耐思尼克客户支持中心

HTTPS & SSL Guide fили .boo, .day, .dev, .page, и .rsvp

www.nicenic.com

HTTPS & SSL Guide fили .boo, .day, .dev, .page, и .rsvp

Quick Answer

Choose или manage the certificate based on the hostnames you need to protect, the validation level, the server platfилиm и whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain и verify the live HTTPS connection befилиe relying on the certificate.

Befилиe You Begin

Identify every hostname the certificate must cover.
Потвърди that you control DNS или the required validation channel.
Generate и securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide До ensure the security of вашия website и protect вашия visitилиs, all домейнs under.boo,.day,.dev,.page, и.rsvp must use HTTPS. This guide will help you configure SSL/TLS cилиrectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between вашия website и its visitилиs. It назадents eavesdropping и ensures data integrity.
Obtaining an SSL сертификат NICENIC provides trusted SSL certificates. You can learn mилиe и купи/configure a certificate тук: https://nicenic.com/ssl-certificates/
Installing the SSL сертификат Следвай вашия web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfилиce HTTPS Once вашия certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links и resources to use HTTPS. Verify that вашия website is fully accessible via HTTPS.
Keep Сертификати Обновено SSL certificates have expiration dates. Ensure certificates are renewed befилиe they expire и check вашия website regularly to maintain uninterrupted secure connections.

How to Verify

Отворен the HTTPS site from a clean browser session и inspect the certificate subject, SAN hostnames, issuer, validity dates и chain. Test every hostname covered by the certificate и confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate или CSR.
The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

Ако the issue continues after you complete the checks above, submit a NiceNIC suppилиt ticket with the affected домейн или product, the exact errили message, the time of the issue и the troubleshooting already completed.

How to Set Up и Troubleshoot DNSSEC fили Your Домейн

www.nicenic.com

How to Set Up и Troubleshoot DNSSEC fили Your Домейн?

DNSSEC helps protect вашия домейн’s DNS recилиds from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the cилиrect source.

В NiceNIC, DNSSEC usually involves two sides:
Your DNS provider или nameserver provider generates the DNSSEC recилиds.
NiceNIC, as вашия домейн registrar, helps submit the DS recилиds to the registry when the TLD suppилиts DNSSEC.

Ако DNSSEC is not configured cилиrectly, вашия домейн may show DNSSEC errилиs, или in mилиe serious cases, some users may not be able to access вашия website.

What Is DNSSEC?
DNSSEC stиs fили Име на домейн System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fили вашия домейн has not been changed или fилиged during the lookup process.
Fили example, when someone visits вашия website, DNS is used to find the cилиrect server IP address. DNSSEC helps make sure that the DNS result is authentic и has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, или email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hиles sensitive user infилиmation.
You run business email, login systems, payment pages, или customer pилиtals.
You want stronger домейн security.
Your DNS provider suppилиts DNSSEC.
Your домейн extension suppилиts DNSSEC.

Ако you are not familiar with DNS management, we recommend confirming with вашия DNS provider befилиe enabling DNSSEC.
Incилиrect DNSSEC settings may affect домейн resolution.

Impилиtant DNSSEC Периодs
DNSKEY: A DNSKEY recилиd is generated by вашия DNS provider. It is used as part of the DNSSEC validation process.
DS Recилиd: A DS recилиd connects вашия домейн’s DNSSEC setup with the parent registry zone. In most cases, вашия DNS provider gives you the DS recилиd, и you need to add it through вашия registrar.
Имеserver: Your nameservers decide wтук вашия домейн’s DNS recилиds are managed. Ако you change nameservers, вашия DNSSEC recилиds may also need to be updated.

How to Enable DNSSEC fили Your Домейн

Step 1: Провери Whether Your DNS Provider Suppилиts DNSSEC
Вход to the platfилиm wтук вашия DNS is managed.
This may be:
Your домейн registrar, тук is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS услуга
Make sure DNSSEC is suppилиted и enabled tтук.

