耐思尼克客户支持中心

HTTPS & SSL Guide fo .boo, .day, .dev, .page, y .rsvp

www.nicenic.com

HTTPS & SSL Guide fo .boo, .day, .dev, .page, y .rsvp

Quick Answer

Choose o manage the certificate based on the hostnames you need to protect, the validation level, the server platfom y whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain y verify the live HTTPS connection befoe relying on the certificate.

Befoe You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS o the required validation channel.
Generate y securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Para ensure the security of tu/tus/su/sus website y protect tu/tus/su/sus visitos, all dominios under.boo,.day,.dev,.page, y.rsvp must use HTTPS. This guide will help you configure SSL/TLS corectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between tu/tus/su/sus website y its visitos. It anteriorents eavesdropping y ensures data integrity.
Obtaining an Certificado SSL NICENIC provides trusted SSL certificates. You can learn moe y comprar/configure a certificate aquí : https://nicenic.com/ssl-certificates/
Installing the Certificado SSL Seguir tu/tus/su/sus web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfoce HTTPS Once tu/tus/su/sus certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links y resources to use HTTPS. Verify that tu/tus/su/sus website is fully accessible via HTTPS.
Keep Certificados Actualizado SSL certificates have expiration dates. Ensure certificates are renewed befoe they expire y check tu/tus/su/sus website regularly to maintain uninterrupted secure connections.

How to Verify

Abrir the HTTPS site from a clean browser session y inspect the certificate subject, SAN hostnames, issuer, validity dates y chain. Test every hostname covered by the certificate y confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

Si the issue continues after you complete the checks above, submit a NiceNIC suppot ticket with the affected dominio o product, the exact erro message, the time of the issue y the troubleshooting already completed.

How to Set Up y Troubleshoot DNSSEC fo Your Dominio

www.nicenic.com

How to Set Up y Troubleshoot DNSSEC fo Your Dominio?

DNSSEC helps protect tu/tus/su/sus dominio’s DNS recods from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the corect source.

En NiceNIC, DNSSEC usually involves two sides:
Your DNS provider o nameserver provider generates the DNSSEC recods.
NiceNIC, as tu/tus/su/sus dominio registrar, helps submit the DS recods to the registry when the TLD suppots DNSSEC.

Si DNSSEC is not configured corectly, tu/tus/su/sus dominio may show DNSSEC erros, o in moe serious cases, some users may not be able to access tu/tus/su/sus website.

What Is DNSSEC?
DNSSEC stys fo Nombre de Dominio System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fo tu/tus/su/sus dominio has not been changed o foged during the lookup process.
Fo example, when someone visits tu/tus/su/sus website, DNS is used to find the corect server IP address. DNSSEC helps make sure that the DNS result is authentic y has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, o email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hyles sensitive user infomation.
You run business email, login systems, payment pages, o customer potals.
You want stronger dominio security.
Your DNS provider suppots DNSSEC.
Your dominio extension suppots DNSSEC.

Si you are not familiar with DNS management, we recommend confirming with tu/tus/su/sus DNS provider befoe enabling DNSSEC.
Incorect DNSSEC settings may affect dominio resolution.

Impotant DNSSEC Plazos
DNSKEY: A DNSKEY recod is generated by tu/tus/su/sus DNS provider. It is used as part of the DNSSEC validation process.
DS Recod: A DS recod connects tu/tus/su/sus dominio’s DNSSEC setup with the parent registry zone. In most cases, tu/tus/su/sus DNS provider gives you the DS recod, y you need to add it through tu/tus/su/sus registrar.
Nombreserver: Your nameservers decide waquí tu/tus/su/sus dominio’s DNS recods are managed. Si you change nameservers, tu/tus/su/sus DNSSEC recods may also need to be updated.

How to Enable DNSSEC fo Your Dominio

Step 1: Verificar Whether Your DNS Provider Suppots DNSSEC
Iniciar sesión to the platfom waquí tu/tus/su/sus DNS is managed.
This may be:
Your dominio registrar, aquí is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS servicio
Make sure DNSSEC is suppoted y enabled taquí .

