耐思尼克客户支持中心

HTTPS & SSL Guide fou .boo, .day, .dev, .page, e .rsvp

www.nicenic.com

HTTPS & SSL Guide fou .boo, .day, .dev, .page, e .rsvp

Quick Answer

Choose ou manage the certificate based on the hostnames you need to protect, the validation level, the server platfoum e whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain e verify the live HTTPS connection befoue relying on the certificate.

Befoue You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS ou the required validation channel.
Generate e securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Para ensure the security of seu website e protect seu visitous, all domínios under.boo,.day,.dev,.page, e.rsvp must use HTTPS. This guide will help you configure SSL/TLS courectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between seu website e its visitous. It anteriorents eavesdropping e ensures data integrity.
Obtaining an Certificado SSL NICENIC provides trusted SSL certificates. You can learn moue e comprar/configure a certificate aqui: https://nicenic.com/ssl-certificates/
Installing the Certificado SSL Seguir seu web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfouce HTTPS Once seu certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links e resources to use HTTPS. Verify that seu website is fully accessible via HTTPS.
Keep Certificados Atualizado SSL certificates have expiration dates. Ensure certificates are renewed befoue they expire e check seu website regularly to maintain uninterrupted secure connections.

How to Verify

Aberto the HTTPS site from a clean browser session e inspect the certificate subject, SAN hostnames, issuer, validity dates e chain. Test every hostname covered by the certificate e confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recouds are missing, incourect ou added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ou CSR.
The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

Se the issue continues after you complete the checks above, submit a NiceNIC suppout ticket with the affected domínio ou product, the exact errou message, the time of the issue e the troubleshooting already completed.

How to Set Up e Troubleshoot DNSSEC fou Your Domínio

www.nicenic.com

How to Set Up e Troubleshoot DNSSEC fou Your Domínio?

DNSSEC helps protect seu domínio’s DNS recouds from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the courect source.

Em NiceNIC, DNSSEC usually involves two sides:
Your DNS provider ou nameserver provider generates the DNSSEC recouds.
NiceNIC, as seu domínio registrar, helps submit the DS recouds to the registry when the TLD suppouts DNSSEC.

Se DNSSEC is not configured courectly, seu domínio may show DNSSEC errous, ou in moue serious cases, some users may not be able to access seu website.

What Is DNSSEC?
DNSSEC stes fou Nome de domínio System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fou seu domínio has not been changed ou fouged during the lookup process.
Fou example, when someone visits seu website, DNS is used to find the courect server IP address. DNSSEC helps make sure that the DNS result is authentic e has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, ou email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website heles sensitive user infoumation.
You run business email, login systems, payment pages, ou customer poutals.
You want stronger domínio security.
Your DNS provider suppouts DNSSEC.
Your domínio extension suppouts DNSSEC.

Se you are not familiar with DNS management, we recommend confirming with seu DNS provider befoue enabling DNSSEC.
Incourect DNSSEC settings may affect domínio resolution.

Impoutant DNSSEC Prazos
DNSKEY: A DNSKEY recoud is generated by seu DNS provider. It is used as part of the DNSSEC validation process.
DS Recoud: A DS recoud connects seu domínio’s DNSSEC setup with the parent registry zone. In most cases, seu DNS provider gives you the DS recoud, e you need to add it through seu registrar.
Nomeserver: Your nameservers decide waqui seu domínio’s DNS recouds are managed. Se you change nameservers, seu DNSSEC recouds may also need to be updated.

How to Enable DNSSEC fou Your Domínio

Step 1: Verificar Whether Your DNS Provider Suppouts DNSSEC
Iniciar sessão to the platfoum waqui seu DNS is managed.
This may be:
Your domínio registrar, aqui is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS serviço
Make sure DNSSEC is suppouted e enabled taqui.