Step 2: Вземи the DS Recилиd from Your DNS Provider
After enabling DNSSEC, вашия DNS provider should provide DNSSEC infилиmation such as:
Key Tag
Algилиithm
Digest Тип
Digest
DS Recилиd
Please copy the infилиmation exactly as provided.
Even one incилиrect character may cause DNSSEC validation failure.

Step 3: Добави the DS Recилиd in Your NiceNIC Account
Вход to вашия NiceNIC account и go to вашия домейн management page.
Then add the DS recилиd provided by вашия DNS provider.
Ако you are not sure wтук to add it, please contact our suppилиt team и provide the DS recилиd from вашия DNS provider.

Step 4: Wait fили DNSSEC Propagation
After the DS recилиd is added, it may take some time fили the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Статус
After propagation, you may check вашия домейн’s DNSSEC status using a DNSSEC checking tool или by contacting our suppилиt team.
Ако DNSSEC is cилиrectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable или Премахни DNSSEC?
You may need to remove или update DNSSEC recилиds if:

You changed вашия nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recилиd no longer matches the current DNSKEY.
Your website или email has DNS resolution issues after a DNS change.

Impилиtant: Ако вашия домейн has old DS recилиds but the current nameservers no longer provide matching DNSSEC recилиds, DNSSEC validation may fail.
In this case, you may need to remove the old DS recилиds first, wait fили propagation, и then re-enable DNSSEC with the cилиrect new recилиds.

Why Does My Домейн Show "DNSSEC Infилиmation Is Currently Unavailable"?
You may see this message:
DNSSEC infилиmation is currently unavailable fили this домейн.
This can happen fили several reasons:

DNSSEC has not been enabled fили this домейн.
Не DS recилиd has been added at the registrar level.
The домейн’s current nameservers do not suppилиt DNSSEC.
The домейн recently changed nameservers.
The DS recилиd does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recилиds cилиrectly.
The registry или DNSSEC query is tempилиarily unavailable.

This message does not always mean вашия домейн is broken.
However, if вашия website или email is not resolving cилиrectly, please contact suppилиt so we can help review the DNSSEC configuration.

What Infилиmation Should I Provide to Suppилиt?
До help us check DNSSEC issues faster, please provide:

Your домейн name
Your current nameservers
Whether you recently changed nameservers
The DS recилиd provided by вашия DNS provider
A screenshot of the DNSSEC setting from вашия DNS provider
Any DNSSEC errили message you received
Whether вашия website или email is currently affected

With this infилиmation, our suppилиt team can check whether the issue is caused by missing DS recилиds, mismatched DNSSEC recилиds, nameserver changes, или registry-side limitations.

Често задавани въпроси За нас DNSSEC

1. Is DNSSEC required fили every домейн?
Не. DNSSEC is not required fили every домейн.
However, it is recommended fили домейнs that need stronger DNS security, especially business websites, email услугаs, login systems, financial услугаs, и customer pилиtals.
Ако you are not sure whether you need DNSSEC, please confirm whether вашия DNS provider suppилиts it и whether you are comfилиtable managing DNSSEC recилиds.

2. Is DNSSEC the same as SSL?
Не.
SSL protects the connection between the user’s browser и вашия website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fили better security, many websites use both SSL и DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recилиds fили me?
In most cases, DNSSEC recилиds are generated by вашия DNS provider, not by the registrar.
NiceNIC can help submit the DS recилиd to the registry when the домейн extension suppилиts DNSSEC.
Ако you use a third-party DNS provider, please enable DNSSEC tтук first и then provide us with the DS recилиd.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, вашия old DNSSEC recилиds may no longer match the new DNS provider’s DNSKEY.
Ако the old DS recилиd remains active at the registry level, DNSSEC validation may fail.
Befилиe или after changing nameservers, you should check whether the DS recилиd needs to be removed или replaced.

5. What happens if the DS recилиd is wrong?
Ако the DS recилиd does not match the DNSKEY published by вашия current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, вашия website, email, или other услугаs may become unreachable fили some users.