Step 2: Obtener the DS Recod from Your DNS Provider
After enabling DNSSEC, tu/tus/su/sus DNS provider should provide DNSSEC infomation such as:
Key Tag
Algoithm
Digest Tipo
Digest
DS Recod
Please copy the infomation exactly as provided.
Even one incorect character may cause DNSSEC validation failure.

Step 3: Agregar the DS Recod in Your NiceNIC Account
Iniciar sesión to tu/tus/su/sus NiceNIC account y go to tu/tus/su/sus dominio management page.
Then add the DS recod provided by tu/tus/su/sus DNS provider.
Si you are not sure waquí to add it, please contact our suppot team y provide the DS recod from tu/tus/su/sus DNS provider.

Step 4: Wait fo DNSSEC Propagation
After the DS recod is added, it may take some time fo the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Estado
After propagation, you may check tu/tus/su/sus dominio’s DNSSEC status using a DNSSEC checking tool o by contacting our suppot team.
Si DNSSEC is corectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable o Eliminar DNSSEC?
You may need to remove o update DNSSEC recods if:

You changed tu/tus/su/sus nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recod no longer matches the current DNSKEY.
Your website o email has DNS resolution issues after a DNS change.

Impotant: Si tu/tus/su/sus dominio has old DS recods but the current nameservers no longer provide matching DNSSEC recods, DNSSEC validation may fail.
In this case, you may need to remove the old DS recods first, wait fo propagation, y then re-enable DNSSEC with the corect new recods.

Why Does My Dominio Show "DNSSEC Infomation Is Currently Unavailable"?
You may see this message:
DNSSEC infomation is currently unavailable fo this dominio.
This can happen fo several reasons:

DNSSEC has not been enabled fo this dominio.
No DS recod has been added at the registrar level.
The dominio’s current nameservers do not suppot DNSSEC.
The dominio recently changed nameservers.
The DS recod does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recods corectly.
The registry o DNSSEC query is tempoarily unavailable.

This message does not always mean tu/tus/su/sus dominio is broken.
However, if tu/tus/su/sus website o email is not resolving corectly, please contact suppot so we can help review the DNSSEC configuration.

What Infomation Should I Provide to Suppot?
Para help us check DNSSEC issues faster, please provide:

Your dominio name
Your current nameservers
Whether you recently changed nameservers
The DS recod provided by tu/tus/su/sus DNS provider
A screenshot of the DNSSEC setting from tu/tus/su/sus DNS provider
Any DNSSEC erro message you received
Whether tu/tus/su/sus website o email is currently affected

With this infomation, our suppot team can check whether the issue is caused by missing DS recods, mismatched DNSSEC recods, nameserver changes, o registry-side limitations.

Preguntas Frecuentes Acerca de DNSSEC

1. Is DNSSEC required fo every dominio?
No. DNSSEC is not required fo every dominio.
However, it is recommended fo dominios that need stronger DNS security, especially business websites, email servicios, login systems, financial servicios, y customer potals.
Si you are not sure whether you need DNSSEC, please confirm whether tu/tus/su/sus DNS provider suppots it y whether you are comfotable managing DNSSEC recods.

2. Is DNSSEC the same as SSL?
No.
SSL protects the connection between the user’s browser y tu/tus/su/sus website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fo better security, many websites use both SSL y DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recods fo me?
In most cases, DNSSEC recods are generated by tu/tus/su/sus DNS provider, not by the registrar.
NiceNIC can help submit the DS recod to the registry when the dominio extension suppots DNSSEC.
Si you use a third-party DNS provider, please enable DNSSEC taquí first y then provide us with the DS recod.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, tu/tus/su/sus old DNSSEC recods may no longer match the new DNS provider’s DNSKEY.
Si the old DS recod remains active at the registry level, DNSSEC validation may fail.
Befoe o after changing nameservers, you should check whether the DS recod needs to be removed o replaced.

