耐思尼克客户支持中心

HTTPS & SSL Guide ftai .boo, .day, .dev, .page, ja .rsvp

www.nicenic.com

HTTPS & SSL Guide ftai .boo, .day, .dev, .page, ja .rsvp

Quick Answer

Choose tai manage the certificate based on the hostnames you need to protect, the validation level, the server platftaim ja whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain ja verify the live HTTPS connection beftaie relying on the certificate.

Beftaie You Begin

Identify every hostname the certificate must cover.
Vahvista that you control DNS tai the required validation channel.
Generate ja securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Osta ensure the security of sinun website ja protect sinun visittais, all verkkotunnuss under.boo,.day,.dev,.page, ja.rsvp must use HTTPS. This guide will help you configure SSL/TLS ctairectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between sinun website ja its visittais. It edellinenents eavesdropping ja ensures data integrity.
Obtaining an SSL-sertifikaatti NICENIC provides trusted SSL certificates. You can learn mtaie ja osta/configure a certificate tässä: https://nicenic.com/ssl-certificates/
Installing the SSL-sertifikaatti Seuraa sinun web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enftaice HTTPS Once sinun certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links ja resources to use HTTPS. Verify that sinun website is fully accessible via HTTPS.
Keep Sertifikaatit Päivitetty SSL certificates have expiration dates. Ensure certificates are renewed beftaie they expire ja check sinun website regularly to maintain uninterrupted secure connections.

How to Verify

Avoin the HTTPS site from a clean browser session ja inspect the certificate subject, SAN hostnames, issuer, validity dates ja chain. Test every hostname covered by the certificate ja confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate tai CSR.
The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

Jos the issue continues after you complete the checks above, submit a NiceNIC supptait ticket with the affected verkkotunnus tai product, the exact errtai message, the time of the issue ja the troubleshooting already completed.

How to Set Up ja Troubleshoot DNSSEC ftai Your Verkkotunnus

www.nicenic.com

How to Set Up ja Troubleshoot DNSSEC ftai Your Verkkotunnus?

DNSSEC helps protect sinun verkkotunnus’s DNS rectaids from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the ctairect source.

kohdalla NiceNIC, DNSSEC usually involves two sides:
Your DNS provider tai nameserver provider generates the DNSSEC rectaids.
NiceNIC, as sinun verkkotunnus registrar, helps submit the DS rectaids to the registry when the TLD supptaits DNSSEC.

Jos DNSSEC is not configured ctairectly, sinun verkkotunnus may show DNSSEC errtais, tai in mtaie serious cases, some users may not be able to access sinun website.

What Is DNSSEC?
DNSSEC stjas ftai Verkkotunnus System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer ftai sinun verkkotunnus has not been changed tai ftaiged during the lookup process.
Ftai example, when someone visits sinun website, DNS is used to find the ctairect server IP address. DNSSEC helps make sure that the DNS result is authentic ja has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, tai email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hjales sensitive user inftaimation.
You run business email, login systems, payment pages, tai customer ptaitals.
You want stronger verkkotunnus security.
Your DNS provider supptaits DNSSEC.
Your verkkotunnus extension supptaits DNSSEC.

Jos you are not familiar with DNS management, we recommend confirming with sinun DNS provider beftaie enabling DNSSEC.
Inctairect DNSSEC settings may affect verkkotunnus resolution.

Imptaitant DNSSEC Kestos
DNSKEY: A DNSKEY rectaid is generated by sinun DNS provider. It is used as part of the DNSSEC validation process.
DS Rectaid: A DS rectaid connects sinun verkkotunnus’s DNSSEC setup with the parent registry zone. In most cases, sinun DNS provider gives you the DS rectaid, ja you need to add it through sinun registrar.
Nimiserver: Your nameservers decide wtässä sinun verkkotunnus’s DNS rectaids are managed. Jos you change nameservers, sinun DNSSEC rectaids may also need to be updated.

How to Enable DNSSEC ftai Your Verkkotunnus

Step 1: Tarkista Whether Your DNS Provider Supptaits DNSSEC
Kirjaudu to the platftaim wtässä sinun DNS is managed.
This may be:
Your verkkotunnus registrar, tässä is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS palvelu
Make sure DNSSEC is supptaited ja enabled ttässä.

Step 2: Hanki the DS Rectaid from Your DNS Provider
After enabling DNSSEC, sinun DNS provider should provide DNSSEC inftaimation such as:
Key Tag
Algtaiithm
Digest Tyyppi
Digest
DS Rectaid
Please copy the inftaimation exactly as provided.
Even one inctairect character may cause DNSSEC validation failure.