6. I do not use DNSSEC. Do I need to do anything?
Ако you do not use DNSSEC и вашия домейн has no DS recилиds, usually no action is needed.
However, if вашия домейн has old DS recилиds from a назадious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errили after I updated the recилиd?
DNSSEC updates may take time to propagate.
Ако you recently added, removed, или changed DS recилиds, please wait fили DNS propagation и check again later.
Ако the issue continues, please contact suppилиt и provide вашия домейн name, current nameservers, и DS recилиd.

8. Can DNSSEC cause my website to stop wилиking?
Да, if DNSSEC is incилиrectly configured.
Common causes include:

Wrong DS recилиd
Old DS recилиd after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recилиds cилиrectly
Изтичаd или invalid DNSSEC signatures

Ако вашия website stops wилиking after DNSSEC changes, please contact suppилиt immediately.

9. Should I remove DNSSEC befилиe changing nameservers?
In many cases, yes.
Ако you are moving to a new DNS provider и you are not sure how to migrate DNSSEC safely, removing the old DS recилиd befилиe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active и DNSSEC is enabled at the new DNS provider, you can add the new DS recилиd again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infилиmation fили the домейн.
Please check:

Whether DNSSEC is enabled
Whether the DS recилиd has been added
Whether the nameservers suppилиt DNSSEC
Whether the DS recилиd matches the DNSKEY
Whether you recently changed nameservers

Ако you are not sure, please contact NiceNIC suppилиt и provide вашия домейн name и DNSSEC details from вашия DNS provider.

How to set up DNSSEC fили a домейн регистрирайed on NiceNIC?

1. Вход to вашия NiceNIC account и navigate to вашия домейн management page. Find the домейн you wish to enable DNSSEC fили и click Управление.

2. In the домейн management section, you should see the DNSSEC button. Кликни on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infилиmation fили DNSSEC configuration (this will typically include DNSSEC key details provided by вашия DNS hosting provider).

4. Once you've entered the infилиmation, click Добави to enable DNSSEC fили the домейн. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recилиd), you'll receive confirmation that DNSSEC has been successfully added to вашия домейн settings.
The DNSSEC status will show as enabled и you'll be able to see the public keys и other details.
With DNSSEC настоящ момент enabled, вашия домейн is better protected against DNS-related attacks.

Вtention: if вашия домейн name was transferred into NiceNIC from another Регистратор, и you hope to disable the DNSSEC назадiously with the old Регистратор, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the домейн transfer process, the DNSSEC settings have been disabled automatically by the old Регистратор, while if it is "DNSSEC: signed", please check the домейн management section at вашия control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Имеservers After a Прехвърляне на домейн?

www.nicenic.com

Статус of Име Сървъри After a Прехвърляне на домейн

After the домейн is transferred, the name servers remain set to those associated to the домейн befилиe transfer.

Ако you had child name servers fили вашия домейн регистрирайed through another Регистратор, you may need to регистрирай them again through вашия Account.

How to Transfer Име Сървъри During a Прехвърляне на домейн?

www.nicenic.com

How to Transfer Име Сървъри During a Прехвърляне на домейн?

Quick Answer

A successful домейн transfer depends on the домейн's eligibility, lock status, authилиization method, registrant access и registry rules. Prepare the домейн befилиe илиdering the transfer, keep the existing DNS active, и monitили the transfer until completion.

Befилиe You Begin

Потвърди the домейн и registrant email are accessible.
Recилиd the current nameservers и DNS recилиds.
Провери the домейн's expiry date, lock status и any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Прехвърляне на домейн Ако you're just transferring the домейн registration, вашия hosting услуга will be unaffected, и tтук will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recилиd of them. Ако you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Вход to вашия account. Select the Имена на домейни tab. Select the домейн that you want to change nameservers fили.

From within the DNS Сървъри section click on Редактиране DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the илиiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Ако you wish to make an immediate change to the nameservers, you may do so with the Регистратор you are transferring from.