5. What happens if the DS recod is wrong?
Si the DS recod does not match the DNSKEY published by tu/tus/su/sus current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, tu/tus/su/sus website, email, o other servicios may become unreachable fo some users.

6. I do not use DNSSEC. Do I need to do anything?
Si you do not use DNSSEC y tu/tus/su/sus dominio has no DS recods, usually no action is needed.
However, if tu/tus/su/sus dominio has old DS recods from a anteriorious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an erro after I updated the recod?
DNSSEC updates may take time to propagate.
Si you recently added, removed, o changed DS recods, please wait fo DNS propagation y check again later.
Si the issue continues, please contact suppot y provide tu/tus/su/sus dominio name, current nameservers, y DS recod.

8. Can DNSSEC cause my website to stop woking?
Sí, if DNSSEC is incorectly configured.
Common causes include:

Wrong DS recod
Old DS recod after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recods corectly
Expirard o invalid DNSSEC signatures

Si tu/tus/su/sus website stops woking after DNSSEC changes, please contact suppot immediately.

9. Should I remove DNSSEC befoe changing nameservers?
In many cases, yes.
Si you are moving to a new DNS provider y you are not sure how to migrate DNSSEC safely, removing the old DS recod befoe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active y DNSSEC is enabled at the new DNS provider, you can add the new DS recod again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infomation fo the dominio.
Please check:

Whether DNSSEC is enabled
Whether the DS recod has been added
Whether the nameservers suppot DNSSEC
Whether the DS recod matches the DNSKEY
Whether you recently changed nameservers

Si you are not sure, please contact NiceNIC suppot y provide tu/tus/su/sus dominio name y DNSSEC details from tu/tus/su/sus DNS provider.

How to set up DNSSEC fo a dominio registrared on NiceNIC?

1. Iniciar sesión to tu/tus/su/sus NiceNIC account y navigate to tu/tus/su/sus dominio management page. Find the dominio you wish to enable DNSSEC fo y click Gestionar.

2. In the dominio management section, you should see the DNSSEC button. Hacer clic on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infomation fo DNSSEC configuration (this will typically include DNSSEC key details provided by tu/tus/su/sus DNS hosting provider).

4. Once you've entered the infomation, click Agregar to enable DNSSEC fo the dominio. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recod), you'll receive confirmation that DNSSEC has been successfully added to tu/tus/su/sus dominio settings.
The DNSSEC status will show as enabled y you'll be able to see the public keys y other details.
With DNSSEC ahora enabled, tu/tus/su/sus dominio is better protected against DNS-related attacks.

Entention: if tu/tus/su/sus dominio name was transferred into NiceNIC from another Registrador, y you hope to disable the DNSSEC anterioriously with the old Registrador, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the dominio transfer process, the DNSSEC settings have been disabled automatically by the old Registrador, while if it is "DNSSEC: signed", please check the dominio management section at tu/tus/su/sus control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Nombreservers After a Transferencia de Dominio?

www.nicenic.com

Estado of Nombre Servidores After a Transferencia de Dominio

After the dominio is transferred, the name servers remain set to those associated to the dominio befoe transfer.

Si you had child name servers fo tu/tus/su/sus dominio registrared through another Registrador, you may need to registrar them again through tu/tus/su/sus Account.

How to Transfer Nombre Servidores During a Transferencia de Dominio?

www.nicenic.com

How to Transfer Nombre Servidores During a Transferencia de Dominio?

Quick Answer

A successful dominio transfer depends on the dominio's eligibility, lock status, authoization method, registrant access y registry rules. Prepare the dominio befoe odering the transfer, keep the existing DNS active, y monito the transfer until completion.

Befoe You Begin

Confirmar the dominio y registrant email are accessible.
Recod the current nameservers y DNS recods.
Verificar the dominio's expiry date, lock status y any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Transferencia de Dominio Si you're just transferring the dominio registration, tu/tus/su/sus hosting servicio will be unaffected, y taquí will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recod of them. Si you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Iniciar sesión to tu/tus/su/sus account. Select the Nombres de Dominio tab. Select the dominio that you want to change nameservers fo.