Step 2: Obter the DS Recoud from Your DNS Provider
After enabling DNSSEC, seu DNS provider should provide DNSSEC infoumation such as:
Key Tag
Algouithm
Digest Tipo
Digest
DS Recoud
Please copy the infoumation exactly as provided.
Even one incourect character may cause DNSSEC validation failure.

Step 3: Adicionar the DS Recoud in Your NiceNIC Account
Iniciar sessão to seu NiceNIC account e go to seu domínio management page.
Then add the DS recoud provided by seu DNS provider.
Se you are not sure waqui to add it, please contact our suppout team e provide the DS recoud from seu DNS provider.

Step 4: Wait fou DNSSEC Propagation
After the DS recoud is added, it may take some time fou the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Estado
After propagation, you may check seu domínio’s DNSSEC status using a DNSSEC checking tool ou by contacting our suppout team.
Se DNSSEC is courectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable ou Remover DNSSEC?
You may need to remove ou update DNSSEC recouds if:

You changed seu nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recoud no longer matches the current DNSKEY.
Your website ou email has DNS resolution issues after a DNS change.

Impoutant: Se seu domínio has old DS recouds but the current nameservers no longer provide matching DNSSEC recouds, DNSSEC validation may fail.
In this case, you may need to remove the old DS recouds first, wait fou propagation, e then re-enable DNSSEC with the courect new recouds.

Why Does My Domínio Show "DNSSEC Infoumation Is Currently Unavailable"?
You may see this message:
DNSSEC infoumation is currently unavailable fou this domínio.
This can happen fou several reasons:

DNSSEC has not been enabled fou this domínio.
Não DS recoud has been added at the registrar level.
The domínio’s current nameservers do not suppout DNSSEC.
The domínio recently changed nameservers.
The DS recoud does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recouds courectly.
The registry ou DNSSEC query is tempouarily unavailable.

This message does not always mean seu domínio is broken.
However, if seu website ou email is not resolving courectly, please contact suppout so we can help review the DNSSEC configuration.

What Infoumation Should I Provide to Suppout?
Para help us check DNSSEC issues faster, please provide:

Your domínio name
Your current nameservers
Whether you recently changed nameservers
The DS recoud provided by seu DNS provider
A screenshot of the DNSSEC setting from seu DNS provider
Any DNSSEC errou message you received
Whether seu website ou email is currently affected

With this infoumation, our suppout team can check whether the issue is caused by missing DS recouds, mismatched DNSSEC recouds, nameserver changes, ou registry-side limitations.

Perguntas Frequentes Sobre DNSSEC

1. Is DNSSEC required fou every domínio?
Não. DNSSEC is not required fou every domínio.
However, it is recommended fou domínios that need stronger DNS security, especially business websites, email serviços, login systems, financial serviços, e customer poutals.
Se you are not sure whether you need DNSSEC, please confirm whether seu DNS provider suppouts it e whether you are comfoutable managing DNSSEC recouds.

2. Is DNSSEC the same as SSL?
Não.
SSL protects the connection between the user’s browser e seu website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fou better security, many websites use both SSL e DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recouds fou me?
In most cases, DNSSEC recouds are generated by seu DNS provider, not by the registrar.
NiceNIC can help submit the DS recoud to the registry when the domínio extension suppouts DNSSEC.
Se you use a third-party DNS provider, please enable DNSSEC taqui first e then provide us with the DS recoud.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, seu old DNSSEC recouds may no longer match the new DNS provider’s DNSKEY.
Se the old DS recoud remains active at the registry level, DNSSEC validation may fail.
Befoue ou after changing nameservers, you should check whether the DS recoud needs to be removed ou replaced.

5. What happens if the DS recoud is wrong?
Se the DS recoud does not match the DNSKEY published by seu current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, seu website, email, ou other serviços may become unreachable fou some users.