How to Verify

Провери the transfer status in NiceNIC, confirm the registrar of recилиd after completion, verify the authилиitative nameservers, и test website и email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The домейн is locked, too new, recently transferred или otherwise restricted by policy.
The EPP/Auth code is missing, expired или copied incилиrectly.
The approval email cannot be received или the registrant data is under verification.
The домейн или related DNS услуга expires while the transfer is pending.

Често задавани въпроси

Does a transfer change my nameservers?

A registrar transfer nилиmally keeps the current nameservers, but you should recилиd и verify them befилиe и after the transfer.

Can I edit the домейн while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock или DNS changes until the transfer completes.

When should I submit a ticket?

Изпрати a ticket when the status is unclear, a TLD uses a special transfer process, или the transfer remains blocked after you cилиrect the stated issue.

Related NiceNIC Guides

How do I verify that my домейн is eligible fили transfer?

www.nicenic.com

How to Провери Whether a Домейн Is Eligible fили Transfer

Quick Answer

Befилиe starting a transfer, confirm that the домейн is active, unlocked, not restricted by a transfer lock или dispute, и eligible under the registry's rules. Make sure you can receive approval messages и obtain the EPP/Auth code when the TLD requires one.

Befилиe You Begin

Потвърди the домейн и registrant email are accessible.
Recилиd the current nameservers и DNS recилиds.
Провери the домейн's expiry date, lock status и any TLD-specific transfer rule.

NiceNIC Instructions

Befилиe purchasing the transfer of any gTLD (e.g.,.COM /.NET /.ИЛИG /.BIZ /.INFO etc.) или new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure вашия домейн meets the following conditions:

Your домейн was регистрирайed или transferred at least 60 days ago;
The домейн is unlocked at the current Регистратор (its WHOIS status should be OK или Active). Also,you need to request an up-to-date Auth/EPPcode fили the домейн at вашия current Регистратор. Ако all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLD домейни (.ES и.UK) have additional transfer requirements и/или exclude some points from the list above.

NOTE: Make sure the домейн status is active, not expired. Ако you wish to transfer an expired домейн to NiceNIC, please contact our Suppилиt Team email suppилиt@nicenic.net fили further assistance.

How to Verify

Troubleshooting

The домейн is locked, too new, recently transferred или otherwise restricted by policy.
The EPP/Auth code is missing, expired или copied incилиrectly.
The approval email cannot be received или the registrant data is under verification.
The домейн или related DNS услуга expires while the transfer is pending.

Често задавани въпроси

Does a transfer change my nameservers?

A registrar transfer nилиmally keeps the current nameservers, but you should recилиd и verify them befилиe и after the transfer.

Can I edit the домейн while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock или DNS changes until the transfer completes.

When should I submit a ticket?

Изпрати a ticket when the status is unclear, a TLD uses a special transfer process, или the transfer remains blocked after you cилиrect the stated issue.

Related NiceNIC Guides

How to transfer several домейнs to NiceNIC in bulk?

www.nicenic.com

How to transfer several домейнs to NiceNIC in bulk?

Befилиe submitting a transfer request with NiceNIC, make sure вашия домейнs are prepared fили transfer through вашия current registrar. This is generally done by removing transfer locks и getting the necessary Auth codes.

Befилиe You Begin

- Потвърди the домейн и registrant email are accessible.
- Recилиd the current nameservers и DNS recилиds.
- Провери the домейн's expiry date, lock status и any TLD-specific transfer rule.

Learn how to prepare домейнs fили transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer вашия домейнs:

Неte: Each домейн has a unique Auth code и has to be unlocked fили transfer separately on the current registrar side.

Вход to вашия NiceNIC account.
Отиди на the Transfer to Us page.
Кликни on Bulk options.

Enter the домейн names и the Auth codes;

Неte: Enter each домейн и its Auth code in a new line. The Auth code has to be separated from the домейн name by a comma и one space.

Кликни on Start Transfer at the bottom of the page.

Double-check the домейн names и add them to Cart. До do this, you can use the Добави all to cart button fили convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fили most домейнs. Once the transfer of вашия домейнs is completed you will receive the notifications on вашия NiceNIC Primary Имейл адрес, и the домейнs will become manageable in вашия Домейн List.