From within the DNS Servidores section click on Editar DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the oiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Si you wish to make an immediate change to the nameservers, you may do so with the Registrador you are transferring from.

How to Verify

Verificar the transfer status in NiceNIC, confirm the registrar of recod after completion, verify the authoitative nameservers, y test website y email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The dominio is locked, too new, recently transferred o otherwise restricted by policy.
The EPP/Auth code is missing, expired o copied incorectly.
The approval email cannot be received o the registrant data is under verification.
The dominio o related DNS servicio expires while the transfer is pending.

Preguntas Frecuentes

Does a transfer change my nameservers?

A registrar transfer nomally keeps the current nameservers, but you should recod y verify them befoe y after the transfer.

Can I edit the dominio while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock o DNS changes until the transfer completes.

When should I submit a ticket?

Enviar a ticket when the status is unclear, a TLD uses a special transfer process, o the transfer remains blocked after you corect the stated issue.

Related NiceNIC Guides

How do I verify that my dominio is eligible fo transfer?

www.nicenic.com

How to Verificar Whether a Dominio Is Eligible fo Transfer

Quick Answer

Befoe starting a transfer, confirm that the dominio is active, unlocked, not restricted by a transfer lock o dispute, y eligible under the registry's rules. Make sure you can receive approval messages y obtain the EPP/Auth code when the TLD requires one.

Befoe You Begin

Confirmar the dominio y registrant email are accessible.
Recod the current nameservers y DNS recods.
Verificar the dominio's expiry date, lock status y any TLD-specific transfer rule.

NiceNIC Instructions

Befoe purchasing the transfer of any gTLD (e.g.,.COM /.NET /.OG /.BIZ /.INFO etc.) o new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure tu/tus/su/sus dominio meets the following conditions:

Your dominio was registrared o transferred at least 60 days ago;
The dominio is unlocked at the current Registrador (its WHOIS status should be OK o Active). Also,you need to request an up-to-date Auth/EPPcode fo the dominio at tu/tus/su/sus current Registrador. Si all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLD (.ES y.UK) have additional transfer requirements y/o exclude some points from the list above.

NOTE: Make sure the dominio status is active, not expired. Si you wish to transfer an expired dominio to NiceNIC, please contact our Suppot Team email suppot@nicenic.net fo further assistance.

How to Verify

Troubleshooting

The dominio is locked, too new, recently transferred o otherwise restricted by policy.
The EPP/Auth code is missing, expired o copied incorectly.
The approval email cannot be received o the registrant data is under verification.
The dominio o related DNS servicio expires while the transfer is pending.

Preguntas Frecuentes

Does a transfer change my nameservers?

A registrar transfer nomally keeps the current nameservers, but you should recod y verify them befoe y after the transfer.

Can I edit the dominio while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock o DNS changes until the transfer completes.

When should I submit a ticket?

Enviar a ticket when the status is unclear, a TLD uses a special transfer process, o the transfer remains blocked after you corect the stated issue.

Related NiceNIC Guides

How to transfer several dominios to NiceNIC in bulk?

www.nicenic.com

How to transfer several dominios to NiceNIC in bulk?

Befoe submitting a transfer request with NiceNIC, make sure tu/tus/su/sus dominios are prepared fo transfer through tu/tus/su/sus current registrar. This is generally done by removing transfer locks y getting the necessary Auth codes.

Befoe You Begin

- Confirmar the dominio y registrant email are accessible.
- Recod the current nameservers y DNS recods.
- Verificar the dominio's expiry date, lock status y any TLD-specific transfer rule.

Learn how to prepare dominios fo transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer tu/tus/su/sus dominios:

Note: Each dominio has a unique Auth code y has to be unlocked fo transfer separately on the current registrar side.

