耐思尼克客户支持中心

HTTPS & SSL Guide fo .boo, .day, .dev, .page, at .rsvp

www.nicenic.com

HTTPS & SSL Guide fo .boo, .day, .dev, .page, at .rsvp

Quick Answer

Choose o manage the certificate based on the hostnames you need to protect, the validation level, the server platfom at whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain at verify the live HTTPS connection befoe relying on the certificate.

Befoe You Begin

Identify every hostname the certificate must cover.
Kumpirmahin that you control DNS o the required validation channel.
Generate at securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Para sa ensure the security of iyong website at protect iyong visitos, all domains under.boo,.day,.dev,.page, at.rsvp must use HTTPS. This guide will help you configure SSL/TLS corectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between iyong website at its visitos. It nakaraanents eavesdropping at ensures data integrity.
Obtaining an SSL Certificate NICENIC provides trusted SSL certificates. You can learn moe at bumili/configure a certificate dito: https://nicenic.com/ssl-certificates/
Installing the SSL Certificate Sundan iyong web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfoce HTTPS Once iyong certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links at resources to use HTTPS. Verify that iyong website is fully accessible via HTTPS.
Keep Mga Sertipiko Na-update SSL certificates have expiration dates. Ensure certificates are renewed befoe they expire at check iyong website regularly to maintain uninterrupted secure connections.

How to Verify

Buksan the HTTPS site from a clean browser session at inspect the certificate subject, SAN hostnames, issuer, validity dates at chain. Test every hostname covered by the certificate at confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

Kung the issue continues after you complete the checks above, submit a NiceNIC suppot ticket with the affected domain o product, the exact erro message, the time of the issue at the troubleshooting already completed.

How to Set Up at Troubleshoot DNSSEC fo Your Domain

www.nicenic.com

How to Set Up at Troubleshoot DNSSEC fo Your Domain?

DNSSEC helps protect iyong domain’s DNS recods from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the corect source.

Sa NiceNIC, DNSSEC usually involves two sides:
Your DNS provider o nameserver provider generates the DNSSEC recods.
NiceNIC, as iyong domain registrar, helps submit the DS recods to the registry when the TLD suppots DNSSEC.

Kung DNSSEC is not configured corectly, iyong domain may show DNSSEC erros, o in moe serious cases, some users may not be able to access iyong website.

What Is DNSSEC?
DNSSEC stats fo Domain Name System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fo iyong domain has not been changed o foged during the lookup process.
Fo example, when someone visits iyong website, DNS is used to find the corect server IP address. DNSSEC helps make sure that the DNS result is authentic at has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, o email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hatles sensitive user infomation.
You run business email, login systems, payment pages, o customer potals.
You want stronger domain security.
Your DNS provider suppots DNSSEC.
Your domain extension suppots DNSSEC.

Kung you are not familiar with DNS management, we recommend confirming with iyong DNS provider befoe enabling DNSSEC.
Incorect DNSSEC settings may affect domain resolution.

Impotant DNSSEC Terminos
DNSKEY: A DNSKEY recod is generated by iyong DNS provider. It is used as part of the DNSSEC validation process.
DS Recod: A DS recod connects iyong domain’s DNSSEC setup with the parent registry zone. In most cases, iyong DNS provider gives you the DS recod, at you need to add it through iyong registrar.
Pangalanserver: Your nameservers decide wdito iyong domain’s DNS recods are managed. Kung you change nameservers, iyong DNSSEC recods may also need to be updated.

How to Enable DNSSEC fo Your Domain

Step 1: Suriin Whether Your DNS Provider Suppots DNSSEC
Mag-log in to the platfom wdito iyong DNS is managed.
This may be:
Your domain registrar, dito is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS Serbisyo
Make sure DNSSEC is suppoted at enabled tdito.

Step 2: Kunin the DS Recod from Your DNS Provider
After enabling DNSSEC, iyong DNS provider should provide DNSSEC infomation such as:
Key Tag
Algoithm
Digest Uri
Digest
DS Recod
Please copy the infomation exactly as provided.
Even one incorect character may cause DNSSEC validation failure.

Step 3: Magdagdag the DS Recod in Your NiceNIC Account
Mag-log in to iyong NiceNIC account at go to iyong domain management page.
Then add the DS recod provided by iyong DNS provider.
Kung you are not sure wdito to add it, please contact our suppot team at provide the DS recod from iyong DNS provider.

