views
nginx http to https redirect causing 400 Bad Request: the plain HTTP request was sent to HTTPS port
I am running my own webserver with nginx on ubuntu 17.10. I have opened ports 80 and 443.
Trying to get the HTTP to HTTPS redirect working, but everthing i seem to have tried fails. i am still ...
- 96.2k
2
votes
1
answer
88
views
Most cost effective option for securing 1000+ websites (SSL)
My company manages well over 1000 sites for various clients. Currently, we are paying for a Standard DV certificate for each individual site ($94.99 from GoDaddy). We are easily spending over $100k ...
- 6,570
2
votes
1
answer
75
views
Is there a rule that prevents CAs from issuing certificates for private networks (intranets)?
A while ago I encountered a question asking how to setup SSL/TLS on intranets, I gave an answer which basically says "use a public domain and associated certificate and resolve the domain to the ...
- 96.2k
9
votes
4
answers
3k
views
Do I have to pay a web hosting company for an SSL certificate?
I want to be able to host HTTPS in addition to HTTP and I thought I could simply buy a low cost SSL certificate and copy the certificate to my hosted website?
But my service provider has a variety of ...
- 96.2k
2
votes
1
answer
211
views
CERTBOT_DOMAIN not set in hook
I am currently trying to set up a hook for certificate deployment. I have successfully retrieved the certificate and found out that you have to force renewal when testing, so I've now hit the rate ...
- 96.2k
0
votes
0
answers
67
views
Cloudflare returns SSL 525 error for the domain apex with domain hosted by Blogger even using flexible SSL to the origin
When I try to access my blogger using https://example.com I get a 525 error, but when I use https://www.example.com it works fine. I have changed the SSL/TLS encryption to flexible in Cloudflare but ...
- 96.2k
2
votes
2
answers
395
views
View SSL Certificate from Hyperlink (HREF)
As you know the likes SSL enabled websites is on the increase, mainly because Google is now rewarding sites for being safer to use. Users can view a sites SSL certificate by clicking the secure icon ...
- 101
2
votes
0
answers
67
views
how to reduce SSL handshake time - localhost/self signed cert
We have one .net exe running on local machine and browser make one API to that running service with https://localhost:45235/getInfo. Actual getInfo API returns response in < 1 sec. But when browser ...
- 21
1
vote
1
answer
33
views
Must an SSL certificate be renewed as soon as CSR is generated?
One of our production certs is expiring on Nov 27. A CSR to renew that cert was generated two days ago on Nov 10, and my co-worker now says that because it was generated too fast we cannot process ...
CommunityBot
- 1
0
votes
1
answer
231
views
iOS Safari not accepting certificates issued by custom CA
I'm trying to make iOS Safari accept an https website that runs a certificate I signed with my own CA.
My CA cert is here: https://gist.github.com/BenMorel/014d7bd7802b75eec78b0bc0bad7e4e1
When I ...
- 271
2
votes
1
answer
2k
views
How to set the Bit Length when generating SSL Certificate with Java keytool?
I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
- 271
2
votes
1
answer
119
views
Should I specify CAA records for www subdomain too?
I pre-paid 5 years of AlpiroSSL Premium (English info here), it's from Sectigo originally, but the certificate provider told me the right CAA is (or should be) trust-provider.com as per my current ...
CommunityBot
- 1
0
votes
1
answer
22
views
Moving https website from server A (CentOS 7) to server B (CentOS 8) - what do I need to do regarding certificates?
I've copied all of the referenced files in my nginx configuration over:
/etc/nginx/ssl/STAR_example_com/ssl-bundle.crt
/etc/nginx/ssl/STAR_example_com/STAR_example.key
/etc/ssl/certs/dhparam.pem
I ...
- 6,570
1
vote
0
answers
63
views
HubSpot CMS site is not secure unless someone types in "www."
so we connected our domain with HubSpot CMS. They only support SSL for subdomains, so when someone does not type in "www." they are prompted with a security warning. They told me I needed to ...
- 96.2k
1
vote
1
answer
300
views
Wildcard SSL issued by Plesk not working for subdomains hosted by a third party
I've got a Plesk setup which issues Letsencrypt certificates and hosts part of my client websites. When passing the _acme-challenge and receiving a wildcard certificate / installing said certificate ...
- 8,092
-3
votes
1
answer
193
views
Redirecting domains on https without creating a certificate for them?
I own, say, 100 domains. I want to add redirect for each of them to a new domain. And not only to a domain, but a custom query string. For instance
domain1.example/url1 -> domain11.example/url2
...
- 96.2k
1
vote
0
answers
77
views
HSTS compatible .htaccess redirect from non-www to www that preserves URL path [closed]
UPDATE: The redirect actually does work! The site is a friends site and I was coming up with solutions and sending them to him. Turns out his website is running Joomla. After further troubleshooting ...
- 11
1
vote
0
answers
539
views
Certbot challenge error 404 in webroot mode
This web site runs under Apache on Windows. I installed Windows certbot client and ran it as suggested on its homepage, in webroot mode, since the web site cannot be stopped. This is what it reported:
...
1
vote
1
answer
443
views
update virtual host's SSL cert after cpanel has expired
I had setup the server, virtual hosts via cpanel.
I didnt renew my cpanel subscription because I no longer needed it.
Now my SSL certificate has expired. I have SSH access to the server.
How do I ...
CommunityBot
- 1
0
votes
0
answers
37
views
Set up SSL on NGINX
I'm having difficult setting up SSL on nginx running on Ubuntu. I have a .pfx, .crt, and .pem cert files to work with, but the documentation is for setting it up with .crt and .key files. The code ...
- 101
2
votes
2
answers
334
views
How does Cloudflare do HTTPS for my site when I haven't provided them with an ssl certificate?
I setup cloudflare today. It only asked me to add its nameservers to my domain. After doing that I'm able to access my site at my domain name but it's now cloudflare's IP. This is all good and as ...
- 8,092
1
vote
1
answer
129
views
Why letsencrypt certificate generation not done like domain verification done by GSuite?
I have used letsencrypt's certbot for creating certs for my domains. I have to download certbot and run in my machine and it gives a string to be placed in as dns record. I have to manually add the ...
- 96.2k
4
votes
2
answers
6k
views
How to avoid SSL warnings about certificate not for the current site when redirecting alternate domains?
I have multiple domains forward issue. Domains with plurals and singular e.g.:
example.com,
examples.com,
example.biz,
examples.biz
I forwarded all of them to https://examples.com and https://...
CommunityBot
- 1
3
votes
1
answer
234
views
Are better SSL certificates (better type or better encryption) better for SEO?
I was looking at the different types of SSL certificates and providers. I came across a website that states this:
We believe Extended and Business Verification SSL certificates gets more top ...
- 15.2k