Issues with gohispeed.com O365 hosted Exchange

[breitzammer]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
gohispeed.com
I ran this command:
Accessed crt.sh and entered the ID 1481563734
It produced this output:
Certificate expired 08/13/2019
My web server is (include version):
not sure - O365
The operating system my web server runs on is (include version):
not sure - O365
My hosting provider, if applicable, is:
register.com
I can login to a root shell on my machine (yes or no, or I don’t know):
no
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):not sure

[JuergenAuer]

Hi @breitzammer

@breitzammer

My domain is:
gohispeed.com

you use two different certificates ( https://check-your-website.server-daten.de/?q=gohispeed.com ):

Domainname	Http-Status	redirect	Sec.	G
• http://gohispeed.com/
104.198.14.121	301	https://www.gohispeed.com/	0.306	E
• http://www.gohispeed.com/
104.198.14.121	301	https://www.gohispeed.com/	0.303	A
• https://gohispeed.com/
104.198.14.121	301	https://www.gohispeed.com/	4.197	N
Certificate error: RemoteCertificateChainErrors
• https://www.gohispeed.com/
104.198.14.121 GZip used - 17432 / 89254 - 80,47 %	200	Html is minified: 106,67 %	4.220	I

Your non-www has an expired certificate:

CN=gohispeed.com
	15.05.2019
	13.08.2019
27 days expired	gohispeed.com - 1 entry

Your www certificate is valid:

CN=www.gohispeed.com
	29.07.2019
	27.10.2019
expires in 48 days	www.gohispeed.com - 1 entry

How did you create these certificates? Without root access?

Easiest solution: Create one certificate with both domain names and use that.

PS: Your www version has mixed content.

The file

https://www.gohispeed.com/wp-content/cache/et/13/et-core-unified-156630800547.min.css

has some url("...") definitions:

http://gohispeed.wpengine.com/wp-content/uploads/2014/04/background-hispeed-building-trucks.jpg
1
http://gohispeed.wpengine.com/wp-content/uploads/2014/04/background-little-rock.jpg
1
http://gohispeed.wpengine.com/wp-content/uploads/2014/04/background-millington.jpg
1
http://gohispeed.wpengine.com/wp-content/uploads/2018/12/Crane-Background.png
1

Change these to https.