Неte: Due to technical reasons, it is only possible to submit the transfer fили up to 500 домейн names at once. Ако you need to transfer mилиe than 10 домейнs, you can either submit several Масов трансфер илиders или contact our Suppилиt Team fили assistance.

How to Провери the Статус of Your Прехвърляне на домейн

After initiating a домейн transfer to Nicenic, you can monitили its progress directly in вашия account. This helps you kнастоящ момент when the transfer is expected to complete without needing to contact suppилиt repeatedly.

Steps to View Transfer Статус:

1. Вход to вашия NiceNIC account. Отиди на "My Products > Имена на домейни".
In the Статус column, you will see вашия домейн listed as:

Pending Transfer: the transfer has been submitted и is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infилиmation icon (i) напред to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF и How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stиs fили Sender Policy Framewилиk. SPF is an email authentication stиard used to назадent email fraud и spam. It ensures the authenticity и reliability of email by verifying that the sender's домейн name matches the source IP address of the email. SPF recилиds are stилиed in the DNS recилиd of the домейн name и contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's домейн name has an SPF recилиd и verifies whether the IP address of the sending server is in the allowed list. Ако the verification fails, the recipient may mark the email as spam или refuse to receive it. Using SPF can help improve the delivery rate и reliability of emails и reduce the amount of spam. В the same time, it can also enhance the security of the email system и назадent hackers и fraudsters from using fилиged домейн names to send emails.

2. How to set up SPF fили cилиpилиate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of вашия cилиpилиate mailbox: These addresses will be added to the SPF recилиd. 2. Вход to the DNS management console of вашия cилиpилиate mailbox: Usually provided by вашия домейн name registrar или hosting provider

2. Създай или edit a TXT recилиd: In the DNS console, find the TXT recилиd или similar option

3. Enter the SPF recилиd: The fилиmat of the SPF recилиd is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wтук:

"v=spf1": specifies the SPF version

"a" или "mx": indicates that the server is allowed to be verified by the A recилиd или MX recилиd

"ip4": lists the IP addresses that are allowed to send mail

"mail.cилиemail.coremail": replaced with the домейн name of вашия cилиpилиate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved cилиrectly

3. How to set various types of SPF?

1) Make SPF recилиd with домейн name a recилиd (take cилиemail.cn as an example)

v=spf1 a:cилиemail.cn2 -all

2) Make SPF recилиd with домейн name mx recилиd

v=spf1 mx -all

3) Make SPF recилиd with домейн name ptr recилиd

v=spf1 ptr -all

4) Make SPF recилиd with expилиt IP и IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recилиds of other домейн names (take spf.icилиemail.net as an example)

v=spf1 include:spf.icилиemail.net

Неte: The above recилиds can be used in combination, but only one pair of recилиds starting with v=spf1 и ending with -all can appear in the entire txt. Fили example: v=spf1 mx ip4:106.52.172.248 include:spf.icилиemail.net -all

Related NiceNIC Guides

How to verify certificate installation cилиrectly

www.nicenic.com

How do I check my certificate was installed cилиrectly?

До be sure that the certificate has been installed cилиrectly и wилиking properly, as well as that вашия customers are certain a secured connection is enabled и it covers data transmission through вашия website, you have the following indicatилиs:

A padlock/tune icon available in the URL bar.
Не errили messages/ warnings occurred when connecting through https://вашиядомейн.tld.
A Site Seal provided by the Certificate Authилиity installed и visible.

Неte : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nилиm, not the exception, и no longer serve as a trust indicatили. As such, the tune icon itself will not be a trust indicatили but will provide detailed infилиmation about a website's connection и settings. So moving fилиward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate и Download an SSL сертификат

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befилиe You Begin

Identify every hostname the certificate must cover.
Потвърди that you control DNS или the required validation channel.
Generate и securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after купи. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage вашия certificate. Купи It Start by purchasing the appropriate SSL certificate fили вашия requirements. Select one of the categилиies mentioned above. Activate It You can instantly activate вашия SSL certificate after купи through the Account Panel (или later, if you prefer.) During the activation process, the домейн name и CSR code will be assigned.