Step 3: Lisää the DS Rectaid in Your NiceNIC Account
Kirjaudu to sinun NiceNIC account ja go to sinun verkkotunnus management page.
Then add the DS rectaid provided by sinun DNS provider.
Jos you are not sure wtässä to add it, please contact our supptait team ja provide the DS rectaid from sinun DNS provider.

Step 4: Wait ftai DNSSEC Propagation
After the DS rectaid is added, it may take some time ftai the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Tila
After propagation, you may check sinun verkkotunnus’s DNSSEC status using a DNSSEC checking tool tai by contacting our supptait team.
Jos DNSSEC is ctairectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable tai Poista DNSSEC?
You may need to remove tai update DNSSEC rectaids if:

You changed sinun nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS rectaid no longer matches the current DNSKEY.
Your website tai email has DNS resolution issues after a DNS change.

Imptaitant: Jos sinun verkkotunnus has old DS rectaids but the current nameservers no longer provide matching DNSSEC rectaids, DNSSEC validation may fail.
In this case, you may need to remove the old DS rectaids first, wait ftai propagation, ja then re-enable DNSSEC with the ctairect new rectaids.

Why Does My Verkkotunnus Show "DNSSEC Inftaimation Is Currently Unavailable"?
You may see this message:
DNSSEC inftaimation is currently unavailable ftai this verkkotunnus.
This can happen ftai several reasons:

DNSSEC has not been enabled ftai this verkkotunnus.
Ei DS rectaid has been added at the registrar level.
The verkkotunnus’s current nameservers do not supptait DNSSEC.
The verkkotunnus recently changed nameservers.
The DS rectaid does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC rectaids ctairectly.
The registry tai DNSSEC query is temptaiarily unavailable.

This message does not always mean sinun verkkotunnus is broken.
However, if sinun website tai email is not resolving ctairectly, please contact supptait so we can help review the DNSSEC configuration.

What Inftaimation Should I Provide to Supptait?
Osta help us check DNSSEC issues faster, please provide:

Your verkkotunnus name
Your current nameservers
Whether you recently changed nameservers
The DS rectaid provided by sinun DNS provider
A screenshot of the DNSSEC setting from sinun DNS provider
Any DNSSEC errtai message you received
Whether sinun website tai email is currently affected

With this inftaimation, our supptait team can check whether the issue is caused by missing DS rectaids, mismatched DNSSEC rectaids, nameserver changes, tai registry-side limitations.

Usein kysytyt kysymykset Tietoja DNSSEC

1. Is DNSSEC required ftai every verkkotunnus?
Ei. DNSSEC is not required ftai every verkkotunnus.
However, it is recommended ftai verkkotunnuss that need stronger DNS security, especially business websites, email palvelus, login systems, financial palvelus, ja customer ptaitals.
Jos you are not sure whether you need DNSSEC, please confirm whether sinun DNS provider supptaits it ja whether you are comftaitable managing DNSSEC rectaids.

2. Is DNSSEC the same as SSL?
Ei.
SSL protects the connection between the user’s browser ja sinun website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Ftai better security, many websites use both SSL ja DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC rectaids ftai me?
In most cases, DNSSEC rectaids are generated by sinun DNS provider, not by the registrar.
NiceNIC can help submit the DS rectaid to the registry when the verkkotunnus extension supptaits DNSSEC.
Jos you use a third-party DNS provider, please enable DNSSEC ttässä first ja then provide us with the DS rectaid.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, sinun old DNSSEC rectaids may no longer match the new DNS provider’s DNSKEY.
Jos the old DS rectaid remains active at the registry level, DNSSEC validation may fail.
Beftaie tai after changing nameservers, you should check whether the DS rectaid needs to be removed tai replaced.

5. What happens if the DS rectaid is wrong?
Jos the DS rectaid does not match the DNSKEY published by sinun current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, sinun website, email, tai other palvelus may become unreachable ftai some users.

6. I do not use DNSSEC. Do I need to do anything?
Jos you do not use DNSSEC ja sinun verkkotunnus has no DS rectaids, usually no action is needed.
However, if sinun verkkotunnus has old DS rectaids from a edellinenious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errtai after I updated the rectaid?
DNSSEC updates may take time to propagate.
Jos you recently added, removed, tai changed DS rectaids, please wait ftai DNS propagation ja check again later.
Jos the issue continues, please contact supptait ja provide sinun verkkotunnus name, current nameservers, ja DS rectaid.

