# Valid Cert error in all browsers **URL:** \ **Category:** Help\ **Created:** [April 2, 2019, 8:54pm UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212 "2019-04-02T20:54:49Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![x1x11x](https://avatars.discourse-cdn.com/v4/letter/x/a8b319/32.png) [@x1x11x](https://community.letsencrypt.org/u/x1x11x)\ **Post date:** [April 2, 2019, 8:54pm UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/1 "2019-04-02T20:54:49Z")
Hi, i have following problem, iam using a lets encrypt certificate for my domain - but if i open up my page in all browsers it says either unknown issuer or untrusted issuer. i checked the cert on various pages like [ssllabs.com](http://ssllabs.com) and they all show no errors, but somehow this occurs My domain is:[https://kiseni.com](https://kiseni.com) My web server is (include version):Microsoft-IIS/10.0 The operating system my web server runs on is (include version): Windows Server 2016 Datacenter My hosting provider, if applicable, is: Contabo I can login to a root shell on my machine (yes or no, or I don’t know): Yes I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Plesk Oynx ---
**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\ **Post date:** [April 2, 2019, 8:59pm UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/2 "2019-04-02T20:59:33Z")
Exactly what certificate and error do you get? Are you connecting to the right IP address? Maybe it’s set to an older IP in the hosts file, or older DNS records are cached? ---
**Author:** ![x1x11x](https://avatars.discourse-cdn.com/v4/letter/x/a8b319/32.png) [@x1x11x](https://community.letsencrypt.org/u/x1x11x)\ **Post date:** [April 3, 2019, 3:28am UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/3 "2019-04-03T03:28:59Z")
Hi! I just checked the website in the different browsers, somehow it seems to work now, iam not getting any error anymore, seems like there was something cached. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [April 3, 2019, 7:15am UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/4 "2019-04-03T07:15:49Z")
Hi @x1x11x > [@x1x11x](#): > > I just checked the website in the different browsers, somehow it seems to work now your configuration is wrong, that's not a caching problem. Your certificate has only one domain name ( [https://check-your-website.server-daten.de/?q=kiseni.com](https://check-your-website.server-daten.de/?q=kiseni.com) ): ```nohighlight CN=kiseni.com (5145) 28.03.2019 26.06.2019 expires in 84 days kiseni.com - 1 entry ``` But you have a www dns entry, this isn't secure. | Domainname | Http-Status | redirect | Sec. | G | | --- | --- | --- | --- | --- | | • [http://kiseni.com/](http://kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.056 | A | | | | | | | | • [http://www.kiseni.com/](http://www.kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.050 | E | | | | | | | | • [https://www.kiseni.com/](https://www.kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.357 | N | | Certificate error: RemoteCertificateNameMismatch | | | | | | | | | | | | • [https://kiseni.com/](https://kiseni.com/) | | | | | | 173.249.6.221 | 200 | | 0.870 | B | So if a user uses the www-version, it's wrong. Browsers cache these redirects, so it's not really possible to check that with a browser. Create one certificate with both domain names, use that. ---
**Author:** ![x1x11x](https://avatars.discourse-cdn.com/v4/letter/x/a8b319/32.png) [@x1x11x](https://community.letsencrypt.org/u/x1x11x)\ **Post date:** [April 3, 2019, 7:48am UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/5 "2019-04-03T07:48:45Z")
Thanks for pointing this out to me! I’ll do that! Thank you! ---
**Author:** ![x1x11x](https://avatars.discourse-cdn.com/v4/letter/x/a8b319/32.png) [@x1x11x](https://community.letsencrypt.org/u/x1x11x)\ **Post date:** [April 3, 2019, 8:48pm UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/6 "2019-04-03T20:48:29Z")
I renewed the cert in plesk, this time with a www subdomain, but if i check the cert, it says again that the domain name is not matching the cert name - which is still issued for [kiseni.com](http://kiseni.com) and not [www.kiseni.com](http://www.kiseni.com) Any idea how to fix this? ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [April 3, 2019, 8:54pm UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/7 "2019-04-03T20:54:53Z")
> [@x1x11x](#): > > but if i check the cert, it says again that the domain name is not matching the cert name - which is still issued for [kiseni.com](http://kiseni.com) and not [www.kiseni.com](http://www.kiseni.com) > > Any idea how to fix this? That's only your caching problem. Rechecked your domain all is good ( [https://check-your-website.server-daten.de/?q=kiseni.com](https://check-your-website.server-daten.de/?q=kiseni.com) ): Your certificate is new. ```nohighlight CN=kiseni.com 03.04.2019 02.07.2019 expires in 90 days kiseni.com, www.kiseni.com - 2 entries ``` And both https connections are secure: | Domainname | Http-Status | redirect | Sec. | G | | --- | --- | --- | --- | --- | | • [http://kiseni.com/](http://kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.053 | A | | | | | | | | • [http://www.kiseni.com/](http://www.kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.050 | E | | | | | | | | • [https://www.kiseni.com/](https://www.kiseni.com/) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/](https://kiseni.com/) | 0.363 | B | | | | | | | | • [https://kiseni.com/](https://kiseni.com/) | | | | | | 173.249.6.221 | 200 | | 1.570 | B | | | | | | | | • [http://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | 0.053 | A | | Visible Content: Object Moved This document may be found here | | | | | | | | | | | | • [http://www.kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://www.kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | | | 173.249.6.221 | 301 | [https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | 0.053 | E | | Visible Content: Object Moved This document may be found here | | | | | | | | | | | | • [https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](https://kiseni.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | 404 | | 0.777 | A | | Not Found | | | | | | Visible Content: Skip to content Menu Primary Menu Home News Status Kiseni Archaeology Software Oops! That page can’t be found. It looks like nothing was found at this location. Maybe try one of the links below or a search? Copyright © 2019 Kiseni . All Rights Reserved. Theme: Full Frame Pro Home News Status | | | | | | | | | | | It's only your browser cache. You may modify your redirects, now, it's Grade E, B should be possible. But both connections are good. ---
**Author:** ![x1x11x](https://avatars.discourse-cdn.com/v4/letter/x/a8b319/32.png) [@x1x11x](https://community.letsencrypt.org/u/x1x11x)\ **Post date:** [April 4, 2019, 3:16am UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/8 "2019-04-04T03:16:24Z")
Now i see! Thank you very much for your help! ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [May 4, 2019, 3:16am UTC](https://community.letsencrypt.org/t/valid-cert-error-in-all-browsers/90212/9 "2019-05-04T03:16:28Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.