Hot answers tagged

4

CA's do not regularly check their customers websites, so they will likely not check if your site has turned malicious. The point of a Certificate is to give the end user comfort that the site they are dealing with is not being intercepted en-route, and - for EV certs - gives some assurances that the people behind the certificate are who they say they are. ...


2

The CA didn't check your website before issuing the certificate in the first place: it's their job to check the control of the domain for domain validated DV certificates and the identity of the owner for extended validation EV certificates. It's not their responsibility to validate the contents – nor even that they could given the amount of possible pages ...


2

There's nothing in the directives you've posted that would cause this directly. Throwing a regex at this isn't going help. The RewriteRule directive you posted redirects to http - end of. So, any "redirect" to HTTPS is coming from somewhere else. You need to examine the HTTP request/response headers in the browser. Are you actually seeing a 3xx ...


Only top voted, non community-wiki answers of a minimum length are eligible