8. Can DNSSEC cause my website to stop wtaiking?
Kyllä, if DNSSEC is inctairectly configured.
Common causes include:

Wrong DS rectaid
Old DS rectaid after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC rectaids ctairectly
Vanheneed tai invalid DNSSEC signatures

Jos sinun website stops wtaiking after DNSSEC changes, please contact supptait immediately.

9. Should I remove DNSSEC beftaie changing nameservers?
In many cases, yes.
Jos you are moving to a new DNS provider ja you are not sure how to migrate DNSSEC safely, removing the old DS rectaid beftaie changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active ja DNSSEC is enabled at the new DNS provider, you can add the new DS rectaid again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC inftaimation ftai the verkkotunnus.
Please check:

Whether DNSSEC is enabled
Whether the DS rectaid has been added
Whether the nameservers supptait DNSSEC
Whether the DS rectaid matches the DNSKEY
Whether you recently changed nameservers

Jos you are not sure, please contact NiceNIC supptait ja provide sinun verkkotunnus name ja DNSSEC details from sinun DNS provider.

How to set up DNSSEC ftai a verkkotunnus rekisteröied on NiceNIC?

1. Kirjaudu to sinun NiceNIC account ja navigate to sinun verkkotunnus management page. Find the verkkotunnus you wish to enable DNSSEC ftai ja click Hallinnoi.

2. In the verkkotunnus management section, you should see the DNSSEC button. Klikkaa on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required inftaimation ftai DNSSEC configuration (this will typically include DNSSEC key details provided by sinun DNS hosting provider).

4. Once you've entered the inftaimation, click Lisää to enable DNSSEC ftai the verkkotunnus. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS rectaid), you'll receive confirmation that DNSSEC has been successfully added to sinun verkkotunnus settings.
The DNSSEC status will show as enabled ja you'll be able to see the public keys ja other details.
With DNSSEC nyt enabled, sinun verkkotunnus is better protected against DNS-related attacks.

kohdallatention: if sinun verkkotunnus name was transferred into NiceNIC from another Rekisterinpitäjä, ja you hope to disable the DNSSEC edellineniously with the old Rekisterinpitäjä, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the verkkotunnus transfer process, the DNSSEC settings have been disabled automatically by the old Rekisterinpitäjä, while if it is "DNSSEC: signed", please check the verkkotunnus management section at sinun control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Nimiservers After a Domainin siirto?

www.nicenic.com

Tila of Nimi Palvelimet After a Domainin siirto

After the verkkotunnus is transferred, the name servers remain set to those associated to the verkkotunnus beftaie transfer.

Jos you had child name servers ftai sinun verkkotunnus rekisteröied through another Rekisterinpitäjä, you may need to rekisteröi them again through sinun Account.

How to Transfer Nimi Palvelimet During a Domainin siirto?

www.nicenic.com

How to Transfer Nimi Palvelimet During a Domainin siirto?

Quick Answer

A successful verkkotunnus transfer depends on the verkkotunnus's eligibility, lock status, authtaiization method, registrant access ja registry rules. Prepare the verkkotunnus beftaie taidering the transfer, keep the existing DNS active, ja monittai the transfer until completion.

Beftaie You Begin

Vahvista the verkkotunnus ja registrant email are accessible.
Rectaid the current nameservers ja DNS rectaids.
Tarkista the verkkotunnus's expiry date, lock status ja any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Domainin siirto Jos you're just transferring the verkkotunnus registration, sinun hosting palvelu will be unaffected, ja ttässä will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a rectaid of them. Jos you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Kirjaudu to sinun account. Select the Verkkotunnukset tab. Select the verkkotunnus that you want to change nameservers ftai.

From within the DNS Palvelimet section click on Muokkaa DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the taiiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Jos you wish to make an immediate change to the nameservers, you may do so with the Rekisterinpitäjä you are transferring from.

How to Verify

Tarkista the transfer status in NiceNIC, confirm the registrar of rectaid after completion, verify the authtaiitative nameservers, ja test website ja email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The verkkotunnus is locked, too new, recently transferred tai otherwise restricted by policy.
The EPP/Auth code is missing, expired tai copied inctairectly.
The approval email cannot be received tai the registrant data is under verification.
The verkkotunnus tai related DNS palvelu expires while the transfer is pending.

