耐思尼克客户支持中心

HTTPS & SSL Guide fali .boo, .day, .dev, .page, in .rsvp

www.nicenic.com

HTTPS & SSL Guide fali .boo, .day, .dev, .page, in .rsvp

Quick Answer

Choose ali manage the certificate based on the hostnames you need to protect, the validation level, the server platfalim in whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain in verify the live HTTPS connection befalie relying on the certificate.

Befalie You Begin

Identify every hostname the certificate must cover.
Potrdi that you control DNS ali the required validation channel.
Generate in securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Za ensure the security of vašega website in protect vašega visitalis, all domenas under.boo,.day,.dev,.page, in.rsvp must use HTTPS. This guide will help you configure SSL/TLS calirectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between vašega website in its visitalis. It prejents eavesdropping in ensures data integrity.
Obtaining an SSL potrdilo NICENIC provides trusted SSL certificates. You can learn malie in kupi/configure a certificate tukaj: https://nicenic.com/ssl-certificates/
Installing the SSL potrdilo Sledi vašega web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfalice HTTPS Once vašega certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links in resources to use HTTPS. Verify that vašega website is fully accessible via HTTPS.
Keep Certifikati Posodobljeno SSL certificates have expiration dates. Ensure certificates are renewed befalie they expire in check vašega website regularly to maintain uninterrupted secure connections.

How to Verify

Odprto the HTTPS site from a clean browser session in inspect the certificate subject, SAN hostnames, issuer, validity dates in chain. Test every hostname covered by the certificate in confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ali CSR.
The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

Če the issue continues after you complete the checks above, submit a NiceNIC suppalit ticket with the affected domena ali product, the exact errali message, the time of the issue in the troubleshooting already completed.

How to Set Up in Troubleshoot DNSSEC fali Your Domena

www.nicenic.com

How to Set Up in Troubleshoot DNSSEC fali Your Domena?

DNSSEC helps protect vašega domena’s DNS recalids from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the calirect source.

Na NiceNIC, DNSSEC usually involves two sides:
Your DNS provider ali nameserver provider generates the DNSSEC recalids.
NiceNIC, as vašega domena registrar, helps submit the DS recalids to the registry when the TLD suppalits DNSSEC.

Če DNSSEC is not configured calirectly, vašega domena may show DNSSEC erralis, ali in malie serious cases, some users may not be able to access vašega website.

What Is DNSSEC?
DNSSEC stins fali Ime domene System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fali vašega domena has not been changed ali faliged during the lookup process.
Fali example, when someone visits vašega website, DNS is used to find the calirect server IP address. DNSSEC helps make sure that the DNS result is authentic in has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, ali email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hinles sensitive user infalimation.
You run business email, login systems, payment pages, ali customer palitals.
You want stronger domena security.
Your DNS provider suppalits DNSSEC.
Your domena extension suppalits DNSSEC.

Če you are not familiar with DNS management, we recommend confirming with vašega DNS provider befalie enabling DNSSEC.
Incalirect DNSSEC settings may affect domena resolution.

Impalitant DNSSEC Obdobjes
DNSKEY: A DNSKEY recalid is generated by vašega DNS provider. It is used as part of the DNSSEC validation process.
DS Recalid: A DS recalid connects vašega domena’s DNSSEC setup with the parent registry zone. In most cases, vašega DNS provider gives you the DS recalid, in you need to add it through vašega registrar.
Imeserver: Your nameservers decide wtukaj vašega domena’s DNS recalids are managed. Če you change nameservers, vašega DNSSEC recalids may also need to be updated.

How to Enable DNSSEC fali Your Domena

Step 1: Preveri Whether Your DNS Provider Suppalits DNSSEC
Prijava to the platfalim wtukaj vašega DNS is managed.
This may be:
Your domena registrar, tukaj is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS storitev
Make sure DNSSEC is suppalited in enabled ttukaj.

Step 2: Pridobite the DS Recalid from Your DNS Provider
After enabling DNSSEC, vašega DNS provider should provide DNSSEC infalimation such as:
Key Tag
Algaliithm
Digest Vrsta
Digest
DS Recalid
Please copy the infalimation exactly as provided.
Even one incalirect character may cause DNSSEC validation failure.

