How to fix ssl certificate error on my website

Summary

This guide helps you troubleshoot and resolve: How to fix ssl certificate error on my website. Follow the steps below to fix the issue.

Common Causes

An SSL certificate error means your website's secure connection cannot be verified by a visitor's web browser. When this happens, browsers such as Google Chrome, Microsoft Edge, or Apple Safari display warnings like "Your connection is not private" or "Not secure," which can deter customers and harm your online reputation. For Australian small businesses, a secure site is essential for protecting customer data, maintaining trust, and supporting search engine optimisation (SEO), as Google uses HTTPS as a ranking signal.

Quick Fix Steps

1. Check whether your SSL certificate has expired.
2. Confirm that your website is forcing HTTPS instead of loading over HTTP.
3. Look for mixed-content warnings where some page elements load over an insecure connection.
4. Clear your browser cache or test in an incognito window to rule out local caching issues.
5. If the problem persists, contact your hosting provider for assistance.

Detailed Instructions

Check certificate expiry

1. Open your website in Google Chrome or Microsoft Edge.
2. Click the padlock icon in the address bar to view the connection security information.
3. View the certificate details and check the expiry date. If the date has passed, the certificate needs to be renewed through your hosting control panel or certificate authority.

Force HTTPS redirects

1. Log in to your website's hosting control panel or content management system.
2. Locate the SSL/TLS settings or domain management section.
3. Enable the option to redirect HTTP traffic to HTTPS, often labelled Force HTTPS, HTTPS Redirect, or Always Use HTTPS.
4. Save your changes and test the website by typing http://yourdomain.com.au in the address bar. It should automatically load as https://yourdomain.com.au.

Fix mixed-content errors

1. Open your website in Google Chrome and press F12 to open Developer Tools.
2. Click the Console tab and look for warnings labelled "Mixed Content." These indicate images, scripts, or stylesheets loading over http:// instead of https://.
3. Edit your website's files or database to replace http:// URLs with https://. If you use WordPress, a search-and-replace plugin can help update internal links safely.
4. Save the changes and refresh the page to confirm the warnings disappear.

Troubleshooting

Certificate not trusted

If visitors see a warning that the certificate is not trusted, it may be self-signed or issued by an authority the browser does not recognise. Install a certificate from a trusted certificate authority, or reissue your existing certificate through your hosting provider.

Incorrect domain name on certificate

An SSL certificate must match the exact domain name used to access the site. If your certificate covers www.example.com.au but visitors go to example.com.au, they may see a mismatch error. Ensure the certificate includes both the www and non-www versions of your domain.

Server configuration issues

Outdated server software or incorrect TLS settings can cause connection failures. Confirm your web server supports modern TLS versions (TLS 1.2 or higher) and that the certificate chain, including any intermediate certificates, is installed correctly.

Why HTTPS matters

• Encrypts data between your website and its visitors, protecting sensitive information such as contact forms and login details.
• Displays the padlock icon in browsers, reassuring customers that your site is legitimate.
• Supports better search engine rankings, as Google prioritises secure websites in search results.
• Helps meet customer expectations for privacy and security when interacting with Australian businesses online.

Still Having Issues?