Let's Encrypt SSL Certificate Installed But Website Is Still not Verified

Today I began working on installing a SSL certificate on my website since my website is seen as not verified by google. I went into cpanel and used the let's encrypt tool and was able to install the certificate onto my domain without any problems. However when I went back to my site to check if it says trusted, the website still states that it is not verified. How is this possible and what can I do to fix this?

Thank You

1 Like

Hi @jztech10,

There are a few different things that could be happening, it's hard to say without a lot more information.

If you share your domain, we can give you specific suggestions to get your site secured.

1 Like

How do I do that? Im fairly new to this. Thank you for your help

1 Like

The domain is osmose-re.com and www.osmose-re.com

1 Like

Thanks!

The good news is that you have a certificate and it seems to work okay.

There are two things you would need to do:

  1. Enable an HTTPS redirect, so that when visitors arrive to your website, they are redirected to the secure version of your website. Follow along with this cPanel article to see how to do that. You need to toggle the "Force HTTPS Redirect" switch in cPanel.

  2. You have what is called a "mixed content issue" on your WordPress website. It means that in your HTML, you have some images and other resources which always use insecure HTTP, even when the visitor is using secure HTTPS. There are quite a few articles about how to fix mixed content issues in WordPress. Here is one that recommends using a WordPress plugin to fix it automatically for you.

1 Like

Appreciate your help. I will start working on both of those. I'll let you know if I run into any more issues. Thanks

1 Like

I can't seem to find the part of the domains section that allows me to force https redirect. Is it possible I have a different version of cpanel that doesn't allow me that tool. I can't find it anywhere.

1 Like

Yes, perhaps. It's there on my cPanel 96 server, but sometimes hosts don't update that aggressively.

You can also put this at the top of your website's .htaccess file for the same effect:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
1 Like

If you want a bit more robust set of .htaccess redirects that also redirect www to non-www:

RewriteEngine On

RewriteCond %{HTTPS} =off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [NE,R=301,L]

RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [NE,R=301,L]

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.