6. I do not use DNSSEC. Do I need to do anything?
Se you do not use DNSSEC e seu domínio has no DS recouds, usually no action is needed.
However, if seu domínio has old DS recouds from a anteriorious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errou after I updated the recoud?
DNSSEC updates may take time to propagate.
Se you recently added, removed, ou changed DS recouds, please wait fou DNS propagation e check again later.
Se the issue continues, please contact suppout e provide seu domínio name, current nameservers, e DS recoud.

8. Can DNSSEC cause my website to stop wouking?
Sim, if DNSSEC is incourectly configured.
Common causes include:

Wrong DS recoud
Old DS recoud after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recouds courectly
Expirard ou invalid DNSSEC signatures

Se seu website stops wouking after DNSSEC changes, please contact suppout immediately.

9. Should I remove DNSSEC befoue changing nameservers?
In many cases, yes.
Se you are moving to a new DNS provider e you are not sure how to migrate DNSSEC safely, removing the old DS recoud befoue changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active e DNSSEC is enabled at the new DNS provider, you can add the new DS recoud again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infoumation fou the domínio.
Please check:

Whether DNSSEC is enabled
Whether the DS recoud has been added
Whether the nameservers suppout DNSSEC
Whether the DS recoud matches the DNSKEY
Whether you recently changed nameservers

Se you are not sure, please contact NiceNIC suppout e provide seu domínio name e DNSSEC details from seu DNS provider.

How to set up DNSSEC fou a domínio registrared on NiceNIC?

1. Iniciar sessão to seu NiceNIC account e navigate to seu domínio management page. Find the domínio you wish to enable DNSSEC fou e click Gerenciar.

2. In the domínio management section, you should see the DNSSEC button. Clique on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infoumation fou DNSSEC configuration (this will typically include DNSSEC key details provided by seu DNS hosting provider).

4. Once you've entered the infoumation, click Adicionar to enable DNSSEC fou the domínio. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recoud), you'll receive confirmation that DNSSEC has been successfully added to seu domínio settings.
The DNSSEC status will show as enabled e you'll be able to see the public keys e other details.
With DNSSEC agora enabled, seu domínio is better protected against DNS-related attacks.

Emtention: if seu domínio name was transferred into NiceNIC from another Registrador, e you hope to disable the DNSSEC anterioriously with the old Registrador, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domínio transfer process, the DNSSEC settings have been disabled automatically by the old Registrador, while if it is "DNSSEC: signed", please check the domínio management section at seu control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Nomeservers After a Transferência de domínio?

www.nicenic.com

Estado of Nome Servidores After a Transferência de domínio

After the domínio is transferred, the name servers remain set to those associated to the domínio befoue transfer.

Se you had child name servers fou seu domínio registrared through another Registrador, you may need to registrar them again through seu Account.

How to Transfer Nome Servidores During a Transferência de domínio?

www.nicenic.com

How to Transfer Nome Servidores During a Transferência de domínio?

Quick Answer

A successful domínio transfer depends on the domínio's eligibility, lock status, authouization method, registrant access e registry rules. Prepare the domínio befoue oudering the transfer, keep the existing DNS active, e monitou the transfer until completion.

Befoue You Begin

Confirmar the domínio e registrant email are accessible.
Recoud the current nameservers e DNS recouds.
Verificar the domínio's expiry date, lock status e any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Transferência de domínio Se you're just transferring the domínio registration, seu hosting serviço will be unaffected, e taqui will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recoud of them. Se you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Entrar to seu account. Select the Nomes de domínio tab. Select the domínio that you want to change nameservers fou.

From within the DNS Servidores section click on Editar DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the ouiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Se you wish to make an immediate change to the nameservers, you may do so with the Registrador you are transferring from.

How to Verify

Verificar the transfer status in NiceNIC, confirm the registrar of recoud after completion, verify the authouitative nameservers, e test website e email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domínio is locked, too new, recently transferred ou otherwise restricted by policy.
The EPP/Auth code is missing, expired ou copied incourectly.
The approval email cannot be received ou the registrant data is under verification.
The domínio ou related DNS serviço expires while the transfer is pending.

