Website Works on Computer, not iOS device

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: secure.o3i.international

It produced this output: Website works on desktop computer but will not work on iOS device (iPhone, iPad, etc).

My web server is (include version): Ubuntu 16.04

The operating system my web server runs on is (include version): Windows 10, Android

My hosting provider, if applicable, is: On prem

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.40.1

Hi All!

I’m having an issue with my site. After installing my SSL certificate I am now unable to view my site from my iPhone. It works just fine on my computer. I ran tests and the SSL certificate installed on the site successfully.

Your help is appreciated!

Hi,

What iPhone / version do you have?

https://www.ssllabs.com/ssltest/analyze.html?d=secure.o3i.international

The test looks normal.

P.S. your keychain looks a little bit… loss.
You can follow Mozilla’s key suggestions
https://ssl-config.mozilla.org/

Thank you

Hi @o3illc

checking your domain Tls.1.1 and Tls.1.0 is inactive - https://check-your-website.server-daten.de/?q=secure.o3i.international#connections

Do you use a new iOS or a too old version?

Check your domain with Ssllabs.

Then you see that some older iOS are blocked.

PS: @stevenzhu has the check:

Safari 5.1.9 / OS X 10.6.8 Protocol mismatch (not simulated)
Safari 6.0.4 / OS X 10.8.4 R Protocol mismatch (not simulated)

PS: There is no chain error (sometimes a problem).

Thank you,

I’m using the latest version iOS on my iPhone.

What’s your iPhone version?

I’m running 12.4.1. I’m running an upgrade to see if that may fix the issue.

That’s weird.
When you connect to the website, do you have error message or something?
Can you share a screenshot of error message if possible?

Thank you

Ah, in the last days, I’ve added something. Your Grade isn’t longer Grade A, instead, it’s Grade B.

Why?

B https://secure.o3i.international/ 64.146.142.204
200
max-age=31536000;
Critical: HSTS-Header has Parse-Errors wrong ending semicolon found

But I don’t know if this is a critical iOS-error.

Remove the ; at the end and check, what happens.

The Ssllabs - check has two things: Your Cipher suites are very restricted. And

spdy/3.1

is used, perhaps that’s buggy.

Try to disable that.