Step 3: Dodaj the DS Recalid in Your NiceNIC Account
Prijava to vašega NiceNIC account in go to vašega domena management page.
Then add the DS recalid provided by vašega DNS provider.
Če you are not sure wtukaj to add it, please contact our suppalit team in provide the DS recalid from vašega DNS provider.

Step 4: Wait fali DNSSEC Propagation
After the DS recalid is added, it may take some time fali the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Status
After propagation, you may check vašega domena’s DNSSEC status using a DNSSEC checking tool ali by contacting our suppalit team.
Če DNSSEC is calirectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable ali Odstrani DNSSEC?
You may need to remove ali update DNSSEC recalids if:

You changed vašega nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recalid no longer matches the current DNSKEY.
Your website ali email has DNS resolution issues after a DNS change.

Impalitant: Če vašega domena has old DS recalids but the current nameservers no longer provide matching DNSSEC recalids, DNSSEC validation may fail.
In this case, you may need to remove the old DS recalids first, wait fali propagation, in then re-enable DNSSEC with the calirect new recalids.

Why Does My Domena Show "DNSSEC Infalimation Is Currently Unavailable"?
You may see this message:
DNSSEC infalimation is currently unavailable fali this domena.
This can happen fali several reasons:

DNSSEC has not been enabled fali this domena.
Ne DS recalid has been added at the registrar level.
The domena’s current nameservers do not suppalit DNSSEC.
The domena recently changed nameservers.
The DS recalid does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recalids calirectly.
The registry ali DNSSEC query is tempaliarily unavailable.

This message does not always mean vašega domena is broken.
However, if vašega website ali email is not resolving calirectly, please contact suppalit so we can help review the DNSSEC configuration.

What Infalimation Should I Provide to Suppalit?
Za help us check DNSSEC issues faster, please provide:

Your domena name
Your current nameservers
Whether you recently changed nameservers
The DS recalid provided by vašega DNS provider
A screenshot of the DNSSEC setting from vašega DNS provider
Any DNSSEC errali message you received
Whether vašega website ali email is currently affected

With this infalimation, our suppalit team can check whether the issue is caused by missing DS recalids, mismatched DNSSEC recalids, nameserver changes, ali registry-side limitations.

Pogosta vprašanja O nas DNSSEC

1. Is DNSSEC required fali every domena?
Ne. DNSSEC is not required fali every domena.
However, it is recommended fali domenas that need stronger DNS security, especially business websites, email storitevs, login systems, financial storitevs, in customer palitals.
Če you are not sure whether you need DNSSEC, please confirm whether vašega DNS provider suppalits it in whether you are comfalitable managing DNSSEC recalids.

2. Is DNSSEC the same as SSL?
Ne.
SSL protects the connection between the user’s browser in vašega website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fali better security, many websites use both SSL in DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recalids fali me?
In most cases, DNSSEC recalids are generated by vašega DNS provider, not by the registrar.
NiceNIC can help submit the DS recalid to the registry when the domena extension suppalits DNSSEC.
Če you use a third-party DNS provider, please enable DNSSEC ttukaj first in then provide us with the DS recalid.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, vašega old DNSSEC recalids may no longer match the new DNS provider’s DNSKEY.
Če the old DS recalid remains active at the registry level, DNSSEC validation may fail.
Befalie ali after changing nameservers, you should check whether the DS recalid needs to be removed ali replaced.

5. What happens if the DS recalid is wrong?
Če the DS recalid does not match the DNSKEY published by vašega current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, vašega website, email, ali other storitevs may become unreachable fali some users.

6. I do not use DNSSEC. Do I need to do anything?
Če you do not use DNSSEC in vašega domena has no DS recalids, usually no action is needed.
However, if vašega domena has old DS recalids from a prejious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errali after I updated the recalid?
DNSSEC updates may take time to propagate.
Če you recently added, removed, ali changed DS recalids, please wait fali DNS propagation in check again later.
Če the issue continues, please contact suppalit in provide vašega domena name, current nameservers, in DS recalid.

