This Connection Is Untrusted!

  • ahasai77

    (@ahasai77)


    8 years, 3 months ago

    Since I created my website , people signing up to the website have reported that every time they try to subscribe to my website , they get an error message that says “THIS CONNECTION IS UNTRUSTED”
    “You have asked Firefox to connect securely to lonestarweathercenter.com, but we can’t confirm that your connection is secure.
    What Should I Do?

    If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn’t continue.
    (I clicked on technical details to try to understand why this issue keeps occuring and this is what it says)
    Technical Details

    lonestarweathercenter.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. The certificate is only valid for the following names: *.hostingplatform.com, hostingplatform.com Error code: SEC_ERROR_UNKNOWN_ISSUER
    I Understand the Risks”

    I’m not understanding what certificate wouldnt be trusted on my website. But I need this to be resolved, or else I will continue to loose traffic to me site as well as scaring people away from subscribing to my website.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Keith

    (@keithdriscoll)

    8 years, 3 months ago

    You should look into adding SSL to your site.

    http://www.wpbeginner.com/wp-tutorials/how-to-add-ssl-and-https-in-wordpress/

    Unless you serve your pages over HTTPS many browsers will begin warning visitors that your site is not secure.

    Thread Starter ahasai77

    (@ahasai77)

    8 years, 3 months ago

    Thanks for your response Keith. From my research I’ve found that web-host providers such as WordPress should offer SSL certificates for free or through a 3rd party for free if you request them. Other web host automatically issue them for free to clients, but some such as wordpress you may have to ask, so Ill go that route.

    RossMitchell

    (@rossmitchell)

    8 years, 3 months ago

    The certificate people are seeing says:
    The certificate is only valid for the following names: *.hostingplatform.com, hostingplatform.com
    These are the domain names of your hosting company, no one can tell that you are their client, hence your domain name remains unverified and hence unknown. This is why your website is untrusted.

    You can either buy an SSL certificate, or if your hosting supports the required ACME API, then you can use free certificates by letsencrypt, details here:
    https://letsencrypt.org/

    Your suggestion that WordPress is in a position to issue certificates is difficult to understand.

    • This reply was modified 8 years, 3 months ago by RossMitchell.
    Thread Starter ahasai77

    (@ahasai77)

    8 years, 3 months ago

    @rossmitchell I’m not understanding why my domain name is unverified since I bought it through a hosting company. It should already be verified, which is why I’m not getting why the certificate would be for hostingplatform.com, hostingplatform.com, when that’s not my domain name. But I’ll look into buying an SSL certificate I suppose. What I was referring to in my previous comment. Was that WordPress can give their client (ie: myself) a free SSL certification, or they can refer me to a 3rd party source that they’re affiliated with, to get a SSL certificate.

    RossMitchell

    (@rossmitchell)

    8 years, 3 months ago

    The best people to get your SSL certificate through is your hosting company, this way they will look after the installation for you.

    The verification takes on different levels, for one client of mine it meant that an international accounting firm (Dunn and Bradstreet) had to verify their corporate registration, that their details matched the phone book listing, and so on. Not everyone needs this, the cost was many times (10x) that of the name registration.
    I would expect that when you purchased your domain name, the transaction did not go much beyond:
    A) you want name “lonestarweathercenter.com”,
    B) No one else has it registered at the moment.
    C) Your credit card was good for the $12 or so required.
    D) You agree to some rules like keeping the contact email address up to date.
    In which case I am curious as to just what has been verified ?

    Presently the only certificate on your site is for the hosting company, for some usages like sending secure email or secure file transfer, this is enough.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘This Connection Is Untrusted!’ is closed to new replies.