Not secure site alert but im using lets encrypt ssl installed

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: toxihosting.com

I ran this command:

It produced this output: Not Secure

My web server is (include version):using hosting service

The operating system my web server runs on is (include version):n/a

My hosting provider, if applicable, is: InfinityFree.net

I can login to a root shell on my machine (yes or no, or I don't know):i dont know

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):n/a

I also ran https://whynopadlock.com, it showed me all good, but its still saying the site is not secure.

Welcome @Vepsie

What is telling your site is not secure? And, what exactly is the message? Can you upload screen shot or something?

I see your domain using a cert issued today. The same as whynopadlock shows and also SSL Labs Server test (here)

Your domain is using Cloudflare's CDN service so it is unlikely to get a failed cert with that since it manages the certs between its edge and clients (like browsers)

EDIT: I just realized your domain gets a 503 failure from Cloudflare. You might want to review this help topic of theirs
https://support.cloudflare.com/hc/en-us/articles/115003011431-Troubleshooting-Cloudflare-5XX-errors

3 Likes

It's kinda strict to only support TLSv1.3 :grey_question: And only an ECDSA certificate it seems?

3 Likes

Your server is Modern compatibility (i.e. TLS v1.3 only) as Mozilla defines it Security/Server Side TLS - MozillaWiki

1 Like

You're using CloudFlare CDN.
So, the Internet only sees the CDN [which is secured with a valid wildcard certificate].
If you are connecting to your server directly and that shows "not secure", then you need to show us the certificate it uses [and you may need to update that certificate (like missing "www") OR restart the web service, if that certificate has already been renewed]

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.