We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security-certificate]

Electronic document that proves ownership of a public key. E.g. for SSL connections.

Filter by
Sorted by
Tagged with
3
votes
2answers
3k views

nginx http to https redirect - just isn't working

I am running my own webserver with nginx on ubuntu 17.10. I have opened ports 80 and 443. Trying to get the HTTP to HTTPS redirect working, but everthing i seem to have tried fails. i am still ...
1
vote
0answers
535 views

Get a Lets Encrypt SSL certificate through ZeroSSL for a .ovh.net subdomain

I'm trying to set up https connection in one of my API. I normally make requests to my API through this address: http://vps******.ovh.net:8090 I'd like to be able to make HTTPS requests. I use the ...
1
vote
1answer
2k views

How to avoid SSL warnings about certificate not for the current site when redirecting alternate domains?

I have multiple domains forward issue. Domains with plurals and singular e.g.: example.com, examples.com, example.biz, examples.biz I forwarded all of them to https://examples.com and https://...
2
votes
1answer
211 views

Showing company name in address bar requires SSL EV certificate, or OV also OK?

I remember in the past I had to buy an SSL EV certificate (which are much more expensive than regular SSL certificates) to get the company name displaying next to the green lock in the address bar. I ...
5
votes
1answer
17k views

Outlook 2016 says “The target principal name is incorrect” on my site's security certificate

I currently run a Plesk VPS, with 2 Domains hosted within. Some time ago, I had installed the 'Let's Encrypt' SSL Certificate onto my Plesk VPS. Both domains, successfully displayed the 'https' ...
2
votes
1answer
69 views

What entry should be put into the Domain Name, when it comes to SSL Certificates for a Plesk VPS?

I am currently in the process of securing a VPS of mine, with the Let's Encrypt SSL Certificate. Referring to the below image, was is required, when 'The domain name must resolve to your server'? ...
4
votes
2answers
2k views

What to do about certificates being distrusted by Google Chrome?

Recently Google Chrome started issuing a warning on the console which says: The SSL certificate used to load resources from https://www.example.com will be distrusted in M70. Once distrusted, ...
0
votes
1answer
19 views

Changing CA for a website

As an AWS user I am currently thinking about breaking up with my current Certificate Authority in favor of AWS ACL due to ease of maintenance for the latter (just for the sake of accuracy). What ...
3
votes
1answer
1k views

SSL Labs Key exchange < 100%, why? How do I make it?

I am in progress of trying to get maximum (or almost maximum) score on SSL Labs my site: I currently don't understand why it does not give me full Key exchange score. Now, it looks like this: In ...
1
vote
1answer
53 views

Does Google Cloud Platform provide a payment gateway service?

Google Cloud Platform (GCP) is a suite of products for webmasters, but do they offer payment gateway services as well? Since you are storing and administering everything in their servers, it would ...
1
vote
2answers
1k views

Why does Namecheap keep sending me a message that says “The AutoSSL certificate renewal may cause a reduction of coverage”

I'm working on a client's website that was set up by someone else. It's hosted by Namecheap and we have access to cPanel. The client is apparently receiving this email message twice a day (I've ...
1
vote
1answer
5k views

Avoiding SSL certificate errors with Amazon S3 subdomain

I have an Amazon S3 bucket set up for hosting static image files. I have set up subdomain redirection so that "static.example.com" points to my S3 bucket. The bucket is named "static.example.com" with ...
1
vote
1answer
37 views

Does manipulation of a sub-doman to a different domain name cause any issues with an SSL wildcard?

For example, if I have a subdomain of: https://foobar.somesite.com that is hosting the site but I want to pass the actual domain of: https://foobar.com in the browser would this cause any issues ...
0
votes
1answer
102 views

HTTP webpage is showing “Not Secure” in Chrome

I've called GoDaddy a few different times and they said that it looks like it is a problem with my HTML file. Except, my HTML file is the basic outline of a webpage, nothing fancy at all. Chrome ...
1
vote
1answer
77 views

Long waiting time on page load may be caused by https?

As the screenshot show, there is 1.05s waiting time on page load and I have done some tests to figure it out that this is caused by https. I uploaded a plain html with just hello world and tested ...
6
votes
4answers
6k views

Does SSL require a client side certificate of any kind at all?

A friend insists it does, that both browser and server both need certificates. I say no, only the server requires one, with two keys. The question is whether the browser uses some sort of certificate (...
7
votes
3answers
212 views

What can I do to pay less for SSL?

