Skip to content

Troubleshooting SSL certificate errors

chapman91 edited this page Sep 3, 2023 · 13 revisions

BACKGROUND INFORMATION:

Netlify is a free static website hosting service that uses Let's Encrypt, that is a popular Certificate Authority (CA) that provides free SSL/TLS certificates. Let's Encrypt automatically provision and renew SSL certificates for custom domains on Netlify.

PROBLEM DESCRIPTION:

The hosting website Netlify could not provision a SSL certificate for G&G website. The SSL certificate error is seen in the server configuration, and is seen whenever the website is accessed.

ENVIRONMENT AND VARIABLES:

  1. Hosted environment: Netlify

  2. Hosting Plan: Free

ERROR MESSAGES AND LOGS:

Error message: "We could not provision a Let’s Encrypt certificate for your custom domain."

Category: Certificate Provisioning Error

TROUBLESHOOT:

  1. Check DNS

    • In your netlify server settings assign external registered custom domain to point to Netlify site

    • Add the two entries to the Production domains. One entry for apex domain and the next for the www subdomain

    • Set www subdomain as your primary domain and gngpressurewash.com as your apex domain. This is a recommended set up in Netlify for custom domain names.

    • The A Record for bare domain was changed to point to 75.2.60.5.

  2. Advanced troubleshooting

  3. HSTS preload

  4. Create a certificate and manually have it set up to the website.

Expectation:

  1. When the user searches for the domain name 'gngpressurewash.com' in their browser they will be redirected to 'www.gngpressurewash.com'over a TSL connection.

OBSERVATION:

Title: SSL/TLS CERTIFICATE FAILED

2023-09-02_14-11-41_ssl_error

Nelfify shows that they were not able to create and configure a certificate to the website. This is a warning that secure connection on the website is not enabled.

Title: WEBSITE ACCESS NOT SECURED

2023-09-03_11-31-05_error_not_secure

At the website access point a warning is prompted to the user that the website does not have a valid certificate is urged to exercise caution because they can be hacked.

Title: DNS VERIFICATION FAILED

2023-09-03_11-41-14_DNS_verification_failed

The DNS configuration for the custom domain is not configured properly to map to the Netilfy site.

Terms: Apex domain Primary domain