Step 4: Wait fo DNSSEC Propagation
After the DS recod is added, it may take some time fo the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Status
After propagation, you may check iyong domain’s DNSSEC status using a DNSSEC checking tool o by contacting our suppot team.
Kung DNSSEC is corectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable o Alisin DNSSEC?
You may need to remove o update DNSSEC recods if:

You changed iyong nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recod no longer matches the current DNSKEY.
Your website o email has DNS resolution issues after a DNS change.

Impotant: Kung iyong domain has old DS recods but the current nameservers no longer provide matching DNSSEC recods, DNSSEC validation may fail.
In this case, you may need to remove the old DS recods first, wait fo propagation, at then re-enable DNSSEC with the corect new recods.

Why Does My Domain Show "DNSSEC Infomation Is Currently Unavailable"?
You may see this message:
DNSSEC infomation is currently unavailable fo this domain.
This can happen fo several reasons:

DNSSEC has not been enabled fo this domain.
Hindi DS recod has been added at the registrar level.
The domain’s current nameservers do not suppot DNSSEC.
The domain recently changed nameservers.
The DS recod does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recods corectly.
The registry o DNSSEC query is tempoarily unavailable.

This message does not always mean iyong domain is broken.
However, if iyong website o email is not resolving corectly, please contact suppot so we can help review the DNSSEC configuration.

What Infomation Should I Provide to Suppot?
Para sa help us check DNSSEC issues faster, please provide:

Your domain name
Your current nameservers
Whether you recently changed nameservers
The DS recod provided by iyong DNS provider
A screenshot of the DNSSEC setting from iyong DNS provider
Any DNSSEC erro message you received
Whether iyong website o email is currently affected

With this infomation, our suppot team can check whether the issue is caused by missing DS recods, mismatched DNSSEC recods, nameserver changes, o registry-side limitations.

Mga Madalas na Itanong Tungkol sa Amin DNSSEC

1. Is DNSSEC required fo every domain?
Hindi. DNSSEC is not required fo every domain.
However, it is recommended fo domains that need stronger DNS security, especially business websites, email Serbisyos, login systems, financial Serbisyos, at customer potals.
Kung you are not sure whether you need DNSSEC, please confirm whether iyong DNS provider suppots it at whether you are comfotable managing DNSSEC recods.

2. Is DNSSEC the same as SSL?
Hindi.
SSL protects the connection between the user’s browser at iyong website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fo better security, many websites use both SSL at DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recods fo me?
In most cases, DNSSEC recods are generated by iyong DNS provider, not by the registrar.
NiceNIC can help submit the DS recod to the registry when the domain extension suppots DNSSEC.
Kung you use a third-party DNS provider, please enable DNSSEC tdito first at then provide us with the DS recod.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, iyong old DNSSEC recods may no longer match the new DNS provider’s DNSKEY.
Kung the old DS recod remains active at the registry level, DNSSEC validation may fail.
Befoe o after changing nameservers, you should check whether the DS recod needs to be removed o replaced.

5. What happens if the DS recod is wrong?
Kung the DS recod does not match the DNSKEY published by iyong current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, iyong website, email, o other Serbisyos may become unreachable fo some users.

6. I do not use DNSSEC. Do I need to do anything?
Kung you do not use DNSSEC at iyong domain has no DS recods, usually no action is needed.
However, if iyong domain has old DS recods from a nakaraanious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an erro after I updated the recod?
DNSSEC updates may take time to propagate.
Kung you recently added, removed, o changed DS recods, please wait fo DNS propagation at check again later.
Kung the issue continues, please contact suppot at provide iyong domain name, current nameservers, at DS recod.

8. Can DNSSEC cause my website to stop woking?
Oo, if DNSSEC is incorectly configured.
Common causes include:

Wrong DS recod
Old DS recod after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recods corectly
Magtataposd o invalid DNSSEC signatures

Kung iyong website stops woking after DNSSEC changes, please contact suppot immediately.

9. Should I remove DNSSEC befoe changing nameservers?
In many cases, yes.
Kung you are moving to a new DNS provider at you are not sure how to migrate DNSSEC safely, removing the old DS recod befoe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active at DNSSEC is enabled at the new DNS provider, you can add the new DS recod again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infomation fo the domain.
Please check:

Whether DNSSEC is enabled
Whether the DS recod has been added
Whether the nameservers suppot DNSSEC
Whether the DS recod matches the DNSKEY
Whether you recently changed nameservers

Kung you are not sure, please contact NiceNIC suppot at provide iyong domain name at DNSSEC details from iyong DNS provider.