I currently have a web hosting account and 27 domains that cost 1310 PLN (about $358.37) per year. Because the next version of Chrome will start displaying "not secure" warnings when a user enters ...
1
vote
1answer
69 views

Adding another domain SAN to a shared hosting server's multi-domain SSL certificate?

I am familiar with simple DV certificates, but not any of the other fancier stuff - like EV, wildcard and Multi-domain SSL certs. As the title suggests, I'd like to know what the process is for (and ...
3
votes
1answer
42 views

Do I need to update an SSL's contact info in some way?

As far as I know, SSL certificates do not contain contact information such as phone number. However, contact information is probably stored somewhere in order to contact me concerning the SSL cert if ...
1
vote
0answers
66 views

Are there security concerns with migrating a sub-sub domain to a new platform, leaving another in place, and abandoning a third?

I have been tasked with launching a website for my organization. It is a dept. within a parent organization. Parent Organization Administers domain.com Dept. Organization Administers sub.domain.com ...
3
votes
2answers
780 views

https://example.com and https://www.example.com: Should I use one or two SSL certificates?

I am in the process of enabling HTTPS on my web sites. I have a web site, let's call it example.com, which is available both with and without a www. prefix. I can now: request one SSL certificate ...
7
votes
3answers
615 views

How do I remove HTTPS results from Google after the domain has been redirected and the SSL certificate taken down?

I need to remove HTTPS results from Google search rankings for the domain A that has been redirected to another domain B. So domain A does not have any pages on it at the moment and it will not have ...
3
votes
3answers
315 views

Getting a “Potentially unsafe content” error on my WordPress site in MS Edge Browser

Some users have reported this error generated by Windows Defender SmartScreen in the MS Edge browser. No problems in the other browsers. Here's a screenshot of the error: It's been reported by ...
2
votes
1answer
50 views

What is difference between Wildcard SSL and just SSL?

What is difference between Wildcard SSL and just normal SSL?
2
votes
0answers
674 views

Using AutoSSL/LetsEncrypt To Give Cert to SubDomain Pointing to Separate Server

Background I have a primary website hosted on a LAMP-based VPS, with WHM and cPanel. I've installed the Let's Encrypt cPanel plugin to use with AutoSSL, and that is working for the main site. ...
1
vote
1answer
2k views

Webmin: SSL certificate not trusted (webmin configured on port 10000)

I have a working installation of Webmin with plenty of working sites on https already. I'm using cerbot / letsencrypt to create certificates and it seems to work just fine. My issue now is that ...
2
votes
1answer
308 views

Duplicated webpage (HTTP & HTTPS)

my webpage is duplicated because of the SSL certificate (http:// example.com and https:// example.com). I want to redirect from http to https. But I have two questions: If my webpage has several ...
1
vote
1answer
74 views

SSL Protect Unlimited Sites Under a Single vHost Without Server Restarts

I am creating a platform similar in concept to Wix for hosting websites. I wish to ensure that all the sites (except where specific issues prevent this on a site by site basis) will be protected by ...
2
votes
3answers
4k views

In what path I can find the .crt file for Let's Encrypt SSL?

I'm trying to find the SSL .crt file that was installed on my Ubuntu server using Let's Encrypt. I used this commands below for installing Let's Encrypt free SSL: $sudo apt-get update $sudo apt-get ...
4
votes
2answers
609 views

How to display non-SSL images on HTTPS connection?

Is it possible to embed external non-ssl webcam images (i.e.; http://www.goes.noaa.gov/GIFS/WCI8.JPG) into a site using SSL? I have a lot of clients located in a tourist town and they want to show ...
1
vote
2answers
64 views

What are the effects of having a “non-secure” warning displayed for our e-commerce site?

For the past couple weeks now we have seen a non-secure warning displayed on our site where the SSL/Security info for a website would normally be displayed (in Chrome). Along with this I have noticed ...
3
votes
2answers
200 views

Steps to implement Let's Encrypt with cPanel

I am implementing to adopt a site from http to https, I am using the Let's Encrypt in cPanel, I am in a shared hosting environment. This is how I implement it: Site in maintenance mode Issue the SSL ...
0
votes
2answers
1k views

How to get a free or cheap SSL certificate for your Test / Staging environment? [closed]

My startup client runs a website at xyz.com, they use HTTPS only. They now introduced a test environment to test upcoming versions (test.xyz.com). They want to run it under HTTPS as well but they can'...
17
votes
2answers
11k views