Iniciar sesión to tu/tus/su/sus NiceNIC account.
Ir a the Transfer to Us page.
Hacer clic on Bulk options.

Enter the dominio names y the Auth codes;

Note: Enter each dominio y its Auth code in a new line. The Auth code has to be separated from the dominio name by a comma y one space.

Hacer clic on Start Transfer at the bottom of the page.

Double-check the dominio names y add them to Cart. Para do this, you can use the Agregar all to cart button fo convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fo most dominios. Once the transfer of tu/tus/su/sus dominios is completed you will receive the notifications on tu/tus/su/sus NiceNIC Primary Dirección de correo electrónico, y the dominios will become manageable in tu/tus/su/sus Dominio List.

Note: Due to technical reasons, it is only possible to submit the transfer fo up to 500 dominio names at once. Si you need to transfer moe than 10 dominios, you can either submit several Transferencia Masiva oders o contact our Suppot Team fo assistance.

How to Verificar the Estado of Your Transferencia de Dominio

After initiating a dominio transfer to Nicenic, you can monito its progress directly in tu/tus/su/sus account. This helps you kahora when the transfer is expected to complete without needing to contact suppot repeatedly.

Steps to View Transfer Estado:

1. Iniciar sesión to tu/tus/su/sus NiceNIC account. Ir a "My Products > Nombres de Dominio".
In the Estado column, you will see tu/tus/su/sus dominio listed as:

Pending Transfer: the transfer has been submitted y is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infomation icon (i) siguiente to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF y How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stys fo Sender Policy Framewok. SPF is an email authentication styard used to anteriorent email fraud y spam. It ensures the authenticity y reliability of email by verifying that the sender's dominio name matches the source IP address of the email. SPF recods are stoed in the DNS recod of the dominio name y contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's dominio name has an SPF recod y verifies whether the IP address of the sending server is in the allowed list. Si the verification fails, the recipient may mark the email as spam o refuse to receive it. Using SPF can help improve the delivery rate y reliability of emails y reduce the amount of spam. En the same time, it can also enhance the security of the email system y anteriorent hackers y fraudsters from using foged dominio names to send emails.

2. How to set up SPF fo copoate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of tu/tus/su/sus copoate mailbox: These addresses will be added to the SPF recod. 2. Iniciar sesión to the DNS management console of tu/tus/su/sus copoate mailbox: Usually provided by tu/tus/su/sus dominio name registrar o hosting provider

2. Crear o edit a TXT recod: In the DNS console, find the TXT recod o similar option

3. Enter the SPF recod: The fomat of the SPF recod is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", waquí :

"v=spf1": specifies the SPF version

"a" o "mx": indicates that the server is allowed to be verified by the A recod o MX recod

"ip4": lists the IP addresses that are allowed to send mail

"mail.coemail.cn": replaced with the dominio name of tu/tus/su/sus copoate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved corectly

3. How to set various types of SPF?

1) Make SPF recod with dominio name a recod (take coemail.cn as an example)

v=spf1 a:coemail.cn2 -all

2) Make SPF recod with dominio name mx recod

v=spf1 mx -all

3) Make SPF recod with dominio name ptr recod

v=spf1 ptr -all

4) Make SPF recod with expot IP y IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recods of other dominio names (take spf.icoemail.net as an example)

v=spf1 include:spf.icoemail.net

Note: The above recods can be used in combination, but only one pair of recods starting with v=spf1 y ending with -all can appear in the entire txt. Fo example: v=spf1 mx ip4:106.52.172.248 include:spf.icoemail.net -all

Related NiceNIC Guides

How to verify certificate installation corectly

www.nicenic.com

How do I check my certificate was installed corectly?

Para be sure that the certificate has been installed corectly y woking properly, as well as that tu/tus/su/sus customers are certain a secured connection is enabled y it covers data transmission through tu/tus/su/sus website, you have the following indicatos:

A padlock/tune icon available in the URL bar.
No erro messages/ warnings occurred when connecting through https://tu/tus/su/susdominio.tld.
A Site Seal provided by the Certificate Authoity installed y visible.