How to set up DNSSEC fo a domain magparehistroed on NiceNIC?

1. Mag-log in to iyong NiceNIC account at navigate to iyong domain management page. Find the domain you wish to enable DNSSEC fo at click Pamahalaan.

2. In the domain management section, you should see the DNSSEC button. I-click on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infomation fo DNSSEC configuration (this will typically include DNSSEC key details provided by iyong DNS hosting provider).

4. Once you've entered the infomation, click Magdagdag to enable DNSSEC fo the domain. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recod), you'll receive confirmation that DNSSEC has been successfully added to iyong domain settings.
The DNSSEC status will show as enabled at you'll be able to see the public keys at other details.
With DNSSEC ngayon enabled, iyong domain is better protected against DNS-related attacks.

Satention: if iyong domain name was transferred into NiceNIC from another Registrar, at you hope to disable the DNSSEC nakaraaniously with the old Registrar, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domain transfer process, the DNSSEC settings have been disabled automatically by the old Registrar, while if it is "DNSSEC: signed", please check the domain management section at iyong control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Pangalanservers After a Paglilipat ng Domain?

www.nicenic.com

Status of Pangalan Mga Server After a Paglilipat ng Domain

After the domain is transferred, the name servers remain set to those associated to the domain befoe transfer.

Kung you had child name servers fo iyong domain magparehistroed through another Registrar, you may need to magparehistro them again through iyong Account.

How to Transfer Pangalan Mga Server During a Paglilipat ng Domain?

www.nicenic.com

How to Transfer Pangalan Mga Server During a Paglilipat ng Domain?

Quick Answer

A successful domain transfer depends on the domain's eligibility, lock status, authoization method, registrant access at registry rules. Prepare the domain befoe odering the transfer, keep the existing DNS active, at monito the transfer until completion.

Befoe You Begin

Kumpirmahin the domain at registrant email are accessible.
Recod the current nameservers at DNS recods.
Suriin the domain's expiry date, lock status at any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Paglilipat ng Domain Kung you're just transferring the domain registration, iyong hosting Serbisyo will be unaffected, at tdito will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recod of them. Kung you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Mag-login to iyong account. Select the Mga Domain Name tab. Select the domain that you want to change nameservers fo.

From within the DNS Mga Server section click on I-edit DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the oiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Kung you wish to make an immediate change to the nameservers, you may do so with the Registrar you are transferring from.

How to Verify

Suriin the transfer status in NiceNIC, confirm the registrar of recod after completion, verify the authoitative nameservers, at test website at email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domain is locked, too new, recently transferred o otherwise restricted by policy.
The EPP/Auth code is missing, expired o copied incorectly.
The approval email cannot be received o the registrant data is under verification.
The domain o related DNS Serbisyo expires while the transfer is pending.

Mga Madalas na Itanong

Does a transfer change my nameservers?

A registrar transfer nomally keeps the current nameservers, but you should recod at verify them befoe at after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock o DNS changes until the transfer completes.

When should I submit a ticket?

Isumite a ticket when the status is unclear, a TLD uses a special transfer process, o the transfer remains blocked after you corect the stated issue.

Related NiceNIC Guides

How do I verify that my domain is eligible fo transfer?

www.nicenic.com

How to Suriin Whether a Domain Is Eligible fo Transfer

Quick Answer

Befoe starting a transfer, confirm that the domain is active, unlocked, not restricted by a transfer lock o dispute, at eligible under the registry's rules. Make sure you can receive approval messages at obtain the EPP/Auth code when the TLD requires one.

Befoe You Begin

Kumpirmahin the domain at registrant email are accessible.
Recod the current nameservers at DNS recods.
Suriin the domain's expiry date, lock status at any TLD-specific transfer rule.

NiceNIC Instructions

Befoe purchasing the transfer of any gTLD (e.g.,.COM /.NET /.OG /.BIZ /.INFO etc.) o new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure iyong domain meets the following conditions:

Your domain was magparehistroed o transferred at least 60 days ago;
The domain is unlocked at the current Registrar (its WHOIS status should be OK o Active). Also,you need to request an up-to-date Auth/EPPcode fo the domain at iyong current Registrar. Kung all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLDs (.ES at.UK) have additional transfer requirements at/o exclude some points from the list above.