Perguntas Frequentes

Does a transfer change my nameservers?

A registrar transfer noumally keeps the current nameservers, but you should recoud e verify them befoue e after the transfer.

Can I edit the domínio while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ou DNS changes until the transfer completes.

When should I submit a ticket?

Enviar a ticket when the status is unclear, a TLD uses a special transfer process, ou the transfer remains blocked after you courect the stated issue.

Related NiceNIC Guides

How do I verify that my domínio is eligible fou transfer?

www.nicenic.com

How to Verificar Whether a Domínio Is Eligible fou Transfer

Quick Answer

Befoue starting a transfer, confirm that the domínio is active, unlocked, not restricted by a transfer lock ou dispute, e eligible under the registry's rules. Make sure you can receive approval messages e obtain the EPP/Auth code when the TLD requires one.

Befoue You Begin

Confirmar the domínio e registrant email are accessible.
Recoud the current nameservers e DNS recouds.
Verificar the domínio's expiry date, lock status e any TLD-specific transfer rule.

NiceNIC Instructions

Befoue purchasing the transfer of any gTLD (e.g.,.COM /.NET /.OUG /.BIZ /.INFO etc.) ou new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure seu domínio meets the following conditions:

Your domínio was registrared ou transferred at least 60 days ago;
The domínio is unlocked at the current Registrador (its WHOIS status should be OK ou Active). Also,you need to request an up-to-date Auth/EPPcode fou the domínio at seu current Registrador. Se all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLDs (.ES e.UK) have additional transfer requirements e/ou exclude some points from the list above.

NOTE: Make sure the domínio status is active, not expired. Se you wish to transfer an expired domínio to NiceNIC, please contact our Suppout Team email suppout@nicenic.net fou further assistance.

How to Verify

Troubleshooting

The domínio is locked, too new, recently transferred ou otherwise restricted by policy.
The EPP/Auth code is missing, expired ou copied incourectly.
The approval email cannot be received ou the registrant data is under verification.
The domínio ou related DNS serviço expires while the transfer is pending.

Perguntas Frequentes

Does a transfer change my nameservers?

A registrar transfer noumally keeps the current nameservers, but you should recoud e verify them befoue e after the transfer.

Can I edit the domínio while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ou DNS changes until the transfer completes.

When should I submit a ticket?

Enviar a ticket when the status is unclear, a TLD uses a special transfer process, ou the transfer remains blocked after you courect the stated issue.

Related NiceNIC Guides

How to transfer several domínios to NiceNIC in bulk?

www.nicenic.com

How to transfer several domínios to NiceNIC in bulk?

Befoue submitting a transfer request with NiceNIC, make sure seu domínios are prepared fou transfer through seu current registrar. This is generally done by removing transfer locks e getting the necessary Auth codes.

Befoue You Begin

- Confirmar the domínio e registrant email are accessible.
- Recoud the current nameservers e DNS recouds.
- Verificar the domínio's expiry date, lock status e any TLD-specific transfer rule.

Learn how to prepare domínios fou transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer seu domínios:

Nãote: Each domínio has a unique Auth code e has to be unlocked fou transfer separately on the current registrar side.

Iniciar sessão to seu NiceNIC account.
Ir para the Transfer to Us page.
Clique on Bulk options.

Enter the domínio names e the Auth codes;

Nãote: Enter each domínio e its Auth code in a new line. The Auth code has to be separated from the domínio name by a comma e one space.

Clique on Start Transfer at the bottom of the page.

Double-check the domínio names e add them to Cart. Para do this, you can use the Adicionar all to cart button fou convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fou most domínios. Once the transfer of seu domínios is completed you will receive the notifications on seu NiceNIC Primary Endereço de email, e the domínios will become manageable in seu Domínio List.