Note : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nom, not the exception, y no longer serve as a trust indicato. As such, the tune icon itself will not be a trust indicato but will provide detailed infomation about a website's connection y settings. So moving foward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate y Download an Certificado SSL

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS o the required validation channel.
Generate y securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after comprar. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage tu/tus/su/sus certificate. Comprar It Start by purchasing the appropriate SSL certificate fo tu/tus/su/sus requirements. Select one of the categoies mentioned above. Activate It You can instantly activate tu/tus/su/sus SSL certificate after comprar through the Account Panel (o later, if you prefer.) During the activation process, the dominio name y CSR code will be assigned.

Install It You will receive instructions on how to install tu/tus/su/sus SSL certificate once it has been validated y issued. No dudes en contactarnos a través de "Enviar un Ticket" to ask fo assistance in installing SSL certificate. Gestionar It Through tu/tus/su/sus Account Panel, you can manage tu/tus/su/sus SSL certificates, including renewal y reissuance.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS o the required validation channel.
Generate y securely retain the private key when a CSR is required.

Key Detalles

What is an SSL certificate y what is it used fo?

Introduction SSL certificates are used to create an encrypted channel between the client y the server. Transmission of such data as credit card details, account login infomation, any other sensitive infomation should be encrypted to anteriorent eavesdropping. With an SSL certificate, data is encrypted prio to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infomation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on tu/tus/su/sus website would increase tu/tus/su/sus ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infomation about the entity the certificate was issued fo, public key required fo encryption y digital signature verification, y digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authoity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Tipos of SSL certificates SSL certificates can be divided into 3 validation groups: Dominio Validation Certificados Requires a certificate applicant to prove his/her control over the dominio name only. The issued certificate contains a dominio name that was supplied to the Certification Authoity within the certificate request. Organization Validation Certificados Requires a certificate applicant to prove that his/her company is a registrared y legally accountable business, y to pass dominio validation. The issued certificate contains a dominio y company name of the certificate applicant.

Extendido Validation Certificados Includes validation requirements of two validation types mentioned above y additional requirements. The issued certificate contains a dominio y company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an Certificado SSL

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS o the required validation channel.
Generate y securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfomed by the hosting company that provides servicios fo the dominio. However, you may also choose install an SSL certificate tu/tus/su/susself. Select tu/tus/su/sus server type from the list below to find detailed instructions fo installation. The SSL on tu/tus/su/sus dominio name was activated, please find y add the DNS recods to complete the verification befoe you can download the certificate files through tu/tus/su/sus control panel: Mi Cuenta > Mis Productos > SSL Certificados > Detalle >….

After you complete the DNS-recod validation, you can download the certificate files by the same approach. Installing SSL Certificate Notes Si you host tu/tus/su/sus dominio name with NiceNIC, simply provide us with tu/tus/su/sus certificate y we'll be happy to install it fo you. Please note that on all NiceNIC, Hosting Compartido servers, a special NiceNIC, SSL plugin installs a 1-año free PositiveSSL certificate automatically on the newly added subdominio o add-on. It woks the same way fo the main dominio in the newly comprard hosting account.

The plugin can also be used fo manual installation (in a few clicks) of PositiveSSL y EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install tu/tus/su/sus SSL certificate on a shared IP address using the Nombre del Servidor Indication (SNI) protocol extension available in tu/tus/su/sus cPanel. You can learn moe about the differences between a dedicated IPy SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authoity when you comprar an SSL certificate. You have to finish the renewal process starting thirty days befoe the expiration date, but befoe the actual expiry date. We will send you an email reminder during the renewal ventana if you choose NiceNIC.NET as tu/tus/su/sus SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an Certificado SSL

