SSL Certificate Problems - Revision history

KazVee: Add note about Wildcard certificates not being supported

2025-11-26T00:22:02Z

Add note about Wildcard certificates not being supported

← Older revision		Revision as of 00:22, 26 November 2025
Line 3:		Line 3:
	== Installing a Let's Encrypt SSL Certificate ==		== Installing a Let's Encrypt SSL Certificate ==

	==== Navigate to the Let's Encrypt Settings ====		=== Navigate to the Let's Encrypt Settings ===

	Navigate to the Let's Encrypt settings using the steps below:		Navigate to the Let's Encrypt settings using the steps below:
Line 9:		Line 9:
	'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''		'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''

	==== Install the Certificate ====		=== Install the Certificate ===

	Click on the 'Install' button.		Click on the 'Install' button.
Line 15:		Line 15:
	[[File:ssl-install.png]]		[[File:ssl-install.png]]

	==== Select Certificate Options ====		=== Select Certificate Options ===

	In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:		In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:
	* Include a "www" subdomain for the domain and each selected alias		* Include a "www" subdomain for the domain and each selected alias.
	* Secure webmail on this domain		* Secure webmail on this domain.
	* Assign the certificate to the mail domain		* Assign the certificate to the mail domain.

	'''Note:''' Securing webmail cannot be done during the 2 hours following domain creation, because it requires an Apache restart. Apache restarts every 2 hours, so if you're setting up SSL on a brand new account or a new domain that's just been added, you will need to return to these settings later to activate the webmail security feature.		'''Note:''' Securing webmail cannot be done during the 2 hours following domain creation, because it requires an Apache restart. Apache restarts every 2 hours, so if you're setting up SSL on a brand new account or a new domain that's just been added, you will need to return to these settings later to activate the webmail security feature.
Line 28:		Line 28:
	[[File:ssl-get-cert.png]]		[[File:ssl-get-cert.png]]

	You should see that 'Keep websites secured' is now 'Enabled'		You should see that 'Keep websites secured' is now 'Enabled'.

	We also recommend activating the 'Redirect from http to https' option		We also recommend activating the 'Redirect from http to https' option.

	[[File:ssl-check-settings.png]]		[[File:ssl-check-settings.png]]

			==== Wildcard Certificates ====

			HelioHost does not currently support Wildcard certificates, due to a lack of integration between Plesk and our DNS. We cannot change this setting, so please disregard the message in Plesk suggesting your hosting provider can fix it. Wildcard SSL is actually less secure than installing a certificate on each domain. We recommend installing a certificate on each domain instead.

	== Troubleshooting ==		== Troubleshooting ==
Line 42:		Line 46:
	If the certificate is expired or invalid:		If the certificate is expired or invalid:

	* Reissue the certificate		* Reissue the certificate.
	* Wait '''a full 2 hours'''		* Wait '''a full 2 hours'''.
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly.

	== If the Certificate is NOT Expired ==		== If the Certificate is NOT Expired ==
Line 50:		Line 54:
	If the certificate is not expired:		If the certificate is not expired:

	* Unassign the certificate from the domain		* Unassign the certificate from the domain.
	* Reassign the certificate to the domain		* Reassign the certificate to the domain.
	* Wait '''a full 2 hours'''		* Wait '''a full 2 hours'''.
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly.

	== Ensure Redirect HTTP to HTTPS is Off ==		== Ensure Redirect HTTP to HTTPS is Off ==
Line 68:		Line 72:
	Plesk can also redirect to https. To disable this redirect:		Plesk can also redirect to https. To disable this redirect:

	* Login at [https://heliohost.org/login/ heliohost.org]		* Login at [https://heliohost.org/login/ heliohost.org].
	* Continue to Plesk		* Continue to Plesk.
	* Websites & Domains		* Websites & Domains.
	* Hosting & DNS		* Hosting & DNS.
	* Hosting		* Hosting.
	* Uncheck the option Redirect visitors from HTTP to HTTPS		* Uncheck the option Redirect visitors from HTTP to HTTPS.

