Site not trusted on some devices

Help
#1

Hello,

I’m getting reports from users, that my site is not accessble. iOS devices rightout say “not trusted” and refuse to load it and one user has the same problem with firefox Focus on android saying it’s because the certificate is self-signed.
Is there a way to rectify this? Or do I need a non-selfsigned certificate?

My domain is: fictionalmaps.com

My web server is (include version):
Apache2 v2.4.25

The operating system my web server runs on is (include version):
Debian 9

My hosting provider, if applicable, is:
strato

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
0.28.0

1 Like
#2

Hi @DM_Resources

you have created the wrong certificate - see https://check-your-website.server-daten.de/?q=fictionalmaps.com

CN=fictionalmaps.com
	21.05.2020
	19.08.2020
expires in 51 days	fictionalmaps.com - 1 entry

So your www version isn’t included.

Result:

Domainname Http-Status redirect Sec. G
• http://fictionalmaps.com/ 85.214.239.14 301 https://fictionalmaps.com/ Html is minified: 100,00 % 0.010 A
• http://www.fictionalmaps.com/ 85.214.239.14 301 https://fictionalmaps.com/ 0.187 E
• https://www.fictionalmaps.com/ 85.214.239.14 301 https://fictionalmaps.com/ 3.220 N
Certificate error: RemoteCertificateNameMismatch
• https://fictionalmaps.com/ 85.214.239.14 GZip used - 20361 / 66075 - 69,19 % Inline-JavaScript (∑/total): 24/36688 Inline-CSS (∑/total): 2/4720 200 Html is minified: 313,79 % 4.110 B

If a user adds www, it’s insecure.

Create one certificate with both domain names and use that.

2 Likes
#3

Ah, thank you! That makes sense!

Excuse if I ask ignorantly: how do I create a certificate for both?
I’m a complete beginner when it comes to SSL, so I used these instructions: https://certbot.eff.org/lets-encrypt/debianstretch-apache
It seemed to work, but nowhere in there do I specify the domain name.

1 Like
#4

Read

2 Likes
#5

Thank you, I will read it thoroughly.

2 Likes
#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.