Usein kysytyt kysymykset

Does a transfer change my nameservers?

A registrar transfer ntaimally keeps the current nameservers, but you should rectaid ja verify them beftaie ja after the transfer.

Can I edit the verkkotunnus while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock tai DNS changes until the transfer completes.

When should I submit a ticket?

Lähetä a ticket when the status is unclear, a TLD uses a special transfer process, tai the transfer remains blocked after you ctairect the stated issue.

Related NiceNIC Guides

How do I verify that my verkkotunnus is eligible ftai transfer?

www.nicenic.com

How to Tarkista Whether a Verkkotunnus Is Eligible ftai Transfer

Quick Answer

Beftaie starting a transfer, confirm that the verkkotunnus is active, unlocked, not restricted by a transfer lock tai dispute, ja eligible under the registry's rules. Make sure you can receive approval messages ja obtain the EPP/Auth code when the TLD requires one.

Beftaie You Begin

Vahvista the verkkotunnus ja registrant email are accessible.
Rectaid the current nameservers ja DNS rectaids.
Tarkista the verkkotunnus's expiry date, lock status ja any TLD-specific transfer rule.

NiceNIC Instructions

Beftaie purchasing the transfer of any gTLD (e.g.,.COM /.NET /.TAIG /.BIZ /.INFO etc.) tai new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure sinun verkkotunnus meets the following conditions:

Your verkkotunnus was rekisteröied tai transferred at least 60 days ago;
The verkkotunnus is unlocked at the current Rekisterinpitäjä (its WHOIS status should be OK tai Active). Also,you need to request an up-to-date Auth/EPPcode ftai the verkkotunnus at sinun current Rekisterinpitäjä. Jos all criteria are met, you should be able to complete the transfer successfully. Still, some alueen pääte (ccTLD) (.ES ja.UK) have additional transfer requirements ja/tai exclude some points from the list above.

NOTE: Make sure the verkkotunnus status is active, not expired. Jos you wish to transfer an expired verkkotunnus to NiceNIC, please contact our Supptait Team email supptait@nicenic.net ftai further assistance.

How to Verify

Troubleshooting

The verkkotunnus is locked, too new, recently transferred tai otherwise restricted by policy.
The EPP/Auth code is missing, expired tai copied inctairectly.
The approval email cannot be received tai the registrant data is under verification.
The verkkotunnus tai related DNS palvelu expires while the transfer is pending.

Usein kysytyt kysymykset

Does a transfer change my nameservers?

A registrar transfer ntaimally keeps the current nameservers, but you should rectaid ja verify them beftaie ja after the transfer.

Can I edit the verkkotunnus while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock tai DNS changes until the transfer completes.

When should I submit a ticket?

Lähetä a ticket when the status is unclear, a TLD uses a special transfer process, tai the transfer remains blocked after you ctairect the stated issue.

Related NiceNIC Guides

How to transfer several verkkotunnuss to NiceNIC in bulk?

www.nicenic.com

How to transfer several verkkotunnuss to NiceNIC in bulk?

Beftaie submitting a transfer request with NiceNIC, make sure sinun verkkotunnuss are prepared ftai transfer through sinun current registrar. This is generally done by removing transfer locks ja getting the necessary Auth codes.

Beftaie You Begin

- Vahvista the verkkotunnus ja registrant email are accessible.
- Rectaid the current nameservers ja DNS rectaids.
- Tarkista the verkkotunnus's expiry date, lock status ja any TLD-specific transfer rule.

Learn how to prepare verkkotunnuss ftai transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer sinun verkkotunnuss:

Eite: Each verkkotunnus has a unique Auth code ja has to be unlocked ftai transfer separately on the current registrar side.

Kirjaudu to sinun NiceNIC account.
Siirry the Transfer to Us page.
Klikkaa on Bulk options.

Enter the verkkotunnus names ja the Auth codes;

Eite: Enter each verkkotunnus ja its Auth code in a new line. The Auth code has to be separated from the verkkotunnus name by a comma ja one space.

Klikkaa on Start Transfer at the bottom of the page.

Double-check the verkkotunnus names ja add them to Cart. Osta do this, you can use the Lisää all to cart button ftai convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days ftai most verkkotunnuss. Once the transfer of sinun verkkotunnuss is completed you will receive the notifications on sinun NiceNIC Primary Sähköpostiosoite, ja the verkkotunnuss will become manageable in sinun Verkkotunnus List.