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS o the required validation channel.
Generate y securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue tu/tus/su/sus SSL encryption certificate if you switch hosting providers, think tu/tus/su/sus CSR/RSA pair has been compromised, o change the dominio name o dominios that the SSL was issued fo. Reissues may also be necessary if the certificate's contact infomation changes. You have to generate a new CSR/RSA pair y save tu/tus/su/sus RSA fo later installation in oder to start the process. Make sure you stoe tu/tus/su/sus RSA fo use in the following installation steps. Usually, the user can hyle this, but tu/tus/su/sus hosting company might be able to help. Reissuing tu/tus/su/sus SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befoe You Begin

Iniciar Sesión to the corect NiceNIC account.
Identify the exact dominio o product affected.
Recod current settings befoe making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code y an essential part of the SSL activation process. It contains infomation about the website name y the company datos de contacto. Fo many reasons, the code should be created on the hosting server end. Fo some servers, it is the obligatoy condition. CSR generation instructions You can generate a Certificate Signing Request code tu/tus/su/susself, e.g. if you manage the hosting server on tu/tus/su/sus own o if this is the best option fo tu/tus/su/sus server type/hosting plan. In this case, select tu/tus/su/sus web server from the list below y follow the instructions.

How to Verify

Confirmar that the requested setting o oder appears in the NiceNIC account, then test the dependent website, email, DNS o product function from a separate browser session o netwok.

Troubleshooting

The change was made in the wrong account o on the wrong product.
The panel saved the request but the downstream registry o servicio is still processing it.
A dependent DNS, email, browser cache o security setting still uses the old value.
The suppot ticket does not include the affected item, erro message y time of failure.

Preguntas Frecuentes

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nomal process is described aquí , but account status, product state y registry o provider rules can change the available action.

How can I avoid delays?

Use accurate infomation, keep the account email accessible, save current settings, y include the exact product, time y erro message in any suppot request.

When should I submit a ticket?

Enviar a ticket when the required control is unavailable, the status remains pending after the stated checks, o the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate y When Should You Use One?

An SSL certificate binds a public key to one o moe hostnames y enables authenticated, encrypted HTTPS connections.

What an Certificado SSL Provides

Encryption fo data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Not Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oganization is trustwothy

Use It Corectly

Issue the certificate fo the exact hostname, protect the private key, install the full chain, redirect users to HTTPS y renew o replace the certificate befoe expiration.

Preguntas Frecuentes

How do I kahora the change woked?

Verificar the current status in tu/tus/su/sus NiceNIC account, then test the servicio that depends on the SSL certificate. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

Si the issue continues after you complete these checks, submit a NiceNIC suppot ticket. Include the affected dominio o product, the exact erro message, the time of the issue y the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an Certificado SSL

Quick Answer

Befoe You Begin

・ Identify every hostname the certificate must cover.

・ Confirmar that you control DNS o the required validation channel.

・ Generate y securely retain the private key when a CSR is required.

Key Detalles

Why would I need to reissue my certificate? An SSL reissue is done to keep tu/tus/su/sus site secure y private if it is moved, o some infomation on tu/tus/su/sus SSL was changed. The reissue allows you to get a bry-new certificate code. The most typical reasons fo certificate reissuance are: The existing certificate cannot be installed on the server.

Fo example, if the Private key (RSA Key) is lost/deleted o a "modulus mismatch" erro appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the oganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of tu/tus/su/sus SSL if you comprard it fo 2-5 años.

How to Verify

Troubleshooting

・ DNS validation recods are missing, incorect o added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate o CSR.

・ The server is missing an intermediate certificate o is still presenting the old certificate.

Preguntas Frecuentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key y the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate y Download an Certificado SSL

- How to verify certificate installation corectly

- How to choose an SSL certificate

Si the issue continues after you complete the checks above, submit a NiceNIC suppot ticket with the affected dominio o product, the exact erro message, the time of the issue y the troubleshooting already completed.

How to Activate y Download an Certificado SSL

www.nicenic.com

How to Activate y Download an Certificado SSL

Thank you fo purchasing SSL with NiceNIC.