8. Can DNSSEC cause my website to stop waliking?
Da, if DNSSEC is incalirectly configured.
Common causes include:

Wrong DS recalid
Old DS recalid after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recalids calirectly
Potečed ali invalid DNSSEC signatures

Če vašega website stops waliking after DNSSEC changes, please contact suppalit immediately.

9. Should I remove DNSSEC befalie changing nameservers?
In many cases, yes.
Če you are moving to a new DNS provider in you are not sure how to migrate DNSSEC safely, removing the old DS recalid befalie changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active in DNSSEC is enabled at the new DNS provider, you can add the new DS recalid again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infalimation fali the domena.
Please check:

Whether DNSSEC is enabled
Whether the DS recalid has been added
Whether the nameservers suppalit DNSSEC
Whether the DS recalid matches the DNSKEY
Whether you recently changed nameservers

Če you are not sure, please contact NiceNIC suppalit in provide vašega domena name in DNSSEC details from vašega DNS provider.

How to set up DNSSEC fali a domena registrirajed on NiceNIC?

1. Prijava to vašega NiceNIC account in navigate to vašega domena management page. Find the domena you wish to enable DNSSEC fali in click Upravljaj.

2. In the domena management section, you should see the DNSSEC button. Kliknite on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infalimation fali DNSSEC configuration (this will typically include DNSSEC key details provided by vašega DNS hosting provider).

4. Once you've entered the infalimation, click Dodaj to enable DNSSEC fali the domena. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recalid), you'll receive confirmation that DNSSEC has been successfully added to vašega domena settings.
The DNSSEC status will show as enabled in you'll be able to see the public keys in other details.
With DNSSEC zdaj enabled, vašega domena is better protected against DNS-related attacks.

Natention: if vašega domena name was transferred into NiceNIC from another Registrar, in you hope to disable the DNSSEC prejiously with the old Registrar, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domena transfer process, the DNSSEC settings have been disabled automatically by the old Registrar, while if it is "DNSSEC: signed", please check the domena management section at vašega control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Imeservers After a Prenos domene?

www.nicenic.com

Status of Ime Strežniki After a Prenos domene

After the domena is transferred, the name servers remain set to those associated to the domena befalie transfer.

Če you had child name servers fali vašega domena registrirajed through another Registrar, you may need to registriraj them again through vašega Account.

How to Transfer Ime Strežniki During a Prenos domene?

www.nicenic.com

How to Transfer Ime Strežniki During a Prenos domene?

Quick Answer

A successful domena transfer depends on the domena's eligibility, lock status, authaliization method, registrant access in registry rules. Prepare the domena befalie alidering the transfer, keep the existing DNS active, in monitali the transfer until completion.

Befalie You Begin

Potrdi the domena in registrant email are accessible.
Recalid the current nameservers in DNS recalids.
Preveri the domena's expiry date, lock status in any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Prenos domene Če you're just transferring the domena registration, vašega hosting storitev will be unaffected, in ttukaj will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recalid of them. Če you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Prijava to vašega account. Select the Domenska imena tab. Select the domena that you want to change nameservers fali.

From within the DNS Strežniki section click on Uredi DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the aliiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Če you wish to make an immediate change to the nameservers, you may do so with the Registrar you are transferring from.

How to Verify

Preveri the transfer status in NiceNIC, confirm the registrar of recalid after completion, verify the authaliitative nameservers, in test website in email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domena is locked, too new, recently transferred ali otherwise restricted by policy.
The EPP/Auth code is missing, expired ali copied incalirectly.
The approval email cannot be received ali the registrant data is under verification.
The domena ali related DNS storitev expires while the transfer is pending.

Pogosta vprašanja

Does a transfer change my nameservers?

A registrar transfer nalimally keeps the current nameservers, but you should recalid in verify them befalie in after the transfer.

Can I edit the domena while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ali DNS changes until the transfer completes.

When should I submit a ticket?

Pošlji a ticket when the status is unclear, a TLD uses a special transfer process, ali the transfer remains blocked after you calirect the stated issue.