Eite: Due to technical reasons, it is only possible to submit the transfer ftai up to 500 verkkotunnus names at once. Jos you need to transfer mtaie than 10 verkkotunnuss, you can either submit several Massasiirto taiders tai contact our Supptait Team ftai assistance.

How to Tarkista the Tila of Your Domainin siirto

After initiating a verkkotunnus transfer to Nicenic, you can monittai its progress directly in sinun account. This helps you knyt when the transfer is expected to complete without needing to contact supptait repeatedly.

Steps to View Transfer Tila:

1. Kirjaudu to sinun NiceNIC account. Siirry "My Products > Verkkotunnukset".
In the Tila column, you will see sinun verkkotunnus listed as:

Pending Transfer: the transfer has been submitted ja is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the inftaimation icon (i) seuraava to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF ja How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stjas ftai Sender Policy Framewtaik. SPF is an email authentication stjaard used to edellinenent email fraud ja spam. It ensures the authenticity ja reliability of email by verifying that the sender's verkkotunnus name matches the source IP address of the email. SPF rectaids are sttaied in the DNS rectaid of the verkkotunnus name ja contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's verkkotunnus name has an SPF rectaid ja verifies whether the IP address of the sending server is in the allowed list. Jos the verification fails, the recipient may mark the email as spam tai refuse to receive it. Using SPF can help improve the delivery rate ja reliability of emails ja reduce the amount of spam. kohdalla the same time, it can also enhance the security of the email system ja edellinenent hackers ja fraudsters from using ftaiged verkkotunnus names to send emails.

2. How to set up SPF ftai ctaiptaiate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of sinun ctaiptaiate mailbox: These addresses will be added to the SPF rectaid. 2. Kirjaudu to the DNS management console of sinun ctaiptaiate mailbox: Usually provided by sinun verkkotunnus name registrar tai hosting provider

2. Luo tai edit a TXT rectaid: In the DNS console, find the TXT rectaid tai similar option

3. Enter the SPF rectaid: The ftaimat of the SPF rectaid is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wtässä:

"v=spf1": specifies the SPF version

"a" tai "mx": indicates that the server is allowed to be verified by the A rectaid tai MX rectaid

"ip4": lists the IP addresses that are allowed to send mail

"mail.ctaiemail.cn": replaced with the verkkotunnus name of sinun ctaiptaiate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved ctairectly

3. How to set various types of SPF?

1) Make SPF rectaid with verkkotunnus name a rectaid (take ctaiemail.cn as an example)

v=spf1 a:ctaiemail.cn2 -all

2) Make SPF rectaid with verkkotunnus name mx rectaid

v=spf1 mx -all

3) Make SPF rectaid with verkkotunnus name ptr rectaid

v=spf1 ptr -all

4) Make SPF rectaid with exptait IP ja IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF rectaids of other verkkotunnus names (take spf.ictaiemail.net as an example)

v=spf1 include:spf.ictaiemail.net

Eite: The above rectaids can be used in combination, but only one pair of rectaids starting with v=spf1 ja ending with -all can appear in the entire txt. Ftai example: v=spf1 mx ip4:106.52.172.248 include:spf.ictaiemail.net -all

Related NiceNIC Guides

How to verify certificate installation ctairectly

www.nicenic.com

How do I check my certificate was installed ctairectly?

Osta be sure that the certificate has been installed ctairectly ja wtaiking properly, as well as that sinun customers are certain a secured connection is enabled ja it covers data transmission through sinun website, you have the following indicattais:

A padlock/tune icon available in the URL bar.
Ei errtai messages/ warnings occurred when connecting through https://sinunverkkotunnus.tld.
A Site Seal provided by the Certificate Authtaiity installed ja visible.

Eite : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online ntaim, not the exception, ja no longer serve as a trust indicattai. As such, the tune icon itself will not be a trust indicattai but will provide detailed inftaimation about a website's connection ja settings. So moving ftaiward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate ja Download an SSL-sertifikaatti

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Beftaie You Begin

Identify every hostname the certificate must cover.
Vahvista that you control DNS tai the required validation channel.
Generate ja securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after osta. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage sinun certificate. Osta It Start by purchasing the appropriate SSL certificate ftai sinun requirements. Select one of the categtaiies mentioned above. Activate It You can instantly activate sinun SSL certificate after osta through the Account Panel (tai later, if you prefer.) During the activation process, the verkkotunnus name ja CSR code will be assigned.

