24 hr Australian Support


How to force the SSL / HTTPS version of your website


Ideally, your website will load with a padlock in the address bar as seen here;

0e41edc057a581006f51aaba7f3fb448714bce0e?t=ede10cfb10071a72d62eadc34bd05610

However, depending on how your website and SSL is configured, you may get any of the following alternate icons:

fc3cd6eaac92e2800dfc6e7756492e7c69d8dd57?t=b771130ef3b1b77069f76d5c8c404215
d315442d66ad4eafa46f0783c2f141c8a46d0602?t=14269203d0d1631d4d9e1d209a2fb8a1
b61b273d8a67aa1a137905e7f04638a92cadc831?t=99c757bb49dfa20081d7ce3bdd4a6c9d

This guide will take you through making sure your website loads securely.

Using HTTPS, or forcing SSL
Solves:
fbec3b54c521c1cfd217284393bbc7b00adf55c4?t=6eb6c9478e32e53ed7bda8d2cbae3a27

If you have already added an SSL certificate to your domain, you can force all visits to your site to use HTTPS to ensure your traffic is secured. The easiest way to do this is to add a redirect from 'http://yourdomain.net.au' to 'https://yourdomain.net.au' whenever someone loads your page.

There are several different ways to do this depending on the CMS you're using, but the most universal are below:
Forcing HTTPS in Wordpress
Forcing HTTPS in Joomla

Adding a redirect manually to your .htaccess file.
Note: You can learn how to access your .htaccess file here.

To force visitors to your website to go to the SSL (HTTPS) page, add this code to the top of your .htaccess file

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ <a><a>https://%{HTTP_HOST}%{REQUEST_URI</a></a>} [L,R=301]

To force visitors to your site to use the non-SSL (HTTP) page, use this code in the top of your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} on
RewriteRule ^ <a href=""><a href="">http://%{HTTP_HOST}%{REQUEST_URI</a></a>} [L,R=301]

You can use the tool Redirect Detective to test whether your redirect has been added successfully.

Removing Mixed Content
Solves:
6a1fb1d183765c7ca56ad0195ff5fd7955368674?t=c631fbdcb7ef5fd982b8ddf2b6ce4682

If you already have an SSL Certificate and are using HTTPS but still get this message, your website may have Mixed Content. This is where the website itself is using HTTPS, but loads images or other resources using non-HTTPS links. Because not all of the site loads securely, browsers will not mark it as fully secure.

To resolve this, use Why No Padlock or Missing Padlock to check what parts of your site are loading insecurely. You can then contact your web developer to manually update the links to use HTTPS.

Installing a valid SSL
Solves:
14d4a7ee0a4f799a4f8b8b559230029f78cf0121?t=070e4ad211e16d66cd00ce7eeb227217


If the certificate on your site is not valid, you will get a red "Not Secure" warning, as well as an error on the page with more information. If you click on Advanced you will get more information on the error. A few of the more common errors are included below.

a844685d8c68109aae9d939778e7c60f93324eec?t=393f7e6cd3f9c45b06a180a87d480f81


NET::ERR_CERT_DATE_INVALID
This server could not prove that it is yourdomain.net.au; its security certificate expired 318 days ago.

>> As the message says, the certificate has expired. To resolve this, contact your SSL provider and renew the certificate. We have a guide on this here.


NET::ERR_CERT_AUTHORITY_INVALID
This server could not prove that it is yourdomain.net.au; its security certificate is not trusted by your computer's operating system.

>> This message indicates the certificate was not issued by a Certificate Signing Authority, and may be a self-signed certificate. To resolve this, you will need to install a valid and trusted certificate on the site. You can find information on our offerings here.


NET::ERR_CERT_COMMON_NAME_INVALID
This server could not prove that it is yourdomain.net.au; its security certificate is from *.auserver.com.au

>> Your browser only found the server's certificate when looking for a certificate for your site. This indicates your site has no SSL Certificate. To resolve this, you will need to install a valid and trusted certificate on the site. You can find information on our offerings here.


For more information and tutorials on SSL Certificates, see our SSL Guide Repository.


Did you find this article useful?