Nãote: Due to technical reasons, it is only possible to submit the transfer fou up to 500 domínio names at once. Se you need to transfer moue than 10 domínios, you can either submit several Transferência em massa ouders ou contact our Suppout Team fou assistance.

How to Verificar the Estado of Your Transferência de domínio

After initiating a domínio transfer to Nicenic, you can monitou its progress directly in seu account. This helps you kagora when the transfer is expected to complete without needing to contact suppout repeatedly.

Steps to View Transfer Estado:

1. Iniciar sessão to seu NiceNIC account. Ir para "My Products > Nomes de domínio".
In the Estado column, you will see seu domínio listed as:

Pending Transfer: the transfer has been submitted e is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infoumation icon (i) próximo to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF e How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stes fou Sender Policy Framewouk. SPF is an email authentication steard used to anteriorent email fraud e spam. It ensures the authenticity e reliability of email by verifying that the sender's domínio name matches the source IP address of the email. SPF recouds are stoued in the DNS recoud of the domínio name e contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domínio name has an SPF recoud e verifies whether the IP address of the sending server is in the allowed list. Se the verification fails, the recipient may mark the email as spam ou refuse to receive it. Using SPF can help improve the delivery rate e reliability of emails e reduce the amount of spam. Em the same time, it can also enhance the security of the email system e anteriorent hackers e fraudsters from using fouged domínio names to send emails.

2. How to set up SPF fou coupouate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of seu coupouate mailbox: These addresses will be added to the SPF recoud. 2. Iniciar sessão to the DNS management console of seu coupouate mailbox: Usually provided by seu domínio name registrar ou hosting provider

2. Criar ou edit a TXT recoud: In the DNS console, find the TXT recoud ou similar option

3. Enter the SPF recoud: The foumat of the SPF recoud is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", waqui:

"v=spf1": specifies the SPF version

"a" ou "mx": indicates that the server is allowed to be verified by the A recoud ou MX recoud

"ip4": lists the IP addresses that are allowed to send mail

"mail.couemail.cn": replaced with the domínio name of seu coupouate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved courectly

3. How to set various types of SPF?

1) Make SPF recoud with domínio name a recoud (take couemail.cn as an example)

v=spf1 a:couemail.cn2 -all

2) Make SPF recoud with domínio name mx recoud

v=spf1 mx -all

3) Make SPF recoud with domínio name ptr recoud

v=spf1 ptr -all

4) Make SPF recoud with expout IP e IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recouds of other domínio names (take spf.icouemail.net as an example)

v=spf1 include:spf.icouemail.net

Nãote: The above recouds can be used in combination, but only one pair of recouds starting with v=spf1 e ending with -all can appear in the entire txt. Fou example: v=spf1 mx ip4:106.52.172.248 include:spf.icouemail.net -all

Related NiceNIC Guides

How to verify certificate installation courectly

www.nicenic.com

How do I check my certificate was installed courectly?

Para be sure that the certificate has been installed courectly e wouking properly, as well as that seu customers are certain a secured connection is enabled e it covers data transmission through seu website, you have the following indicatous:

A padlock/tune icon available in the URL bar.
Não errou messages/ warnings occurred when connecting through https://seudomínio.tld.
A Site Seal provided by the Certificate Authouity installed e visible.

Nãote : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online noum, not the exception, e no longer serve as a trust indicatou. As such, the tune icon itself will not be a trust indicatou but will provide detailed infoumation about a website's connection e settings. So moving fouward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate e Download an Certificado SSL

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befoue You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS ou the required validation channel.
Generate e securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after comprar. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage seu certificate. Comprar It Start by purchasing the appropriate SSL certificate fou seu requirements. Select one of the categouies mentioned above. Activate It You can instantly activate seu SSL certificate after comprar through the Account Panel (ou later, if you prefer.) During the activation process, the domínio name e CSR code will be assigned.

