Padlock in address bar is red but, when I click on it, I see a certificate under 'view site information'

My domain is:

I ran this command: sudo cerbot --apache -d

It produced this output:

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Ubuntu 20.04.2

My hosting provider, if applicable, is: Linode

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.40.0

1 Like

I'm not seeing any issues, nor is this check:

Thank you for your reply.
Not really sure why the certificate shows up but, the padlock remains red.
I just included a screen shot and it is red while the certificate looks good.
I clicked on the padlock and selected 'view site information'.

Looks very much like a mixed-content problem--your site is serving some resources (images, CSS, or something) via HTTP. I'd expect to have shown that, though.

Yourpage requested js/css from
As the ip address "" does not meet the DnsName of the certificate ""
It seems you are using Wordpress, please visit
And change the site URL from "" to ""

1 Like

Yes JemmyLoveJenny, That fixed the problem.
As soon as I went into WP under general > settings > site url and changed the IP address to human friendly DNS, the padlock came up.
The padlock went away when I put the IP address in the address bar.
I'm not sure what that field affects exactly.
I must have set that before I purchased the domain name.

Thanks so much. That was a huge help!

1 Like

The web browser software checks that the name in the address bar matches one of the names in the certificate. But (while it is technically possible to issue certificates for IP addresses), Let's Encrypt doesn't issue certificate for IP addresses, only for DNS domain names. That means that if you access a site with a Let's Encrypt certificate via HTTPS using its IP address, it will always be a mismatch, as seen by your browser.

This behavior is a bit different between HTTP and HTTPS, because of the presence of certificates and the need to proactively list individual names in the certificate when requesting them. For example, in HTTP, you could sometimes make an "unauthorized" name for a web site that you don't run yourself, just by registering a domain name and pointing it at the web site's IP address. If the web site operator doesn't try to proactively prevent this and only a single site is hosted on that server, it will normally work—as long as the browser can find the server, the site content will come up.

But in HTTPS, if you point an "unauthorized" domain name at a site, it will be invalid to access it that way from a browser's point of view, because the site will never serve a certificate that matches that name, and therefore the browser will not be able to confirm whether the connection is, in fact, to the intended site.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.