How to Troubleshoot Common SSL Certificate Issue Print

How to Troubleshoot Common SSL Certificate Issues

If your website shows an SSL warning, does not load over HTTPS, or displays a certificate error, the issue may be related to the certificate, DNS, installation, private key, certificate chain, or website configuration.

Use the steps below to identify and resolve common SSL certificate problems.

1. Confirm the SSL Certificate Is Active

First, check whether your SSL certificate has been successfully issued and is currently active.

Review the certificate status in your ApnCloud Client Area or SSL management page.

If the certificate is still pending, complete any required domain validation before continuing.

2. Check the Certificate Expiration Date

An expired SSL certificate can cause browsers to display security warnings.

Check the certificate expiration date and renew the certificate if necessary.

After renewal, make sure the renewed certificate is installed on the correct server.

3. Confirm the Certificate Matches Your Domain

The SSL certificate must cover the hostname visitors are using.

For example, check whether the certificate supports:

yourdomain.com
www.yourdomain.com

If a hostname is not included in the certificate, browsers may display a domain mismatch warning.

4. Check Your Domain DNS

Make sure your domain points to the server where the SSL certificate is installed.

Verify:

• The A record points to the correct IPv4 address
• The AAAA record is correct if IPv6 is being used
• The nameservers are correct
• DNS propagation has completed

If your domain points to another server, visitors may receive the wrong SSL certificate.

5. Check the SSL Installation

Make sure the certificate has been installed for the correct domain and hosting account.

A typical SSL installation may require:

• The SSL certificate
• The matching private key
• The certificate chain or intermediate certificate

Missing or incorrect certificate information can prevent HTTPS from working properly.

6. Check the Private Key

The private key must match the SSL certificate.

If the certificate was issued using one CSR but a different private key is installed, the certificate may not work.

Never share your private key publicly or include it in a support ticket.

7. Check the Certificate Chain

An incomplete or incorrect certificate chain may cause trust warnings on some browsers or devices.

Make sure the required intermediate certificate or certificate chain is installed correctly.

8. Check for Mixed Content

A website may have a valid SSL certificate but still show a security warning if some resources are loaded over HTTP.

Common mixed-content resources include:

• Images
• CSS files
• JavaScript files
• Fonts
• External media

Update insecure resource URLs from HTTP to HTTPS where appropriate.

9. Check Your HTTPS Redirect

If your website does not automatically redirect from HTTP to HTTPS, review your website, hosting control panel, or web server configuration.

A typical secure website should normally be accessible using:

https://yourdomain.com

Test redirects carefully to avoid creating redirect loops.

10. Clear Browser Cache

Browsers may temporarily cache old SSL or website information.

Try:

• Refreshing the page
• Clearing browser cache
• Using a private or incognito window
• Testing from another browser
• Testing from another device

11. Test Both www and Non-www Versions

Check both versions of your website if they are intended to work:

https://yourdomain.com
https://www.yourdomain.com

If one version works and the other does not, check DNS records, certificate coverage, and web server configuration.

12. SSL Works on One Device but Not Another

If SSL works on some devices but fails on others, the issue may involve:

• An incomplete certificate chain
• Cached certificate information
• Old browser or operating system software
• DNS differences between networks

Test from multiple updated browsers and devices.

13. Certificate Shows the Wrong Website

If the browser shows a certificate for another domain, check whether your domain is pointing to the correct server.

Also verify that the correct SSL certificate is assigned to the correct virtual host or domain configuration.

14. SSL Stopped Working After Moving Servers

If you recently migrated your website to another server, the SSL certificate may need to be installed again on the new server.

Check:

• The domain points to the new server
• The certificate is installed on the new server
• The private key matches
• The certificate chain is installed
• HTTPS configuration is enabled

Common SSL Errors

Certificate expired: Renew the SSL certificate and install the renewed certificate.

Domain name mismatch: Make sure the certificate covers the exact hostname being used.

Certificate not trusted: Check the certificate chain and intermediate certificates.

HTTPS does not load: Check SSL installation, DNS, web server configuration, and firewall settings.

Mixed content warning: Update HTTP resources to HTTPS.

Wrong certificate displayed: Verify the domain points to the correct server and the correct certificate is installed.

Important SSL Tips

• Keep track of certificate expiration dates
• Use the correct certificate for each domain
• Keep private keys secure
• Install the full certificate chain when required
• Test HTTPS after server or DNS changes
• Check for mixed content after enabling SSL

Need Help?

If you are still experiencing an SSL certificate issue, please open a Support Ticket from your ApnCloud Client Area.

Include your domain name, SSL product, hosting type, browser error message, and a clear description of the issue. Never include your private key or account password in a support ticket.