This site is not secured

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: www.partybuz.com

I ran this command: I just enter data to our live website. I opened the website on open network couple of times on 16/4/19 .since then it started giving this error and due to this error I cant access both my website and admin page. Also now its showing the expiry date as the day when I opened the website and admin page on open network . Please help me.

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

2

Hi @Shri18

your certificate is expired ( https://check-your-website.server-daten.de/?q=partybuz.com ):

CN=partybuz.com
	16.01.2019
	16.04.2019
2 days expired	partybuz.co.uk, partybuz.com, 
partybuzz.co.uk, www.partybuz.co.uk, 
www.partybuz.com, www.partybuzz.co.uk - 6 entries

So your connections are not secure.

But you should able to create an exception.

Critical: You have ipv4- and ipv6 addresses:

Host T IP-Address is auth. ∑ Queries ∑ Timeout
partybuz.com A 139.162.201.128 yes 1 0
AAAA 2a01:7e00::f03c:91ff:fee4:cd74 yes
www.partybuz.com A 139.162.201.128 yes 1 0
AAAA 2a01:7e00::f03c:91ff:fee4:cd74 yes

But your ipv6 doesn't work:

Domainname Http-Status redirect Sec. G
• http://www.partybuz.com/
139.162.201.128 301 http://partybuz.com/ 0.057 D
• http://partybuz.com/
139.162.201.128 200 0.497 H
• http://partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
• http://www.partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
• https://www.partybuz.com/
139.162.201.128 301 https://partybuz.com/ 0.293 N
Certificate error: RemoteCertificateChainErrors
• https://partybuz.com/
139.162.201.128 200 0.806 N
Certificate error: RemoteCertificateChainErrors
• https://partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.026 T
Timeout - The operation has timed out
• https://www.partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.023 T
Timeout - The operation has timed out

So every user with ipv6 can't access your website.

If you want to create a new certificate, this error is critical. Letsencrypt prefers ipv6, so your site doesn't answer.

Short solution: Remove the ipv6 AAAA entry in your dns settings, then create a new certificate.

Better solution: Fix your ipv6.

3

Hi Juergen,
Thank you . One more question, is the validity of Let’s Encrypt Certificate only for 3 months? Do we need to re-install certificate for every 3 months? . Sorry , I don’t have much idea as I do limited work on website. One more thing I just wonder How come its not giving this error when I try to open website on my mobile?

4

Yes, Letsencrypt certificates are only 90 days valid -> you have to create new certificates every 60 - 85 days. So automation is the key.

Perhaps you use the http version, there is no redirect http -> https.

5

Hi Juergen,
Thank you once again. But When I checked the status of Let’s encrypt certificate Automation setting is already on. The Below message I can see under Lets Encrypt option…

" Let’s Encrypt is a certificate authority (CA) that allows you to create a free SSL/TLS certificate for your domain.
By clicking the “Install/Renew” button you acknowledge that you have read and agree to the Let’s Encrypt Terms of Service.
Note: The certificate will be automatically renewed 30 days in advance before its expiration. "

Current certificate

Lets Encrypt partybuz.com This certificate will be renewed.

If it so, then why we are getting certification error and what is the next step? . Do I need to Manually renew it again?
ThAank you.

6

Looks like you use cPanel, Plesk or another integrated solution. These should renew the certificate every 60 - 80 day.

7

image
image.png1232×234 73.8 KB

when clicked on renew , it is giving this error.

8

Yes, it is Plesk Onyx panel

9

Your ipv6 problem isn't fixed ( https://check-your-website.server-daten.de/?q=partybuz.com ):

Domainname Http-Status redirect Sec. G
• http://www.partybuz.com/
139.162.201.128 301 http://partybuz.com/ 0.067 D
• http://partybuz.com/
139.162.201.128 200 0.504 H
• http://partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
• http://www.partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
• https://www.partybuz.com/
139.162.201.128 301 https://partybuz.com/ 0.307 N
Certificate error: RemoteCertificateChainErrors
• https://partybuz.com/
139.162.201.128 200 0.720 N
Certificate error: RemoteCertificateChainErrors
• https://partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
• https://www.partybuz.com/
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.030 T
Timeout - The operation has timed out
• http://www.partybuz.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
139.162.201.128 301 http://partybuz.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 0.057 D
Visible Content: 301 Moved Permanently nginx
• http://partybuz.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
139.162.201.128 404 0.060 A
Not Found
Visible Content: 404 Not Found nginx
• http://partybuz.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out
Visible Content:
• http://www.partybuz.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a01:7e00::f03c:91ff:fee4:cd74 -14 10.027 T
Timeout - The operation has timed out

A lot of timeouts checking your domain via http and ipv6.

10

Hi Juergen,
Thank you. how to fix ipv6? In DNS setting, we don’t have any AAAA entries.

11

You have ipv6 entries ( https://check-your-website.server-daten.de/?q=partybuz.com ):

Host T IP-Address is auth. ∑ Queries ∑ Timeout
partybuz.com A 139.162.201.128 yes 1 0
AAAA 2a01:7e00::f03c:91ff:fee4:cd74 yes
www.partybuz.com A 139.162.201.128 yes 1 0
AAAA 2a01:7e00::f03c:91ff:fee4:cd74 yes

These are your nameservers you have to check:

Domain	Nameserver	NS-IP
partybuz.com
	•  ns1.linode.com / 67m21
	162.159.27.72	•

	• 
	2400:cb00:2049:1::a29f:1a63	•

	•  ns2.linode.com / 67m23
	162.159.24.39	•

	• 
	2400:cb00:2049:1::a29f:1827	•

	•  ns3.linode.com / 67m20
	162.159.25.129	•

	• 
	2400:cb00:2049:1::a29f:1981	•

	•  ns4.linode.com / 67m20
	162.159.26.99	•

	• 
	2400:cb00:2049:1::a29f:1b48	•

	•  ns5.linode.com / 67m26
	162.159.24.25	•

	• 
	2400:cb00:2049:1::a29f:1819	•
12

A post was split to a new topic: Site is not secured

13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.