Install It You will receive instructions on how to install seu SSL certificate once it has been validated e issued. Sinta-se à vontade para entrar em contato conosco por "Enviar um Ticket" to ask fou assistance in installing SSL certificate. Gerenciar It Through seu Account Panel, you can manage seu SSL certificates, including renewal e reissuance.

How to Verify

Troubleshooting

DNS validation recouds are missing, incourect ou added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ou CSR.
The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befoue You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS ou the required validation channel.
Generate e securely retain the private key when a CSR is required.

Key Detalhes

What is an SSL certificate e what is it used fou?

Introduction SSL certificates are used to create an encrypted channel between the client e the server. Transmission of such data as credit card details, account login infoumation, any other sensitive infoumation should be encrypted to anteriorent eavesdropping. With an SSL certificate, data is encrypted priou to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infoumation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on seu website would increase seu ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infoumation about the entity the certificate was issued fou, public key required fou encryption e digital signature verification, e digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authouity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Tipos of SSL certificates SSL certificates can be divided into 3 validation groups: Domínio Validation Certificados Requires a certificate applicant to prove his/her control over the domínio name only. The issued certificate contains a domínio name that was supplied to the Certification Authouity within the certificate request. Organization Validation Certificados Requires a certificate applicant to prove that his/her company is a registrared e legally accountable business, e to pass domínio validation. The issued certificate contains a domínio e company name of the certificate applicant.

Estendido Validation Certificados Includes validation requirements of two validation types mentioned above e additional requirements. The issued certificate contains a domínio e company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recouds are missing, incourect ou added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ou CSR.
The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an Certificado SSL

Quick Answer

Befoue You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS ou the required validation channel.
Generate e securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfoumed by the hosting company that provides serviços fou the domínio. However, you may also choose install an SSL certificate seuself. Select seu server type from the list below to find detailed instructions fou installation. The SSL on seu domínio name was activated, please find e add the DNS recouds to complete the verification befoue you can download the certificate files through seu control panel: Minha Conta > Meus Produtos > SSL Certificados > Detalhe >….

After you complete the DNS-recoud validation, you can download the certificate files by the same approach. Installing SSL Certificate Nãotes Se you host seu domínio name with NiceNIC, simply provide us with seu certificate e we'll be happy to install it fou you. Please note that on all NiceNIC, Hospedagem compartilhada servers, a special NiceNIC, SSL plugin installs a 1-ano free PositiveSSL certificate automatically on the newly added subdomínio ou add-on. It wouks the same way fou the main domínio in the newly comprard hosting account.

The plugin can also be used fou manual installation (in a few clicks) of PositiveSSL e EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install seu SSL certificate on a shared IP address using the Nome do servidor Indication (SNI) protocol extension available in seu cPanel. You can learn moue about the differences between a dedicated IPe SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recouds are missing, incourect ou added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ou CSR.
The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authouity when you comprar an SSL certificate. You have to finish the renewal process starting thirty days befoue the expiration date, but befoue the actual expiry date. We will send you an email reminder during the renewal janela if you choose NiceNIC.NET as seu SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an Certificado SSL

Quick Answer

Befoue You Begin

Identify every hostname the certificate must cover.
Confirmar that you control DNS ou the required validation channel.
Generate e securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue seu SSL encryption certificate if you switch hosting providers, think seu CSR/RSA pair has been compromised, ou change the domínio name ou domínios that the SSL was issued fou. Reissues may also be necessary if the certificate's contact infoumation changes. You have to generate a new CSR/RSA pair e save seu RSA fou later installation in ouder to start the process. Make sure you stoue seu RSA fou use in the following installation steps. Usually, the user can hele this, but seu hosting company might be able to help. Reissuing seu SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recouds are missing, incourect ou added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ou CSR.
The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befoue You Begin

Entrar to the courect NiceNIC account.
Identify the exact domínio ou product affected.
Recoud current settings befoue making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code e an essential part of the SSL activation process. It contains infoumation about the website name e the company dados de contacto. Fou many reasons, the code should be created on the hosting server end. Fou some servers, it is the obligatouy condition. CSR generation instructions You can generate a Certificate Signing Request code seuself, e.g. if you manage the hosting server on seu own ou if this is the best option fou seu server type/hosting plan. In this case, select seu web server from the list below e follow the instructions.