How to activate y download SSL certificate SSL installation is ahora even easier with our SSL installation servicio.

After the SSL certificate on tu/tus/su/sus dominio name was activated, please find y add the DNS recods to complete the verification:

Mi Cuenta > Mis Productos > Certificados SSL > Detalle > ....

This step requires extra care:

Fill each piece of infomation in the DNS Authentication Infomation shown below into its coresponding DNS recod one by one.

After you complete the DNS recod's verification, you can download the SSL files by the same approach:

Mi Cuenta > Mis Productos > Certificados SSL > Detalle > Download certificate & Download private key

Still have problems?

- Si tu/tus/su/sus dominio, server, o certificate details have changed, see Why You May Need to Reissue an Certificado SSL.

- Si the current certificate cannot be used, follow How to Reissue an Certificado SSL.

- Para anteriorent certificate expiration, read How to Renovar an Certificado SSL.

Si they didn't solve tu/tus/su/sus issues, you can contact us aquí .

Common DNS Recod Tipos: A, AAAA, CNAME, MX y TXT

www.nicenic.com

Common DNS Recod Tipos: A, AAAA, CNAME, MXy TXT

TXT recods publish verification y email-authentication policies. SPF, DKIMy DMARC serve different purposes y should be added exactly as supplied by the email provider.

What Each Recod Does

SPF lists systems allowed to send mail fo the dominio.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hyle mail that fails alignment checks y waquí to send repots.

Agregar the Recods

Confirmar the dominio uses NiceNIC nameservers.
Abrir Mis Productos > Dominio > DNS Recods.
Agregar the TXT host y value supplied by the email provider.
Fo DKIM, use the selecto host exactly as provided.
Fo DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recods y query them publicly.

Impotant SPF Rule

Publish one SPF policy per hostname. Si multiple servicios send mail, combine their mechanisms into one recod instead of creating several v=spf1 recods.

Preguntas Frecuentes

How do I kahora the change woked?

Verificar the current status in tu/tus/su/sus NiceNIC account, then test the servicio that depends on the email-authentication recods. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

Why need Certificados SSL

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client y server, authenticates the hostname y enables trusted HTTPS when it is corectly issued y installed.

What an Certificado SSL Provides

Encryption fo data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Not Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oganization is trustwothy

Use It Corectly

Issue the certificate fo the exact hostname, protect the private key, install the full chain, redirect users to HTTPS y renew o replace the certificate befoe expiration.

Preguntas Frecuentes

How do I kahora the change woked?

Verificar the current status in tu/tus/su/sus NiceNIC account, then test the servicio that depends on the SSL certificate. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

How to Connect to tu/tus/su/sus Correo Electrónico Client?

www.nicenic.com

How to Connect an Correo Electrónico Client to NiceNIC Correo Empresarial

Quick Answer

Confirmar that the mailbox is active, the dominio uses the required MX y authentication recods, y the email client uses the corect server names, pots, encryption y full email address. Test both inbound y outbound mail after every change.

Befoe You Begin
- Confirmar the Correo Empresarial oder y mailbox are active.
- Verificar who manages DNS fo the dominio.
- Keep the full email address, passwod y required mail-server settings available.

1. Unable to connect via Correo Electrónico client via IMAP o SMTP:

When adding an email address in tu/tus/su/sus Correo Electrónico client, i.e. iPhone, please firstly ensure you would fill in "c3.icoemail.net" fo both the SMTP y IMAP email server. And secondly, please generate a passwod fo the Correo Electrónico client separately by the following way:

Iniciar sesión to tu/tus/su/sus email account via "https://c3.icoemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Contraseña".

2. How to set the general configuration when using Outlook, Foxmail o other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pot	Default pot Encryption pot (SSL)
SMTP	accoding to the actual address	25	465
POP	accoding to the actual address	110	995
IMAP	accoding to the actual address	143	993
PUSH	accoding to the actual address	80	443

Related NiceNIC Guides