NOTE: Make sure the domain status is active, not expired. Kung you wish to transfer an expired domain to NiceNIC, please contact our Suppot Team email suppot@nicenic.net fo further assistance.

How to Verify

Troubleshooting

The domain is locked, too new, recently transferred o otherwise restricted by policy.
The EPP/Auth code is missing, expired o copied incorectly.
The approval email cannot be received o the registrant data is under verification.
The domain o related DNS Serbisyo expires while the transfer is pending.

Mga Madalas na Itanong

Does a transfer change my nameservers?

A registrar transfer nomally keeps the current nameservers, but you should recod at verify them befoe at after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock o DNS changes until the transfer completes.

When should I submit a ticket?

Isumite a ticket when the status is unclear, a TLD uses a special transfer process, o the transfer remains blocked after you corect the stated issue.

Related NiceNIC Guides

How to transfer several domains to NiceNIC in bulk?

www.nicenic.com

How to transfer several domains to NiceNIC in bulk?

Befoe submitting a transfer request with NiceNIC, make sure iyong domains are prepared fo transfer through iyong current registrar. This is generally done by removing transfer locks at getting the necessary Auth codes.

Befoe You Begin

- Kumpirmahin the domain at registrant email are accessible.
- Recod the current nameservers at DNS recods.
- Suriin the domain's expiry date, lock status at any TLD-specific transfer rule.

Learn how to prepare domains fo transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer iyong domains:

Hindite: Each domain has a unique Auth code at has to be unlocked fo transfer separately on the current registrar side.

Mag-log in to iyong NiceNIC account.
Pumunta sa the Transfer to Us page.
I-click on Bulk options.

Enter the domain names at the Auth codes;

Hindite: Enter each domain at its Auth code in a new line. The Auth code has to be separated from the domain name by a comma at one space.

I-click on Start Transfer at the bottom of the page.

Double-check the domain names at add them to Cart. Para sa do this, you can use the Magdagdag all to cart button fo convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fo most domains. Once the transfer of iyong domains is completed you will receive the notifications on iyong NiceNIC Primary Email address, at the domains will become manageable in iyong Domain List.

Hindite: Due to technical reasons, it is only possible to submit the transfer fo up to 500 domain names at once. Kung you need to transfer moe than 10 domains, you can either submit several Maramihang Paglilipat oders o contact our Suppot Team fo assistance.

How to Suriin the Status of Your Paglilipat ng Domain

After initiating a domain transfer to Nicenic, you can monito its progress directly in iyong account. This helps you kngayon when the transfer is expected to complete without needing to contact suppot repeatedly.

Steps to View Transfer Status:

1. Mag-log in to iyong NiceNIC account. Pumunta sa "My Products > Mga Domain Name".
In the Status column, you will see iyong domain listed as:

Pending Transfer: the transfer has been submitted at is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infomation icon (i) susunod to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF at How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stats fo Sender Policy Framewok. SPF is an email authentication statard used to nakaraanent email fraud at spam. It ensures the authenticity at reliability of email by verifying that the sender's domain name matches the source IP address of the email. SPF recods are stoed in the DNS recod of the domain name at contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domain name has an SPF recod at verifies whether the IP address of the sending server is in the allowed list. Kung the verification fails, the recipient may mark the email as spam o refuse to receive it. Using SPF can help improve the delivery rate at reliability of emails at reduce the amount of spam. Sa the same time, it can also enhance the security of the email system at nakaraanent hackers at fraudsters from using foged domain names to send emails.

2. How to set up SPF fo copoate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of iyong copoate mailbox: These addresses will be added to the SPF recod. 2. Mag-log in to the DNS management console of iyong copoate mailbox: Usually provided by iyong domain name registrar o hosting provider

2. Gumawa o edit a TXT recod: In the DNS console, find the TXT recod o similar option

3. Enter the SPF recod: The fomat of the SPF recod is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wdito:

"v=spf1": specifies the SPF version

"a" o "mx": indicates that the server is allowed to be verified by the A recod o MX recod

"ip4": lists the IP addresses that are allowed to send mail

"mail.coemail.cn": replaced with the domain name of iyong copoate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved corectly

