Your connection is not private

[Yourbasket]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: yourbasket.co.ke

I ran this command: accessing yourbasket.co.ke website

It produced this output: This server could not prove that it is yourbasket.co.ke ; its security certificate is from admin.yourbasket.co.ke . This may be caused by a misconfiguration or an attacker intercepting your connection.

My web server is (include version): AWS

The operating system my web server runs on is (include version): Ubuntu

My hosting provider, if applicable, is: Hostinger

I can login to a root shell on my machine (yes or no, or I don't know): I don't know

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Not sure

[rg305]

Hi @Yourbasket, and welcome to the LE community forum

These are two different names:

@Yourbasket

yourbasket.co.ke
admin.yourbasket.co.ke

Before you can connect securely to a name, it requires a cert that covers that name.
Does that system have a cert for the admin name?

[Yourbasket]

Hy @rg305, yourbasket.co.ke is the main domain and admin.yourbasket.co.ke is the subdomain.

The SSL certificates were installed automatically via Hostinger.

[rg305]

Then you should speak with "Hostinger" about HTTPS.
Both sites fail HTTPS connections via IPv6:

curl -Ii6 https://yourbasket.co.ke
curl: (35) error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error

curl -Ii6 https://admin.yourbasket.co.ke
curl: (35) error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error

One of the names also fails HTTPS connections via IPv4:

curl -Ii4 https://yourbasket.co.ke
curl: (51) SSL: no alternative certificate subject name matches target host name 'yourbasket.co.ke'

curl -Ii4 https://admin.yourbasket.co.ke
HTTP/1.1 200 OK
Date: Mon, 22 May 2023 16:24:32 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Fri, 19 May 2023 07:06:57 GMT
ETag: "284-5fc0691108c96"
Accept-Ranges: bytes
Content-Length: 644
Vary: Accept-Encoding
Content-Type: text/html