StartSSL certificate gives SEC_ERROR_REVOKED_CERTIFICATE in Firefox and ERR_CERT_AUTHORITY_INVALID in Chrome

My existing HTTPS certificate is expiring soon so I bought a new one. I'm having a very hard time installing it properly though. I have a wildcard certificate from StartSSL for *.deadsea....
1
vote
1answer
79 views

Browsers to accept a self-signed certificate

I have created a self signed certificate like this: #!/bin/bash EXPIRE=3650 if [ $# -gt 1 ]; then EXPIRE=$2 fi mkdir -p $1 cd $1 openssl genrsa 2048 > $1.key openssl req -new -x509 -...
1
vote
1answer
68 views

How correct redirect access that are causing Let's Encrypt to not secure my website?

I have successfully installed Let's Encrypt SSL certificates on my server after going though some issues. You can view my issues being treated by their awesome team in there official site: https://...
2
votes
1answer
32 views

how cloudflare cdn cert passes domain check?

How cloudflare-based site passes browser's domain check? when I visit cloudflare based site, it provides a cert for cloudflare domains(like sni007.cloudflaressl.com) but browser does not shows any ...
2
votes
1answer
744 views

Reducing the activation delay on cPanel AutoSSL (Comodo)

It's great to see more and more web hosting companies offering free SSL certificates. One of the popular options is cPanel's AutoSSL BUT it seems to have the downside of taking "up to 48 hours" to ...
2
votes
2answers
409 views

Bing webmaster indicating crawl errors on http to https 301 redirect

I moved my site form http to https, now sitemap contains https urls, but Bing webmaster indicates increased "crawl errors" and my indexed pages have decreased to 0. The list of errors says http pages ...
5
votes
3answers
2k views

SSL certificate wildcard / single name - will it work for subdirectories?

I want to purchase an SSL certificate for my domain, but I have never worked with certificates. I will purchase it at DNSimple, my APP is on heroku and my domain is at all-inkl. Will the wildcard ...
1
vote
1answer
93 views

How to handle DNS and SSL when switching CMS provider

We're replacing our website (a B2B news website, around 12,000 sessions a month) with one built in a new and better CMS. The old one was built on a custom CMS circa 2009 and is out-of-date. The ...
6
votes
2answers
6k views

Untrusted Cloudflare SSL Certificate

I'm just dipping my toes into the water with SSL certificates and figured I'd try Cloudflare's free offering... I'm trying to secure a sub-domain that hosts map tiles locally within the country for ...
1
vote
0answers
28 views

SSL Vulnerabilities on a personal site [closed]

I just managed to install a SSL for my domain hosted on a VPS with CentOS 6.5 (CentOS WEB Panel) and I got it through those "SSL Checker"s online, the most common errors are below: This server ...
1
vote
0answers
564 views

GoDaddy domain and Firebase hosting - not working [closed]

I hava a doamin name from GoDaddy , lets say - www.yoyo.com, and I have a website hosting in Firebase, let say - yoyo-f1c2.firebase.com. When I Forward with Masking I'm getting this error(chrome): ...
1
vote
1answer
174 views

SSL Certificate Details And SEO

I was looking at the different types of SSL certificates and providers. I came across a website that states this: We believe Extended and Business Verification SSL certificates gets more top ...
26
votes
5answers
7k views

How do I get my site verified such that it shows a green box in Chrome's address bar?

How do I get my site verified by Google Chrome so it has the green box in the address bar? I honestly don't know how to do this. Also, do I have to ask Google to verify it?
1
vote
5answers
247 views

CloudFlare SSL certificate is a good solution?

I need to put an SSL certificate on a website in wordpress. It does not store any confidential information. I just want to gain some advantage in google ranking. I have a free account on cloudflare. ...
5
votes
2answers
2k views

301 Redirect Causes Insecure Connection Warning

My client's primary domain name is a variant of a commonly spelled name, for example domein.com. To avoid losing traffic, they also purchased domain.com. The live site is at https://domein.com. When I ...
2
votes
1answer
91 views

https://www not redirecting to my domain when everything else

I'm using namecheap, letsencrypt and apache. I registered with letsencrypt the domain and www, but it's not even getting to the "your connection is unsecure" page. namecheap has an A record to my ip ...
6
votes
3answers
3k views

Can I have a SSL certificate for a domain name that redirects?

I have registered a domain name only for forwarding users to my original website. www.secondarydomain.example -> www.primarydomain.example I already have a SSL certificate for my primary domain. ...