3. How to set various types of SPF?

1) Make SPF recod with domain name a recod (take coemail.cn as an example)

v=spf1 a:coemail.cn2 -all

2) Make SPF recod with domain name mx recod

v=spf1 mx -all

3) Make SPF recod with domain name ptr recod

v=spf1 ptr -all

4) Make SPF recod with expot IP at IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recods of other domain names (take spf.icoemail.net as an example)

v=spf1 include:spf.icoemail.net

Hindite: The above recods can be used in combination, but only one pair of recods starting with v=spf1 at ending with -all can appear in the entire txt. Fo example: v=spf1 mx ip4:106.52.172.248 include:spf.icoemail.net -all

Related NiceNIC Guides

How to verify certificate installation corectly

www.nicenic.com

How do I check my certificate was installed corectly?

Para sa be sure that the certificate has been installed corectly at woking properly, as well as that iyong customers are certain a secured connection is enabled at it covers data transmission through iyong website, you have the following indicatos:

A padlock/tune icon available in the URL bar.
Hindi erro messages/ warnings occurred when connecting through https://iyongdomain.tld.
A Site Seal provided by the Certificate Authoity installed at visible.

Hindite : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nom, not the exception, at no longer serve as a trust indicato. As such, the tune icon itself will not be a trust indicato but will provide detailed infomation about a website's connection at settings. So moving foward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate at Download an SSL Certificate

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Kumpirmahin that you control DNS o the required validation channel.
Generate at securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after bumili. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage iyong certificate. Bumili It Start by purchasing the appropriate SSL certificate fo iyong requirements. Select one of the categoies mentioned above. Activate It You can instantly activate iyong SSL certificate after bumili through the Account Panel (o later, if you prefer.) During the activation process, the domain name at CSR code will be assigned.

Install It You will receive instructions on how to install iyong SSL certificate once it has been validated at issued. Mangyaring huwag mag-atubiling makipag-ugnayan sa amin sa pamamagitan ng "Magpadala ng Ticket" to ask fo assistance in installing SSL certificate. Pamahalaan It Through iyong Account Panel, you can manage iyong SSL certificates, including renewal at reissuance.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Kumpirmahin that you control DNS o the required validation channel.
Generate at securely retain the private key when a CSR is required.

Key Mga Detalye

What is an SSL certificate at what is it used fo?

Introduction SSL certificates are used to create an encrypted channel between the client at the server. Transmission of such data as credit card details, account login infomation, any other sensitive infomation should be encrypted to nakaraanent eavesdropping. With an SSL certificate, data is encrypted prio to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infomation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on iyong website would increase iyong ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infomation about the entity the certificate was issued fo, public key required fo encryption at digital signature verification, at digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authoity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Uris of SSL certificates SSL certificates can be divided into 3 validation groups: Domain Validation Mga Sertipiko Requires a certificate applicant to prove his/her control over the domain name only. The issued certificate contains a domain name that was supplied to the Certification Authoity within the certificate request. Organization Validation Mga Sertipiko Requires a certificate applicant to prove that his/her company is a magparehistroed at legally accountable business, at to pass domain validation. The issued certificate contains a domain at company name of the certificate applicant.

Pinalawig Validation Mga Sertipiko Includes validation requirements of two validation types mentioned above at additional requirements. The issued certificate contains a domain at company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL Certificate

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Kumpirmahin that you control DNS o the required validation channel.
Generate at securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfomed by the hosting company that provides Serbisyos fo the domain. However, you may also choose install an SSL certificate iyongself. Select iyong server type from the list below to find detailed instructions fo installation. The SSL on iyong domain name was activated, please find at add the DNS recods to complete the verification befoe you can download the certificate files through iyong control panel: Aking Account > Aking Mga Produkto > SSL Mga Sertipiko > Detalye >….

After you complete the DNS-recod validation, you can download the certificate files by the same approach. Installing SSL Certificate Hindites Kung you host iyong domain name with NiceNIC, simply provide us with iyong certificate at we'll be happy to install it fo you. Please note that on all NiceNIC, Shared Hosting servers, a special NiceNIC, SSL plugin installs a 1-taon free PositiveSSL certificate automatically on the newly added subdomain o add-on. It woks the same way fo the main domain in the newly bumilid hosting account.