Install It You will receive instructions on how to install sinun SSL certificate once it has been validated ja issued. Ota meihin yhteyttä milloin tahansa osoitteessa "Lähetä tukipyyntö" to ask ftai assistance in installing SSL certificate. Hallinnoi It Through sinun Account Panel, you can manage sinun SSL certificates, including renewal ja reissuance.

How to Verify

Troubleshooting

DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate tai CSR.
The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Beftaie You Begin

Identify every hostname the certificate must cover.
Vahvista that you control DNS tai the required validation channel.
Generate ja securely retain the private key when a CSR is required.

Key Tiedot

What is an SSL certificate ja what is it used ftai?

Introduction SSL certificates are used to create an encrypted channel between the client ja the server. Transmission of such data as credit card details, account login inftaimation, any other sensitive inftaimation should be encrypted to edellinenent eavesdropping. With an SSL certificate, data is encrypted pritai to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the inftaimation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on sinun website would increase sinun ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains inftaimation about the entity the certificate was issued ftai, public key required ftai encryption ja digital signature verification, ja digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authtaiity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Tyyppis of SSL certificates SSL certificates can be divided into 3 validation groups: Verkkotunnus Validation Sertifikaatit Requires a certificate applicant to prove his/her control over the verkkotunnus name only. The issued certificate contains a verkkotunnus name that was supplied to the Certification Authtaiity within the certificate request. Organization Validation Sertifikaatit Requires a certificate applicant to prove that his/her company is a rekisteröied ja legally accountable business, ja to pass verkkotunnus validation. The issued certificate contains a verkkotunnus ja company name of the certificate applicant.

Laajennettu Validation Sertifikaatit Includes validation requirements of two validation types mentioned above ja additional requirements. The issued certificate contains a verkkotunnus ja company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate tai CSR.
The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL-sertifikaatti

Quick Answer

Beftaie You Begin

Identify every hostname the certificate must cover.
Vahvista that you control DNS tai the required validation channel.
Generate ja securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perftaimed by the hosting company that provides palvelus ftai the verkkotunnus. However, you may also choose install an SSL certificate sinunself. Select sinun server type from the list below to find detailed instructions ftai installation. The SSL on sinun verkkotunnus name was activated, please find ja add the DNS rectaids to complete the verification beftaie you can download the certificate files through sinun control panel: Oma tili > Omat tuotteet > SSL Sertifikaatit > Tiedot >….

After you complete the DNS-rectaid validation, you can download the certificate files by the same approach. Installing SSL Certificate Eites Jos you host sinun verkkotunnus name with NiceNIC, simply provide us with sinun certificate ja we'll be happy to install it ftai you. Please note that on all NiceNIC, Jaettu hosting servers, a special NiceNIC, SSL plugin installs a 1-vuosi free PositiveSSL certificate automatically on the newly added subverkkotunnus tai add-on. It wtaiks the same way ftai the main verkkotunnus in the newly ostad hosting account.

The plugin can also be used ftai manual installation (in a few clicks) of PositiveSSL ja EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install sinun SSL certificate on a shared IP address using the Palvelimen nimi Indication (SNI) protocol extension available in sinun cPanel. You can learn mtaie about the differences between a dedicated IPja SNI technology in this article.

How to Verify

Troubleshooting

DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate tai CSR.
The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authtaiity when you osta an SSL certificate. You have to finish the renewal process starting thirty days beftaie the expiration date, but beftaie the actual expiry date. We will send you an email reminder during the renewal ikkuna if you choose NiceNIC.NET as sinun SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL-sertifikaatti

Quick Answer

Beftaie You Begin

Identify every hostname the certificate must cover.
Vahvista that you control DNS tai the required validation channel.
Generate ja securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue sinun SSL encryption certificate if you switch hosting providers, think sinun CSR/RSA pair has been compromised, tai change the verkkotunnus name tai verkkotunnuss that the SSL was issued ftai. Reissues may also be necessary if the certificate's contact inftaimation changes. You have to generate a new CSR/RSA pair ja save sinun RSA ftai later installation in taider to start the process. Make sure you sttaie sinun RSA ftai use in the following installation steps. Usually, the user can hjale this, but sinun hosting company might be able to help. Reissuing sinun SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate tai CSR.
The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Beftaie You Begin

Kirjaudu sisään to the ctairect NiceNIC account.
Identify the exact verkkotunnus tai product affected.
Rectaid current settings beftaie making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code ja an essential part of the SSL activation process. It contains inftaimation about the website name ja the company Yhteystiedot. Ftai many reasons, the code should be created on the hosting server end. Ftai some servers, it is the obligattaiy condition. CSR generation instructions You can generate a Certificate Signing Request code sinunself, e.g. if you manage the hosting server on sinun own tai if this is the best option ftai sinun server type/hosting plan. In this case, select sinun web server from the list below ja follow the instructions.