Install It You will receive instructions on how to install вашия SSL certificate once it has been validated и issued. Моля, свържете се с нас чрез "Отворете билет за поддръжка" to ask fили assistance in installing SSL certificate. Управление It Through вашия Account Panel, you can manage вашия SSL certificates, including renewal и reissuance.

How to Verify

Troubleshooting

DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate или CSR.
The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befилиe You Begin

Identify every hostname the certificate must cover.
Потвърди that you control DNS или the required validation channel.
Generate и securely retain the private key when a CSR is required.

Key Подробности

What is an SSL certificate и what is it used fили?

Introduction SSL certificates are used to create an encrypted channel between the client и the server. Transmission of such data as credit card details, account login infилиmation, any other sensitive infилиmation should be encrypted to назадent eavesdropping. With an SSL certificate, data is encrypted priили to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infилиmation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on вашия website would increase вашия ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infилиmation about the entity the certificate was issued fили, public key required fили encryption и digital signature verification, и digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authилиity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Типs of SSL certificates SSL certificates can be divided into 3 validation groups: Домейн Validation Сертификати Requires a certificate applicant to prove his/her control over the домейн name only. The issued certificate contains a домейн name that was supplied to the Certification Authилиity within the certificate request. Organization Validation Сертификати Requires a certificate applicant to prove that his/her company is a регистрирайed и legally accountable business, и to pass домейн validation. The issued certificate contains a домейн и company name of the certificate applicant.

Разширена Validation Сертификати Includes validation requirements of two validation types mentioned above и additional requirements. The issued certificate contains a домейн и company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate или CSR.
The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL сертификат

Quick Answer

Befилиe You Begin

Identify every hostname the certificate must cover.
Потвърди that you control DNS или the required validation channel.
Generate и securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfилиmed by the hosting company that provides услугаs fили the домейн. However, you may also choose install an SSL certificate вашияself. Select вашия server type from the list below to find detailed instructions fили installation. The SSL on вашия домейн name was activated, please find и add the DNS recилиds to complete the verification befилиe you can download the certificate files through вашия control panel: Моят акаунт > Моите продукти > SSL Сертификати > Детайли >….

After you complete the DNS-recилиd validation, you can download the certificate files by the same approach. Installing SSL Certificate Неtes Ако you host вашия домейн name with NiceNIC, simply provide us with вашия certificate и we'll be happy to install it fили you. Please note that on all NiceNIC, Споделен хостинг servers, a special NiceNIC, SSL plugin installs a 1-година free PositiveSSL certificate automatically on the newly added subдомейн или add-on. It wилиks the same way fили the main домейн in the newly купиd hosting account.

The plugin can also be used fили manual installation (in a few clicks) of PositiveSSL и EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install вашия SSL certificate on a shared IP address using the Име на сървъра Indication (SNI) protocol extension available in вашия cPanel. You can learn mилиe about the differences between a dedicated IPи SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate или CSR.
The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authилиity when you купи an SSL certificate. You have to finish the renewal process starting thirty days befилиe the expiration date, but befилиe the actual expiry date. We will send you an email reminder during the renewal прозорец if you choose NiceNIC.NET as вашия SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL сертификат

Quick Answer

Befилиe You Begin

Identify every hostname the certificate must cover.
Потвърди that you control DNS или the required validation channel.
Generate и securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue вашия SSL encryption certificate if you switch hosting providers, think вашия CSR/RSA pair has been compromised, или change the домейн name или домейнs that the SSL was issued fили. Reissues may also be necessary if the certificate's contact infилиmation changes. You have to generate a new CSR/RSA pair и save вашия RSA fили later installation in илиder to start the process. Make sure you stилиe вашия RSA fили use in the following installation steps. Usually, the user can hиle this, but вашия hosting company might be able to help. Reissuing вашия SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate или CSR.
The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befилиe You Begin

Вход to the cилиrect NiceNIC account.
Identify the exact домейн или product affected.
Recилиd current settings befилиe making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code и an essential part of the SSL activation process. It contains infилиmation about the website name и the company контактна информация. Fили many reasons, the code should be created on the hosting server end. Fили some servers, it is the obligatилиy condition. CSR generation instructions You can generate a Certificate Signing Request code вашияself, e.g. if you manage the hosting server on вашия own или if this is the best option fили вашия server type/hosting plan. In this case, select вашия web server from the list below и follow the instructions.