The plugin can also be used fo manual installation (in a few clicks) of PositiveSSL at EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install iyong SSL certificate on a shared IP address using the Pangalan ng Server Indication (SNI) protocol extension available in iyong cPanel. You can learn moe about the differences between a dedicated IPat SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authoity when you bumili an SSL certificate. You have to finish the renewal process starting thirty days befoe the expiration date, but befoe the actual expiry date. We will send you an email reminder during the renewal window if you choose NiceNIC.NET as iyong SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL Certificate

Quick Answer

Befoe You Begin

Identify every hostname the certificate must cover.
Kumpirmahin that you control DNS o the required validation channel.
Generate at securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue iyong SSL encryption certificate if you switch hosting providers, think iyong CSR/RSA pair has been compromised, o change the domain name o domains that the SSL was issued fo. Reissues may also be necessary if the certificate's contact infomation changes. You have to generate a new CSR/RSA pair at save iyong RSA fo later installation in oder to start the process. Make sure you stoe iyong RSA fo use in the following installation steps. Usually, the user can hatle this, but iyong hosting company might be able to help. Reissuing iyong SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recods are missing, incorect o added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate o CSR.
The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befoe You Begin

Mag-sign in to the corect NiceNIC account.
Identify the exact domain o product affected.
Recod current settings befoe making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code at an essential part of the SSL activation process. It contains infomation about the website name at the company Mga detalye ng contact. Fo many reasons, the code should be created on the hosting server end. Fo some servers, it is the obligatoy condition. CSR generation instructions You can generate a Certificate Signing Request code iyongself, e.g. if you manage the hosting server on iyong own o if this is the best option fo iyong server type/hosting plan. In this case, select iyong web server from the list below at follow the instructions.

How to Verify

Kumpirmahin that the requested setting o oder appears in the NiceNIC account, then test the dependent website, email, DNS o product function from a separate browser session o netwok.

Troubleshooting

The change was made in the wrong account o on the wrong product.
The panel saved the request but the downstream registry o Serbisyo is still processing it.
A dependent DNS, email, browser cache o security setting still uses the old value.
The suppot ticket does not include the affected item, erro message at time of failure.

Mga Madalas na Itanong

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nomal process is described dito, but account status, product state at registry o provider rules can change the available action.

How can I avoid delays?

Use accurate infomation, keep the account email accessible, save current settings, at include the exact product, time at erro message in any suppot request.

When should I submit a ticket?

Isumite a ticket when the required control is unavailable, the status remains pending after the stated checks, o the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate at When Should You Use One?

An SSL certificate binds a public key to one o moe hostnames at enables authenticated, encrypted HTTPS connections.

What an SSL Certificate Provides

Encryption fo data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Hindit Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oganization is trustwothy

Use It Corectly

Issue the certificate fo the exact hostname, protect the private key, install the full chain, redirect users to HTTPS at renew o replace the certificate befoe expiration.

Mga Madalas na Itanong

How do I kngayon the change woked?

Suriin the current status in iyong NiceNIC account, then test the Serbisyo that depends on the SSL certificate. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Isumite a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

Kung the issue continues after you complete these checks, submit a NiceNIC suppot ticket. Include the affected domain o product, the exact erro message, the time of the issue at the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL Certificate

Quick Answer

Befoe You Begin

・ Identify every hostname the certificate must cover.

・ Kumpirmahin that you control DNS o the required validation channel.

・ Generate at securely retain the private key when a CSR is required.

Key Mga Detalye

Why would I need to reissue my certificate? An SSL reissue is done to keep iyong site secure at private if it is moved, o some infomation on iyong SSL was changed. The reissue allows you to get a brat-new certificate code. The most typical reasons fo certificate reissuance are: The existing certificate cannot be installed on the server.

Fo example, if the Private key (RSA Key) is lost/deleted o a "modulus mismatch" erro appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the oganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of iyong SSL if you bumilid it fo 2-5 mga taon.

How to Verify

Troubleshooting

・ DNS validation recods are missing, incorect o added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate o CSR.

・ The server is missing an intermediate certificate o is still presenting the old certificate.

Mga Madalas na Itanong

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key at the certificate remains valid. Reissue it when the key, CSR o certificate details must change.

Why does the browser still show the old certificate?

The server o load balancer may still present the old certificate, another virtual host may be selected, o an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Isumite a ticket when validation remains pending after the published recods are visible, o when the NiceNIC oder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate at Download an SSL Certificate

- How to verify certificate installation corectly

- How to choose an SSL certificate

Kung the issue continues after you complete the checks above, submit a NiceNIC suppot ticket with the affected domain o product, the exact erro message, the time of the issue at the troubleshooting already completed.

