• Hey,

    My hosting company (misshosting.com) had some down time today. I don’t know if it was some hacker attack, but all my sites including their own was down for several hours. When it came back up, all my sites were functioning nomally except one. When trying to access it, the web browser warns me that the site is not secure and that it was not possible to identify the ssl (let’s encrypt) certificate. I could continue to the site but the green lock icon in the adress field was gone and now it’s a red cross saying that the site is insecure.

    It also says that my let’s encrypt certificate expired in august, but that’s not true. I checked it in Cpanel and it was renewed in August and expires in December. So somehow, it seems that the downtime of the hosting company screwed something up. Any ideas how to fix this? I already tried to reinstall the certificate and also to issue a new one, but it didn’t help. I also reached out to let’s encrypt, but they couldn’t do anything apart from renewing the certificate, which I had already done.

    URL: https://bamm.fi/

    The page I need help with: [log in to see the link]

Viewing 9 replies - 1 through 9 (of 9 total)
  • Moderator James Huff

    (@macmanx)

    You’ll need to speak to your hosting provider’s support about this. If your browser says the SSL certificate is expired, then it is definitely expired.

    Thread Starter Robert Bamm

    (@rbamm)

    Yeah, I’m doing that, but it seems they don’t really know what the problem is.. It’s just so weird. I mean, yesterday everything was working fine, and the certificate was set to expire in december. Today, it’s like the browser only recognizes the date of the certificate before it was renewed in August. Right now it says that it was issued in april and expired in August. It doesn’t make any sense, that it suddenly started recognizing some old version of the certificate, which was renewed normally in August.

    Thread Starter Robert Bamm

    (@rbamm)

    Also, I was in contact with the let’s encrypt support, and they also renewed it. But it still says that it’s expired.

    Moderator James Huff

    (@macmanx)

    If it were me, I’d ask them to revoke the current SSL certificate and issue a new one.

    Either way though, WordPress is definitely not causing this, something is very wrong with the SSL certificate.

    I wonder if maybe they lost some hardware and had to restore from an earlier restore point.

    Flush your cache if you’re running one. Because the cache might have the version of everything from right when it came up and your refreshed cert is waiting back behind the next flush.

    If you have another PC, laptop or notepad even you might try visiting the site from it.

    Actually, I just refreshed and received a site or a page called A1 Cabins on your domain. I’m guessing you might have been hacked or something there. I ran a Sucuri Check and they can’t reach your site (might be because of the hack).

    I ran your dns through Into DNS and there are two different versions of SOA for your domain which might also explain the issues.

    If it was me, I’d grab a CloudFlare account for that domain if they’ll let you and let their DNS run for your site. Just make sure the A record points to the right IP address when they are done. The Cname and MX hosts are acceptable.

    You don’t need to run the CloudFlare proxy but I’m starting to think the DNS might be poisoned if not the server or site being hacked. Just stay on the CloudFlare DNS… It’s a much more robust DNS than most hosts can offer.

    Thread Starter Robert Bamm

    (@rbamm)

    I don’t use any caching plugin at the moment, so it shouldn’t be that. And I haven’t gotten any A1 cabins site when accessing my site. I can access it, but I have to accept to proceed to an “unsecure site”. I also tried the sucuri check and tested some other sites of mine that are working normally, but it said the same thing, that it can’t reach the sites. So it seems it’s not the sites, but the sucuri scanner not working properly. At least it doesn’t seem to work on my sites.

    I honestly don’t think the site’s hacked, because it does work normally in itself. It’s just the certificate that’s causing problems.

    Okay, that’s why I mentioned the above as ‘If it was me’.

    Also, your server might be running a caching proxy out in front of your webserver which is why I mentioned looking for a cache to flush.

    But I did get that odd page once and there’s very little reason for me to have received that while on your domain except for some kind of malicious attack there.

    Much of the time this second-hand troubleshooting is to try this – try that.

    There is a hack a few people have mentioned recently where the inserted content was here and then not… and then again. And in those cases, the site owner and then the troubleshooters couldn’t see it except once. Right clever I guess.

    Thread Starter Robert Bamm

    (@rbamm)

    Hey JNash,

    You were right about the odd page. Now I see it too. The strange thing is though, that I just deleted the domain account from WHM, like completely removed all the files and everything. And then when I typed in my adress, I got to that strange page. How is that even possible?

    Try to reinstall SSL certificate. If problem not solved, then you must ask support to your hosting.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Site says that certificate is expired when it’s not (unsecure website error)’ is closed to new replies.