# Secure padlock issue

**URL:** <https://community.letsencrypt.org/t/secure-padlock-issue/112293>\
**Category:** Help\
**Created:** [February 4, 2020, 10:55am UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293 "2020-02-04T10:55:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![P00rni](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@P00rni](https://community.letsencrypt.org/u/P00rni)\
**Post date:** [February 4, 2020, 10:55am UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293/1 "2020-02-04T10:55:56Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [https://www.livechennai.com](https://www.livechennai.com)

I ran this command:

It produced this output:

My web server is (include version): IIS

The operating system my web server runs on is (include version): windows server 2008 R2

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):

I have installed lets encrypt manually for our site, but secure padlock is not shown though the certificate shows valid. How can we fix this ? Do we have to do any changes from our end?  
Please guide us.

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [February 4, 2020, 11:19am UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293/2 "2020-02-04T11:19:31Z")

</div>

Hi @P00rni

> [@P00rni](#):
>
> My domain is: [https://www.livechennai.com](https://www.livechennai.com)

there is a check of your domain, ~~30 minutes old - [https://check-your-website.server-daten.de/?q=livechennai.com](https://check-your-website.server-daten.de/?q=livechennai.com) - please read that output.

- Your certificate has only the www domain name, so your non www is insecure.
- You use Tls.1.0, that's deprecated. Update to use Tls.1.2.
- SHA is deprecated. But that's a result using Tls.1.0.

---

<div class="post-metadata">

**Author:** ![P00rni](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@P00rni](https://community.letsencrypt.org/u/P00rni)\
**Post date:** [February 4, 2020, 11:37am UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293/3 "2020-02-04T11:37:18Z")

</div>

Hi JuergenAuer,

Thanks for your immediate reply! Can you me help me to fix ssl for non www domain, how do I update Tls 1.2. Please guide.

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [February 4, 2020, 3:43pm UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293/4 "2020-02-04T15:43:38Z")

</div>

> [@P00rni](#):
>
> ssl for non www domain

If you are able to create a certificate with the www domain, then you are able to create a certificate with both domain names.

Tls.1.2: Check

> [@Third-party-Tools to check your configuration](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration/76272):
>
> I…

there is a tool IISCrypto. Use that to enable Tls.1.2.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 5, 2020, 3:44pm UTC](https://community.letsencrypt.org/t/secure-padlock-issue/112293/5 "2020-03-05T15:44:22Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.