Really simple SSL broke my website

  • Resolved Ford12

    (@ford12)


    5 years, 5 months ago

    First visit to the pages show on IE continuing is not recommended. On Firefox I get a Bad cert domain. I tried contacting Lets encrypt but they could not help and advised the problem is with Plesk.

    1st domains tried to fix the issue with Plesk because the website was completely not accessible. I can access the pages once I get passed the bad cert domain error, but why is that coming up at all. I do not know if it is your plug that has caused the issue, there certainly is nothing simple about the issue. If both Lets Encrypt and 1st domains cannot solve it.

    In wordpress there is SSL on the left hand side with a 1 next to it in red. Don’t know what that means because there are two options turned on in the SSL settings

    • This topic was modified 5 years, 5 months ago by Ford12.
    • This topic was modified 5 years, 5 months ago by Ford12.

    The page I need help with: [log in to see the link]

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Author Mark

    (@markwolters)

    Hi,

    the certificate only contains the non-www domain. This results in the site working fine when accessed over https:// without www, but when a user visits via the www domain this results in a certificate warning. This can be fixed by adding the [www.paulsheehanca.co.nz] domain to the certificate as well, alongside the non-www domain.

    Mark

    • This reply was modified 5 years, 5 months ago by Mark.
    Thread Starter Ford12

    (@ford12)

    Thank you for your reply.
    I don’t know how to do that.
    1st domains set the hosting settings in plesk to preferred domain as none.
    because having it set to https://www.p… (no http at the front) or the domain name without the www is what broke it in the first place
    Only one of three options can be chosen in the preferred domain and its set to none.
    In the security settings SSL is ticked on and so is permanent SEO safe then certificate is set to – lets encrypt paulshehan.co.nz (paulsheehanca.co.nz) which is one of three options. The other two are Default certificate (other repository) or not selected.
    There are only preselections in plesk nothing else can be added.

    • This reply was modified 5 years, 5 months ago by Ford12.
    Thread Starter Ford12

    (@ford12)

    In really simple ssl now says I have to change settings in google analytics
    What a nightmare this is turning out to be.

    Plugin Author Mark

    (@markwolters)

    It should be possible to select a checkbox to include the www domain in the Plesk Let’s Encrypt settings, see https://support.plesk.com/hc/en-us/articles/213372009-How-to-install-a-certificate-for-domain-alias. If that doesn’t work, you can contact your hosting provider so they can add it for you.

    Plugin Author Mark

    (@markwolters)

    The change to Analytics/Dashboard is small, you have to update the domain to use https://. See https://really-simple-ssl.com/knowledge-base/how-to-setup-google-analytics-and-google-search-consolewebmaster-tools/ for detailed instructions.

    Thread Starter Ford12

    (@ford12)

    Don’t worry about replying
    I’ve disabled whole lot. I’ll do without https at least the website is working
    I’ll talk to 1st domains and see what other solutions they have

    Thread Starter Ford12

    (@ford12)

    I think I just got it working.
    I tried again and disabled and re-enabled the really simple ssl plugin and I think its actually worked. I think

    Plugin Author Mark

    (@markwolters)

    It seems to be working fine now, the www domain now redirects to the non-www domain, so you won’t encounter the certificate warning anymore.

    Thread Starter Ford12

    (@ford12)

    There is still an issue, and I still get the error.
    It was working ok last night.
    I cleared the caches on all browsers
    In IE I get error “there’s a problem with this websites security cert”.
    And it seems to be working on Firefox
    I do not get the error on chrome.
    All browsers are uptodate
    There is another wordpress site – someone elses
    https://www.businesscrisis.co.nz
    that website does not give any errors in any browser.
    So I still have a certificate issue somewhere.
    I contacted 1st domains and they reckon they cannot see any issue
    But there is still a certificate issue. I can access all other https websites without any cert error.
    I also tried https://www.paulsheehanca.co.nz on another pc with another provider and on firefox I get SSL_error_bad_cert_domain in Firefox and in IE I get error code DLG_Flags_sec_cert_cn_invalid
    I can view all other peoples https websites without issue
    On a windows 10 pc with firefox I get a warning potential security risk ahead, only on the paulsheehan website.
    So, no the problem is still not fixed.

    • This reply was modified 5 years, 5 months ago by Ford12.
    • This reply was modified 5 years, 5 months ago by Ford12.
    Plugin Author Rogier Lankhorst

    (@rogierlankhorst)

    Hi @ford12,

    The best practice is to have the www domain added to the SSL certificate. On most hosting environments this is the default setup. Apparently your hosting company has handled this differently. Your hosting company should know how to add the www domain. You can then test it on https://ssllabs.com/ssltest

    If adding the www domain is not an option, you can add a .htaccess redirect, directly from https://www.domain.com to https://domain.com, as described in this article:
    https://really-simple-ssl.com/knowledge-base/avoid-landing-page-redirects/

    Hope this helps!

    Thread Starter Ford12

    (@ford12)

    I will try that
    I ran ssllabs and get a certificate name mismatch
    I will try and contact 1st domains.
    If no luck I will try the redirect as you suggested
    Thanks

    • This reply was modified 5 years, 5 months ago by Ford12.
    Thread Starter Ford12

    (@ford12)

    The hosting company 1st domains don’t know how to handle that, that is part of the problem
    I tried putting in a support request and they think the site is hosted by another company! when I am paying them to have the website hosted by them.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Really simple SSL broke my website’ is closed to new replies.