How to Activate at Download an SSL Certificate

www.nicenic.com

How to Activate at Download an SSL Certificate

Thank you fo purchasing SSL with NiceNIC.

How to activate at download SSL certificate SSL installation is ngayon even easier with our SSL installation Serbisyo.

After the SSL certificate on iyong domain name was activated, please find at add the DNS recods to complete the verification:

Aking Account > Aking Mga Produkto > Mga SSL Certificate > Detalye > ....

This step requires extra care:

Fill each piece of infomation in the DNS Authentication Infomation shown below into its coresponding DNS recod one by one.

After you complete the DNS recod's verification, you can download the SSL files by the same approach:

Aking Account > Aking Mga Produkto > Mga SSL Certificate > Detalye > Download certificate & Download private key

Still have problems?

- Kung iyong domain, server, o certificate details have changed, see Why You May Need to Reissue an SSL Certificate.

- Kung the current certificate cannot be used, follow How to Reissue an SSL Certificate.

- Para sa nakaraanent certificate expiration, read How to I-renew an SSL Certificate.

Kung they didn't solve iyong issues, you can contact us dito.

Common DNS Recod Uris: A, AAAA, CNAME, MX at TXT

www.nicenic.com

Common DNS Recod Uris: A, AAAA, CNAME, MXat TXT

TXT recods publish verification at email-authentication policies. SPF, DKIMat DMARC serve different purposes at should be added exactly as supplied by the email provider.

What Each Recod Does

SPF lists systems allowed to send mail fo the domain.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hatle mail that fails alignment checks at wdito to send repots.

Magdagdag the Recods

Kumpirmahin the domain uses NiceNIC nameservers.
Buksan Aking Mga Produkto > Domain > DNS Recods.
Magdagdag the TXT host at value supplied by the email provider.
Fo DKIM, use the selecto host exactly as provided.
Fo DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recods at query them publicly.

Impotant SPF Rule

Publish one SPF policy per hostname. Kung multiple Serbisyos send mail, combine their mechanisms into one recod instead of creating several v=spf1 recods.

Mga Madalas na Itanong

How do I kngayon the change woked?

Suriin the current status in iyong NiceNIC account, then test the Serbisyo that depends on the email-authentication recods. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Isumite a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

Why need Mga SSL Certificate

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client at server, authenticates the hostname at enables trusted HTTPS when it is corectly issued at installed.

What an SSL Certificate Provides

Encryption fo data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Hindit Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oganization is trustwothy

Use It Corectly

Issue the certificate fo the exact hostname, protect the private key, install the full chain, redirect users to HTTPS at renew o replace the certificate befoe expiration.

Mga Madalas na Itanong

How do I kngayon the change woked?

Suriin the current status in iyong NiceNIC account, then test the Serbisyo that depends on the SSL certificate. Do not rely only on the absence of an erro message.

When should I contact NiceNIC Suppot?

Isumite a ticket when the required control is unavailable, the status remains pending after the checks in this guide, o the issue depends on an account-specific oder o registry decision.

Related NiceNIC Guides

How to Connect to iyong Email Client?

www.nicenic.com

How to Connect an Email Client to NiceNIC Business Email

Quick Answer

Kumpirmahin that the mailbox is active, the domain uses the required MX at authentication recods, at the email client uses the corect server names, pots, encryption at full email address. Test both inbound at outbound mail after every change.

Befoe You Begin
- Kumpirmahin the Business Email oder at mailbox are active.
- Suriin who manages DNS fo the domain.
- Keep the full email address, passwod at required mail-server settings available.

1. Unable to connect via Email client via IMAP o SMTP:

When adding an email address in iyong Email client, i.e. iPhone, please firstly ensure you would fill in "c3.icoemail.net" fo both the SMTP at IMAP email server. And secondly, please generate a passwod fo the Email client separately by the following way:

Mag-log in to iyong email account via "https://c3.icoemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Password".

2. How to set the general configuration when using Outlook, Foxmail o other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pot	Default pot Encryption pot (SSL)
SMTP	accoding to the actual address	25	465
POP	accoding to the actual address	110	995
IMAP	accoding to the actual address	143	993
PUSH	accoding to the actual address	80	443

Related NiceNIC Guides