How to Verify

Потвърди that the requested setting или илиder appears in the NiceNIC account, then test the dependent website, email, DNS или product function from a separate browser session или netwилиk.

Troubleshooting

The change was made in the wrong account или on the wrong product.
The panel saved the request but the downstream registry или услуга is still processing it.
A dependent DNS, email, browser cache или security setting still uses the old value.
The suppилиt ticket does not include the affected item, errили message и time of failure.

Често задавани въпроси

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nилиmal process is described тук, but account status, product state и registry или provider rules can change the available action.

How can I avoid delays?

Use accurate infилиmation, keep the account email accessible, save current settings, и include the exact product, time и errили message in any suppилиt request.

When should I submit a ticket?

Изпрати a ticket when the required control is unavailable, the status remains pending after the stated checks, или the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate и When Should You Use One?

An SSL certificate binds a public key to one или mилиe hostnames и enables authenticated, encrypted HTTPS connections.

What an SSL сертификат Provides

Encryption fили data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Неt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the илиganization is trustwилиthy

Use It Cилиrectly

Issue the certificate fили the exact hostname, protect the private key, install the full chain, redirect users to HTTPS и renew или replace the certificate befилиe expiration.

Често задавани въпроси

How do I kнастоящ момент the change wилиked?

Провери the current status in вашия NiceNIC account, then test the услуга that depends on the SSL certificate. Do not rely only on the absence of an errили message.

When should I contact NiceNIC Suppилиt?

Изпрати a ticket when the required control is unavailable, the status remains pending after the checks in this guide, или the issue depends on an account-specific илиder или registry decision.

Related NiceNIC Guides

Ако the issue continues after you complete these checks, submit a NiceNIC suppилиt ticket. Include the affected домейн или product, the exact errили message, the time of the issue и the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL сертификат

Quick Answer

Befилиe You Begin

・ Identify every hostname the certificate must cover.

・ Потвърди that you control DNS или the required validation channel.

・ Generate и securely retain the private key when a CSR is required.

Key Подробности

Why would I need to reissue my certificate? An SSL reissue is done to keep вашия site secure и private if it is moved, или some infилиmation on вашия SSL was changed. The reissue allows you to get a brи-new certificate code. The most typical reasons fили certificate reissuance are: The existing certificate cannot be installed on the server.

Fили example, if the Private key (RSA Key) is lost/deleted или a "modulus mismatch" errили appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the илиganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of вашия SSL if you купиd it fили 2-5 години.

How to Verify

Troubleshooting

・ DNS validation recилиds are missing, incилиrect или added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate или CSR.

・ The server is missing an intermediate certificate или is still presenting the old certificate.

Често задавани въпроси

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key и the certificate remains valid. Reissue it when the key, CSR или certificate details must change.

Why does the browser still show the old certificate?

The server или load balancer may still present the old certificate, another virtual host may be selected, или an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Изпрати a ticket when validation remains pending after the published recилиds are visible, или when the NiceNIC илиder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate и Download an SSL сертификат

- How to verify certificate installation cилиrectly

- How to choose an SSL certificate

Ако the issue continues after you complete the checks above, submit a NiceNIC suppилиt ticket with the affected домейн или product, the exact errили message, the time of the issue и the troubleshooting already completed.

How to Activate и Download an SSL сертификат

www.nicenic.com

How to Activate и Download an SSL сертификат

Thank you fили purchasing SSL with NiceNIC.

How to activate и download SSL certificate SSL installation is настоящ момент even easier with our SSL installation услуга.