	[[File:redirect_http_to_https.png]]		[[File:redirect_http_to_https.png]]

KazVee: Fix numbered headers

2025-11-26T00:13:52Z

Fix numbered headers

Krydos: Added guidance on how to disable https redirect

2025-02-09T03:34:14Z

Added guidance on how to disable https redirect

@@ Line 54: / Line 54: @@
 * Wait '''a full 2 hours'''
 * [[:Clear_Your_Cache|Clear your cache]] to ensure the changes are applied correctly
 == Further Support ==
 If after following the above steps, waiting '''a full 2 hours''', and [[:Clear_Your_Cache|clearing your cache]], the problem is not fixed, please post a topic in the [https://helionet.org/index/forum/45-customer-service/?do=add Customer Support forum]. Make sure you provide your '''username''', '''domain name''', and any '''error message(s)''' received.

KazVee: Fix code sections to restore single "=" where they should be

2025-01-22T06:15:51Z

Fix code sections to restore single "=" where they should be

← Older revision		Revision as of 06:15, 22 January 2025
Line 57:		Line 57:
	== Further Support ==		== Further Support ==

	If after following the above steps, waiting '''a full 2 hours''', and [[:Clear_Your_Cache\|clearing your cache]], the problem is not fixed, please post a topic in the [https://helionet.org/index/forum/45-customer-service/?do==add Customer Support forum]. Make sure you provide your '''username''', '''domain name''', and any '''error message(s)''' received.		If after following the above steps, waiting '''a full 2 hours''', and [[:Clear_Your_Cache\|clearing your cache]], the problem is not fixed, please post a topic in the [https://helionet.org/index/forum/45-customer-service/?do=add Customer Support forum]. Make sure you provide your '''username''', '''domain name''', and any '''error message(s)''' received.

KazVee: Update to use H2 headers for better readability

2025-01-17T17:19:20Z

Update to use H2 headers for better readability

← Older revision		Revision as of 17:19, 17 January 2025
Line 1:		Line 1:
	= SSL Certificate Problems =		== SSL Certificate Problems ==

	= Installing a Let's Encrypt SSL Certificate =		== Installing a Let's Encrypt SSL Certificate ==

	== Navigate to the Let's Encrypt Settings ==		==== Navigate to the Let's Encrypt Settings ====

	# Navigate to the Let's Encrypt settings using the steps below:		# Navigate to the Let's Encrypt settings using the steps below:
Line 9:		Line 9:
	'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''		'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''

	== Install the Certificate ==		==== Install the Certificate ====

	3 Click on the 'Install' button.		# Click on the 'Install' button.

	[[File:ssl-install.png]]		[[File:ssl-install.png]]

	== Select Certificate Options ==		==== Select Certificate Options ====

	# In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:		# In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:
Line 34:		Line 34:
	[[File:ssl-check-settings.png]]		[[File:ssl-check-settings.png]]

	= Troubleshooting =		== Troubleshooting ==

	If you have issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check:		If you have issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check:

	= Check if the Certificate is Expired or Invalid =		== Check if the Certificate is Expired or Invalid ==

	If the certificate is expired or invalid:		If the certificate is expired or invalid:
Line 46:		Line 46:
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly

	= If the Certificate is NOT Expired =		== If the Certificate is NOT Expired ==

	If the certificate is not expired:		If the certificate is not expired:
Line 55:		Line 55:
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly

	= Further Support =		== Further Support ==

	If after following the above steps, waiting '''a full 2 hours''', and [[:Clear_Your_Cache\|clearing your cache]], the problem is not fixed, please post a topic in the [https://helionet.org/index/forum/45-customer-service/?do=add Customer Support forum]. Make sure you provide your '''username''', '''domain name''', and any '''error message(s)''' received.		If after following the above steps, waiting '''a full 2 hours''', and [[:Clear_Your_Cache\|clearing your cache]], the problem is not fixed, please post a topic in the [https://helionet.org/index/forum/45-customer-service/?do==add Customer Support forum]. Make sure you provide your '''username''', '''domain name''', and any '''error message(s)''' received.

