Ssl certificate created but site not secured

Help
#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: millennialpennies.com

I ran this command: created with zero ssl successful cpanel setup

It produced this output: not secured

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: godaddy

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

1 Like
#2

Hi,

It seems like your certificate is issued successfully and installed on your hosting server. The only thing you are missing is a green padlock. (Your HTTPS is working, just some mixed contents issue)
Please follow the below guide and update all mixed contents.
https://www.whynopadlock.com/results/1eaccd1f-d374-43cc-b803-d7938f4ce7c3

Edit: since you are using WordPress, you should first check if your site address and admin address is set to use https (instead of http), and make sure all theme-builder content you use (and the links) are using https (not http).

Thank you

2 Likes
#3

Hi @MPenny

checking your domain your certificate is ok - https://check-your-website.server-daten.de/?q=millennialpennies.com#connections

CN=millennialpennies.com
	03.02.2020
	03.05.2020
expires in 90 days	millennialpennies.com, www.millennialpennies.com - 2 entries

Two domain names, both connections use that certificate.

One small problem - Grade I, mixed content:

http://www.millennialpennies.com/wp-content/uploads/2020/01/MP-logo.png

Change that to https.

Same in that css file:

https://www.millennialpennies.com/wp-content/et-cache/33/et-core-unified-33-15806915254377.min.css

That’s https, but there is a http resource included via url(" ").

http://www.millennialpennies.com/wp-content/uploads/2019/12/kari-shea-1SAnrIxw5OY-unsplash-3-scaled.jpg
1 Like
#4

Thank you for your help! I will fix that now

1 Like
#5

I was able to fix the mixed content issue but it seems I am getting errors with my sub domains. https://jobs.millennialpennies.com and https://portal.millennialpennies.com. On whynopadlock it says “self signed certificate”.

#6

You have to create and install two certificates.

#7

Or a single certificate with both domains, or a wildcard.

#8

Yes I created and installed the certificates for millennialpennies.com, www.millennialpennies.com, jobs.millennialpennies.com, www. jobs.millennialpennies.com portal.millennialpennies.com and www. portal.millennialpennies.com

#9

Checked jobs - there is no certificate - https://check-your-website.server-daten.de/?q=jobs.millennialpennies.com#ct-logs

Rechecked with Google - the same - https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_subdomains:false;domain:jobs.millennialpennies.com&lu=cert_search

no certificate.

Checked the main domain - https://check-your-website.server-daten.de/?q=millennialpennies.com#ct-logs

There is no newer certificate:

Issuer not before not after Domain names LE-Duplicate next LE
Let’s Encrypt Authority X3 2020-02-02 2020-05-02 millennialpennies.com, www.millennialpennies.com
2 entries
Let’s Encrypt Authority X3 2019-12-03 2020-03-02 millennialpennies.com, www.millennialpennies.com
2 entries
Let’s Encrypt Authority X3 2019-02-19 2019-05-20 millennialpennies.com, www.millennialpennies.com
2 entries

So the certificate creation didn’t work.

#11

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.