After the SSL certificate on вашия домейн name was activated, please find и add the DNS recилиds to complete the verification:

Моят акаунт > Моите продукти > SSL сертификати > Детайли > ....

This step requires extra care:

Fill each piece of infилиmation in the DNS Authentication Infилиmation shown below into its cилиresponding DNS recилиd one by one.

After you complete the DNS recилиd's verification, you can download the SSL files by the same approach:

Моят акаунт > Моите продукти > SSL сертификати > Детайли > Download certificate & Download private key

Still have problems?

- Ако вашия домейн, server, или certificate details have changed, see Why You May Need to Reissue an SSL сертификат.

- Ако the current certificate cannot be used, follow How to Reissue an SSL сертификат.

- До назадent certificate expiration, read How to Поднови an SSL сертификат.

Ако they didn't solve вашия issues, you can contact us тук.

Common DNS Recилиd Типs: A, AAAA, CNAME, MX и TXT

www.nicenic.com

Common DNS Recилиd Типs: A, AAAA, CNAME, MXи TXT

TXT recилиds publish verification и email-authentication policies. SPF, DKIMи DMARC serve different purposes и should be added exactly as supplied by the email provider.

What Each Recилиd Does

SPF lists systems allowed to send mail fили the домейн.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hиle mail that fails alignment checks и wтук to send repилиts.

Добави the Recилиds

Потвърди the домейн uses NiceNIC nameservers.
Отворен Моите продукти > Домейн > DNS Recилиds.
Добави the TXT host и value supplied by the email provider.
Fили DKIM, use the selectили host exactly as provided.
Fили DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recилиds и query them publicly.

Impилиtant SPF Rule

Publish one SPF policy per hostname. Ако multiple услугаs send mail, combine their mechanisms into one recилиd instead of creating several v=spf1 recилиds.

Често задавани въпроси

How do I kнастоящ момент the change wилиked?

Провери the current status in вашия NiceNIC account, then test the услуга that depends on the email-authentication recилиds. Do not rely only on the absence of an errили message.

When should I contact NiceNIC Suppилиt?

Related NiceNIC Guides

Why need SSL сертификати

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client и server, authenticates the hostname и enables trusted HTTPS when it is cилиrectly issued и installed.

What an SSL сертификат Provides

Encryption fили data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Неt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the илиganization is trustwилиthy

Use It Cилиrectly

Issue the certificate fили the exact hostname, protect the private key, install the full chain, redirect users to HTTPS и renew или replace the certificate befилиe expiration.

Често задавани въпроси

How do I kнастоящ момент the change wилиked?

Провери the current status in вашия NiceNIC account, then test the услуга that depends on the SSL certificate. Do not rely only on the absence of an errили message.

When should I contact NiceNIC Suppилиt?

Related NiceNIC Guides

How to Connect to вашия Имейл Client?

www.nicenic.com

How to Connect an Имейл Client to NiceNIC Бизнес имейл

Quick Answer

Потвърди that the mailbox is active, the домейн uses the required MX и authentication recилиds, и the email client uses the cилиrect server names, pилиts, encryption и full email address. Test both inbound и outbound mail after every change.

Befилиe You Begin
- Потвърди the Бизнес имейл илиder и mailbox are active.
- Провери who manages DNS fили the домейн.
- Keep the full email address, passwилиd и required mail-server settings available.

1. Unable to connect via Имейл client via IMAP или SMTP:

When adding an email address in вашия Имейл client, i.e. iPhone, please firstly ensure you would fill in "c3.icилиemail.net" fили both the SMTP и IMAP email server. And secondly, please generate a passwилиd fили the Имейл client separately by the following way:

Вход to вашия email account via "https://c3.icилиemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Парола".

2. How to set the general configuration when using Outlook, Foxmail или other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pилиt	Default pилиt Encryption pилиt (SSL)
SMTP	accилиding to the actual address	25	465
POP	accилиding to the actual address	110	995
IMAP	accилиding to the actual address	143	993
PUSH	accилиding to the actual address	80	443

Related NiceNIC Guides