KazVee: Add info on adding SSL Certificates & screenshots

2024-12-21T18:54:04Z

Add info on adding SSL Certificates & screenshots

@@ Line 1: / Line 1: @@
 = SSL Certificate Problems =
-= Let's Encrypt Settings =
+= Installing a Let's Encrypt SSL Certificate =
-Navigate to the Let's Encrypt settings using the steps below:
+== Navigate to the Let's Encrypt Settings ==
 '''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''
 = Troubleshooting =

KazVee: Add navigation steps for Let's Encrypt settings

2024-11-16T01:33:29Z

Add navigation steps for Let's Encrypt settings

← Older revision		Revision as of 01:33, 16 November 2024
Line 1:		Line 1:
	= SSL Certificate Problems =		= SSL Certificate Problems =

	If you ~~encounter~~ issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check ~~once you are logged in to [[:Plesk\|Plesk]]~~:		= Let's Encrypt Settings =

			Navigate to the Let's Encrypt settings using the steps below:

			'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''

			= Troubleshooting =

			If you have issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check:

	= Check if the Certificate is Expired or Invalid =		= Check if the Certificate is Expired or Invalid =

KazVee: /* SSL Certificate Problems */

2024-10-04T16:58:55Z

SSL Certificate Problems

← Older revision		Revision as of 16:58, 4 October 2024
Line 1:		Line 1:
	= SSL Certificate Problems =		= SSL Certificate Problems =

	If you encounter issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check once you are logged in to Plesk:		If you encounter issues with the Let's Encrypt SSL certificate on your domain or subdomain, here are some things to check once you are logged in to [[:Plesk\|Plesk]]:

	= Check if the Certificate is Expired or Invalid =		= Check if the Certificate is Expired or Invalid =

KazVee: /* Check if the Certificate is Expired or Invalid */

2024-10-04T16:58:34Z

Check if the Certificate is Expired or Invalid

← Older revision		Revision as of 16:58, 4 October 2024
Line 8:		Line 8:

	* Reissue the certificate		* Reissue the certificate
	* Wait a full 2 hours		* Wait '''a full 2 hours'''
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly

KazVee: /* If the Certificate is NOT Expired */

2024-10-04T16:58:25Z

If the Certificate is NOT Expired

← Older revision		Revision as of 16:58, 4 October 2024
Line 17:		Line 17:
	* Unassign the certificate from the domain		* Unassign the certificate from the domain
	* Reassign the certificate to the domain		* Reassign the certificate to the domain
	* Wait a full 2 hours		* Wait '''a full 2 hours'''
	* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly		* [[:Clear_Your_Cache\|Clear your cache]] to ensure the changes are applied correctly

← Older revision		Revision as of 00:13, 26 November 2025
Line 5:		Line 5:
	==== Navigate to the Let's Encrypt Settings ====		==== Navigate to the Let's Encrypt Settings ====

	# Navigate to the Let's Encrypt settings using the steps below:		Navigate to the Let's Encrypt settings using the steps below:

	'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''		'''Login > Plesk > Websites & Domains > [ domain ] > Dashboard tab > Security section> SSL/TLS Certificates button > Let's Encrypt settings'''
Line 11:		Line 11:
	==== Install the Certificate ====		==== Install the Certificate ====

	# Click on the 'Install' button.		Click on the 'Install' button.

	[[File:ssl-install.png]]		[[File:ssl-install.png]]
Line 17:		Line 17:
	==== Select Certificate Options ====		==== Select Certificate Options ====

	# In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:		In addition to selecting the `Secure the domain name` option, we also recommend selecting the following options:
	#* Include a "www" subdomain for the domain and each selected alias		* Include a "www" subdomain for the domain and each selected alias
	#* Secure webmail on this domain		* Secure webmail on this domain
	#* Assign the certificate to the mail domain		* Assign the certificate to the mail domain

	'''Note:''' Securing webmail cannot be done during the 2 hours following domain creation, because it requires an Apache restart. Apache restarts every 2 hours, so if you're setting up SSL on a brand new account or a new domain that's just been added, you will need to return to these settings later to activate the webmail security feature.		'''Note:''' Securing webmail cannot be done during the 2 hours following domain creation, because it requires an Apache restart. Apache restarts every 2 hours, so if you're setting up SSL on a brand new account or a new domain that's just been added, you will need to return to these settings later to activate the webmail security feature.

	# Click on the 'Get it free' button to install the certificate.		Click on the 'Get it free' button to install the certificate.

	[[File:ssl-get-cert.png]]		[[File:ssl-get-cert.png]]

	# You should see that 'Keep websites secured' is now 'Enabled'		You should see that 'Keep websites secured' is now 'Enabled'

	# We also recommend activating the 'Redirect from http to https' option		We also recommend activating the 'Redirect from http to https' option

	[[File:ssl-check-settings.png]]		[[File:ssl-check-settings.png]]