SSL Cert established on my machine but not on others

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
csyyc.ca
I ran this command:
I installed certbot for my distro
It produced this output:
ssl cert which works for my machine but not all others
My web server is (include version):
Apache/2.4.58
The operating system my web server runs on is (include version):
Ubunto 20.04 LTS
My hosting provider, if applicable, is:
linode
I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 4.0.0

So yeah, for my machine it's secure for some others it isn't.

2

Welcome @cFire

Is it possible those other people are using your www subdomain?

Because you got a cert for your apex domain but it doesn't include the www subdomain. Anyone using that will be able to connect but will be shown a message about invalid domain name (in that it is not in the cert name list).

Your previous GoDaddy cert had both names. You didn't specify the command you used but for Certbot you just use two -d options one for each domain name.

3 Likes
3

Would using the subdomain www make the browser react saying it is “unsafe?” maybe with https:// appended? Could it also be an expired ssl cert? which makes no sense

4

Yes, very likely. Different browsers may show different wording. It could show HTTPS in the address bar as it could make an HTTPS connection.

Some browsers might show HTTP in the address bar. Depends on which browser, version, and its configuration.

The key issue is if you want people to use the www subdomain your cert must include that name.

3 Likes