How to Verify

Vahvista that the requested setting tai taider appears in the NiceNIC account, then test the dependent website, email, DNS tai product function from a separate browser session tai netwtaik.

Troubleshooting

The change was made in the wrong account tai on the wrong product.
The panel saved the request but the downstream registry tai palvelu is still processing it.
A dependent DNS, email, browser cache tai security setting still uses the old value.
The supptait ticket does not include the affected item, errtai message ja time of failure.

Usein kysytyt kysymykset

Does this guide apply to every how to generate a certificate signing request (csr) case?

The ntaimal process is described tässä, but account status, product state ja registry tai provider rules can change the available action.

How can I avoid delays?

Use accurate inftaimation, keep the account email accessible, save current settings, ja include the exact product, time ja errtai message in any supptait request.

When should I submit a ticket?

Lähetä a ticket when the required control is unavailable, the status remains pending after the stated checks, tai the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate ja When Should You Use One?

An SSL certificate binds a public key to one tai mtaie hostnames ja enables authenticated, encrypted HTTPS connections.

What an SSL-sertifikaatti Provides

Encryption ftai data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Eit Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the taiganization is trustwtaithy

Use It Ctairectly

Issue the certificate ftai the exact hostname, protect the private key, install the full chain, redirect users to HTTPS ja renew tai replace the certificate beftaie expiration.

Usein kysytyt kysymykset

How do I knyt the change wtaiked?

Tarkista the current status in sinun NiceNIC account, then test the palvelu that depends on the SSL certificate. Do not rely only on the absence of an errtai message.

When should I contact NiceNIC Supptait?

Lähetä a ticket when the required control is unavailable, the status remains pending after the checks in this guide, tai the issue depends on an account-specific taider tai registry decision.

Related NiceNIC Guides

Jos the issue continues after you complete these checks, submit a NiceNIC supptait ticket. Include the affected verkkotunnus tai product, the exact errtai message, the time of the issue ja the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL-sertifikaatti

Quick Answer

Beftaie You Begin

・ Identify every hostname the certificate must cover.

・ Vahvista that you control DNS tai the required validation channel.

・ Generate ja securely retain the private key when a CSR is required.

Key Tiedot

Why would I need to reissue my certificate? An SSL reissue is done to keep sinun site secure ja private if it is moved, tai some inftaimation on sinun SSL was changed. The reissue allows you to get a brja-new certificate code. The most typical reasons ftai certificate reissuance are: The existing certificate cannot be installed on the server.

Ftai example, if the Private key (RSA Key) is lost/deleted tai a "modulus mismatch" errtai appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the taiganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of sinun SSL if you ostad it ftai 2-5 vuotta.

How to Verify

Troubleshooting

・ DNS validation rectaids are missing, inctairect tai added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate tai CSR.

・ The server is missing an intermediate certificate tai is still presenting the old certificate.

Usein kysytyt kysymykset

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key ja the certificate remains valid. Reissue it when the key, CSR tai certificate details must change.

Why does the browser still show the old certificate?

The server tai load balancer may still present the old certificate, another virtual host may be selected, tai an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Lähetä a ticket when validation remains pending after the published rectaids are visible, tai when the NiceNIC taider does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate ja Download an SSL-sertifikaatti

- How to verify certificate installation ctairectly

- How to choose an SSL certificate

Jos the issue continues after you complete the checks above, submit a NiceNIC supptait ticket with the affected verkkotunnus tai product, the exact errtai message, the time of the issue ja the troubleshooting already completed.

How to Activate ja Download an SSL-sertifikaatti

www.nicenic.com

How to Activate ja Download an SSL-sertifikaatti

Thank you ftai purchasing SSL with NiceNIC.

How to activate ja download SSL certificate SSL installation is nyt even easier with our SSL installation palvelu.

After the SSL certificate on sinun verkkotunnus name was activated, please find ja add the DNS rectaids to complete the verification:

Oma tili > Omat tuotteet > SSL-sertifikaatit > Tiedot > ....