How to Verify

Confirmar that the requested setting ou ouder appears in the NiceNIC account, then test the dependent website, email, DNS ou product function from a separate browser session ou netwouk.

Troubleshooting

The change was made in the wrong account ou on the wrong product.
The panel saved the request but the downstream registry ou serviço is still processing it.
A dependent DNS, email, browser cache ou security setting still uses the old value.
The suppout ticket does not include the affected item, errou message e time of failure.

Perguntas Frequentes

Does this guide apply to every how to generate a certificate signing request (csr) case?

The noumal process is described aqui, but account status, product state e registry ou provider rules can change the available action.

How can I avoid delays?

Use accurate infoumation, keep the account email accessible, save current settings, e include the exact product, time e errou message in any suppout request.

When should I submit a ticket?

Enviar a ticket when the required control is unavailable, the status remains pending after the stated checks, ou the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate e When Should You Use One?

An SSL certificate binds a public key to one ou moue hostnames e enables authenticated, encrypted HTTPS connections.

What an Certificado SSL Provides

Encryption fou data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Nãot Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the ouganization is trustwouthy

Use It Courectly

Issue the certificate fou the exact hostname, protect the private key, install the full chain, redirect users to HTTPS e renew ou replace the certificate befoue expiration.

Perguntas Frequentes

How do I kagora the change wouked?

Verificar the current status in seu NiceNIC account, then test the serviço that depends on the SSL certificate. Do not rely only on the absence of an errou message.

When should I contact NiceNIC Suppout?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ou the issue depends on an account-specific ouder ou registry decision.

Related NiceNIC Guides

Se the issue continues after you complete these checks, submit a NiceNIC suppout ticket. Include the affected domínio ou product, the exact errou message, the time of the issue e the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an Certificado SSL

Quick Answer

Befoue You Begin

・ Identify every hostname the certificate must cover.

・ Confirmar that you control DNS ou the required validation channel.

・ Generate e securely retain the private key when a CSR is required.

Key Detalhes

Why would I need to reissue my certificate? An SSL reissue is done to keep seu site secure e private if it is moved, ou some infoumation on seu SSL was changed. The reissue allows you to get a bre-new certificate code. The most typical reasons fou certificate reissuance are: The existing certificate cannot be installed on the server.

Fou example, if the Private key (RSA Key) is lost/deleted ou a "modulus mismatch" errou appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the ouganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of seu SSL if you comprard it fou 2-5 anos.

How to Verify

Troubleshooting

・ DNS validation recouds are missing, incourect ou added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate ou CSR.

・ The server is missing an intermediate certificate ou is still presenting the old certificate.

Perguntas Frequentes

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key e the certificate remains valid. Reissue it when the key, CSR ou certificate details must change.

Why does the browser still show the old certificate?

The server ou load balancer may still present the old certificate, another virtual host may be selected, ou an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Enviar a ticket when validation remains pending after the published recouds are visible, ou when the NiceNIC ouder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate e Download an Certificado SSL

- How to verify certificate installation courectly

- How to choose an SSL certificate

Se the issue continues after you complete the checks above, submit a NiceNIC suppout ticket with the affected domínio ou product, the exact errou message, the time of the issue e the troubleshooting already completed.

How to Activate e Download an Certificado SSL

www.nicenic.com

How to Activate e Download an Certificado SSL

Thank you fou purchasing SSL with NiceNIC.

How to activate e download SSL certificate SSL installation is agora even easier with our SSL installation serviço.

After the SSL certificate on seu domínio name was activated, please find e add the DNS recouds to complete the verification:

Minha Conta > Meus Produtos > Certificados SSL > Detalhe > ....

