Installed let's Encrypt certificate on IIS but my domain is still not secured

Help
1

I successfully installed Let's Encrypt certificate on my domain easternseaboard.gov.za using win-acme but when i visit the website it still says not secure. The domain name is easternseaboard.gov.za it is on a windows 2019 server running IIS 10.

I have Chrome installed on the server and when i visit the website using the browser on the server, the domain is secured but when i use my personal computer to visit the website it is not secured.

Can anyone help me resolve this issue?

2

Your webserver does not respond to public HTTPS requests on port 443. You may want to check firewall rules and port forwarding.

You also need to fix your SOA. You have \@ where only a dot is allowed.

4 Likes
3

This online tool https://dnschecker.org/port-scanner.php?query=easternseaboard.gov.za
shows Port 80 is Open and Port 443 is "Timed-Out"; I get similar results below with nmap

$ nmap -Pn -p80,443 easternseaboard.gov.za
Starting Nmap 7.80 ( https://nmap.org ) at 2024-04-12 02:19 UTC
Nmap scan report for easternseaboard.gov.za (164.151.138.99)
Host is up (0.32s latency).
rDNS record for 164.151.138.99: 164.151.138.99.static.gov.za

PORT    STATE    SERVICE
80/tcp  open     http
443/tcp filtered https

Nmap done: 1 IP address (1 host up) scanned in 6.65 seconds

And as @linkp already stated your DNS SOA has an issue.

image
image1072×287 3.94 KB

$ nslookup -q=soa easternseaboard.gov.za ns1.easternseaboard.gov.za.
Server:         ns1.easternseaboard.gov.za.
Address:        164.151.138.98#53

easternseaboard.gov.za
        origin = ns1.easternseaboard.gov.za
        mail addr = osis\.support.sita.co.za
        serial = 2022060311
        refresh = 3600
        retry = 300
        expire = 600
        minimum = 600
2 Likes