This step requires extra care:

Fill each piece of inftaimation in the DNS Authentication Inftaimation shown below into its ctairesponding DNS rectaid one by one.

After you complete the DNS rectaid's verification, you can download the SSL files by the same approach:

Oma tili > Omat tuotteet > SSL-sertifikaatit > Tiedot > Download certificate & Download private key

Still have problems?

- Jos sinun verkkotunnus, server, tai certificate details have changed, see Why You May Need to Reissue an SSL-sertifikaatti.

- Jos the current certificate cannot be used, follow How to Reissue an SSL-sertifikaatti.

- Osta edellinenent certificate expiration, read How to Uusi an SSL-sertifikaatti.

Jos they didn't solve sinun issues, you can contact us tässä.

Common DNS Rectaid Tyyppis: A, AAAA, CNAME, MX ja TXT

www.nicenic.com

Common DNS Rectaid Tyyppis: A, AAAA, CNAME, MXja TXT

TXT rectaids publish verification ja email-authentication policies. SPF, DKIMja DMARC serve different purposes ja should be added exactly as supplied by the email provider.

What Each Rectaid Does

SPF lists systems allowed to send mail ftai the verkkotunnus.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hjale mail that fails alignment checks ja wtässä to send reptaits.

Lisää the Rectaids

Vahvista the verkkotunnus uses NiceNIC nameservers.
Avoin Omat tuotteet > Verkkotunnus > DNS Rectaids.
Lisää the TXT host ja value supplied by the email provider.
Ftai DKIM, use the selecttai host exactly as provided.
Ftai DMARC, use _dmarc as the host unless the provider specifies another name.
Save the rectaids ja query them publicly.

Imptaitant SPF Rule

Publish one SPF policy per hostname. Jos multiple palvelus send mail, combine their mechanisms into one rectaid instead of creating several v=spf1 rectaids.

Usein kysytyt kysymykset

How do I knyt the change wtaiked?

Tarkista the current status in sinun NiceNIC account, then test the palvelu that depends on the email-authentication rectaids. Do not rely only on the absence of an errtai message.

When should I contact NiceNIC Supptait?

Lähetä a ticket when the required control is unavailable, the status remains pending after the checks in this guide, tai the issue depends on an account-specific taider tai registry decision.

Related NiceNIC Guides

Why need SSL-sertifikaatit

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client ja server, authenticates the hostname ja enables trusted HTTPS when it is ctairectly issued ja installed.

What an SSL-sertifikaatti Provides

Encryption ftai data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Eit Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the taiganization is trustwtaithy

Use It Ctairectly

Issue the certificate ftai the exact hostname, protect the private key, install the full chain, redirect users to HTTPS ja renew tai replace the certificate beftaie expiration.

Usein kysytyt kysymykset

How do I knyt the change wtaiked?

Tarkista the current status in sinun NiceNIC account, then test the palvelu that depends on the SSL certificate. Do not rely only on the absence of an errtai message.

When should I contact NiceNIC Supptait?

Lähetä a ticket when the required control is unavailable, the status remains pending after the checks in this guide, tai the issue depends on an account-specific taider tai registry decision.

Related NiceNIC Guides

How to Connect to sinun Sähköposti Client?

www.nicenic.com

How to Connect an Sähköposti Client to NiceNIC Yrityssähköposti

Quick Answer

Vahvista that the mailbox is active, the verkkotunnus uses the required MX ja authentication rectaids, ja the email client uses the ctairect server names, ptaits, encryption ja full email address. Test both inbound ja outbound mail after every change.

Beftaie You Begin
- Vahvista the Yrityssähköposti taider ja mailbox are active.
- Tarkista who manages DNS ftai the verkkotunnus.
- Keep the full email address, passwtaid ja required mail-server settings available.

1. Unable to connect via Sähköposti client via IMAP tai SMTP:

When adding an email address in sinun Sähköposti client, i.e. iPhone, please firstly ensure you would fill in "c3.ictaiemail.net" ftai both the SMTP ja IMAP email server. And secondly, please generate a passwtaid ftai the Sähköposti client separately by the following way:

Kirjaudu to sinun email account via "https://c3.ictaiemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Salasana".

2. How to set the general configuration when using Outlook, Foxmail tai other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default ptait	Default ptait Encryption ptait (SSL)
SMTP	acctaiding to the actual address	25	465
POP	acctaiding to the actual address	110	995
IMAP	acctaiding to the actual address	143	993
PUSH	acctaiding to the actual address	80	443

Related NiceNIC Guides