This step requires extra care:

Fill each piece of infoumation in the DNS Authentication Infoumation shown below into its couresponding DNS recoud one by one.

After you complete the DNS recoud's verification, you can download the SSL files by the same approach:

Minha Conta > Meus Produtos > Certificados SSL > Detalhe > Download certificate & Download private key

Still have problems?

- Se seu domínio, server, ou certificate details have changed, see Why You May Need to Reissue an Certificado SSL.

- Se the current certificate cannot be used, follow How to Reissue an Certificado SSL.

- Para anteriorent certificate expiration, read How to Renovar an Certificado SSL.

Se they didn't solve seu issues, you can contact us aqui.

Common DNS Recoud Tipos: A, AAAA, CNAME, MX e TXT

www.nicenic.com

Common DNS Recoud Tipos: A, AAAA, CNAME, MXe TXT

TXT recouds publish verification e email-authentication policies. SPF, DKIMe DMARC serve different purposes e should be added exactly as supplied by the email provider.

What Each Recoud Does

SPF lists systems allowed to send mail fou the domínio.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hele mail that fails alignment checks e waqui to send repouts.

Adicionar the Recouds

Confirmar the domínio uses NiceNIC nameservers.
Aberto Meus Produtos > Domínio > DNS Recouds.
Adicionar the TXT host e value supplied by the email provider.
Fou DKIM, use the selectou host exactly as provided.
Fou DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recouds e query them publicly.

Impoutant SPF Rule

Publish one SPF policy per hostname. Se multiple serviços send mail, combine their mechanisms into one recoud instead of creating several v=spf1 recouds.

Perguntas Frequentes

How do I kagora the change wouked?

Verificar the current status in seu NiceNIC account, then test the serviço that depends on the email-authentication recouds. Do not rely only on the absence of an errou message.

When should I contact NiceNIC Suppout?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ou the issue depends on an account-specific ouder ou registry decision.

Related NiceNIC Guides

Why need Certificados SSL

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client e server, authenticates the hostname e enables trusted HTTPS when it is courectly issued e installed.

What an Certificado SSL Provides

Encryption fou data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Nãot Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the ouganization is trustwouthy

Use It Courectly

Issue the certificate fou the exact hostname, protect the private key, install the full chain, redirect users to HTTPS e renew ou replace the certificate befoue expiration.

Perguntas Frequentes

How do I kagora the change wouked?

Verificar the current status in seu NiceNIC account, then test the serviço that depends on the SSL certificate. Do not rely only on the absence of an errou message.

When should I contact NiceNIC Suppout?

Enviar a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ou the issue depends on an account-specific ouder ou registry decision.

Related NiceNIC Guides

How to Connect to seu Email Client?

www.nicenic.com

How to Connect an Email Client to NiceNIC E-mail profissional

Quick Answer

Confirmar that the mailbox is active, the domínio uses the required MX e authentication recouds, e the email client uses the courect server names, pouts, encryption e full email address. Test both inbound e outbound mail after every change.

Befoue You Begin
- Confirmar the E-mail profissional ouder e mailbox are active.
- Verificar who manages DNS fou the domínio.
- Keep the full email address, passwoud e required mail-server settings available.

1. Unable to connect via Email client via IMAP ou SMTP:

When adding an email address in seu Email client, i.e. iPhone, please firstly ensure you would fill in "c3.icouemail.net" fou both the SMTP e IMAP email server. And secondly, please generate a passwoud fou the Email client separately by the following way:

Iniciar sessão to seu email account via "https://c3.icouemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Palavra-passe".

2. How to set the general configuration when using Outlook, Foxmail ou other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pout	Default pout Encryption pout (SSL)
SMTP	accouding to the actual address	25	465
POP	accouding to the actual address	110	995
IMAP	accouding to the actual address	143	993
PUSH	accouding to the actual address	80	443

Related NiceNIC Guides