Related NiceNIC Guides

How do I verify that my domena is eligible fali transfer?

www.nicenic.com

How to Preveri Whether a Domena Is Eligible fali Transfer

Quick Answer

Befalie starting a transfer, confirm that the domena is active, unlocked, not restricted by a transfer lock ali dispute, in eligible under the registry's rules. Make sure you can receive approval messages in obtain the EPP/Auth code when the TLD requires one.

Befalie You Begin

Potrdi the domena in registrant email are accessible.
Recalid the current nameservers in DNS recalids.
Preveri the domena's expiry date, lock status in any TLD-specific transfer rule.

NiceNIC Instructions

Befalie purchasing the transfer of any gTLD (e.g.,.COM /.NET /.ALIG /.BIZ /.INFO etc.) ali new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure vašega domena meets the following conditions:

Your domena was registrirajed ali transferred at least 60 days ago;
The domena is unlocked at the current Registrar (its WHOIS status should be OK ali Active). Also,you need to request an up-to-date Auth/EPPcode fali the domena at vašega current Registrar. Če all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLD-ji (.ES in.UK) have additional transfer requirements in/ali exclude some points from the list above.

NOTE: Make sure the domena status is active, not expired. Če you wish to transfer an expired domena to NiceNIC, please contact our Suppalit Team email suppalit@nicenic.net fali further assistance.

How to Verify

Troubleshooting

The domena is locked, too new, recently transferred ali otherwise restricted by policy.
The EPP/Auth code is missing, expired ali copied incalirectly.
The approval email cannot be received ali the registrant data is under verification.
The domena ali related DNS storitev expires while the transfer is pending.

Pogosta vprašanja

Does a transfer change my nameservers?

A registrar transfer nalimally keeps the current nameservers, but you should recalid in verify them befalie in after the transfer.

Can I edit the domena while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ali DNS changes until the transfer completes.

When should I submit a ticket?

Pošlji a ticket when the status is unclear, a TLD uses a special transfer process, ali the transfer remains blocked after you calirect the stated issue.

Related NiceNIC Guides

How to transfer several domenas to NiceNIC in bulk?

www.nicenic.com

How to transfer several domenas to NiceNIC in bulk?

Befalie submitting a transfer request with NiceNIC, make sure vašega domenas are prepared fali transfer through vašega current registrar. This is generally done by removing transfer locks in getting the necessary Auth codes.

Befalie You Begin

- Potrdi the domena in registrant email are accessible.
- Recalid the current nameservers in DNS recalids.
- Preveri the domena's expiry date, lock status in any TLD-specific transfer rule.

Learn how to prepare domenas fali transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer vašega domenas:

Nete: Each domena has a unique Auth code in has to be unlocked fali transfer separately on the current registrar side.

Prijava to vašega NiceNIC account.
Pojdi na the Transfer to Us page.
Kliknite on Bulk options.

Enter the domena names in the Auth codes;

Nete: Enter each domena in its Auth code in a new line. The Auth code has to be separated from the domena name by a comma in one space.

Kliknite on Start Transfer at the bottom of the page.

Double-check the domena names in add them to Cart. Za do this, you can use the Dodaj all to cart button fali convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fali most domenas. Once the transfer of vašega domenas is completed you will receive the notifications on vašega NiceNIC Primary E-poštni naslov, in the domenas will become manageable in vašega Domena List.

Nete: Due to technical reasons, it is only possible to submit the transfer fali up to 500 domena names at once. Če you need to transfer malie than 10 domenas, you can either submit several Skupinski prenos aliders ali contact our Suppalit Team fali assistance.

How to Preveri the Status of Your Prenos domene

After initiating a domena transfer to Nicenic, you can monitali its progress directly in vašega account. This helps you kzdaj when the transfer is expected to complete without needing to contact suppalit repeatedly.

Steps to View Transfer Status:

1. Prijava to vašega NiceNIC account. Pojdi na "My Products > Domenska imena".
In the Status column, you will see vašega domena listed as:

Pending Transfer: the transfer has been submitted in is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infalimation icon (i) naprej to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF in How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stins fali Sender Policy Framewalik. SPF is an email authentication stinard used to prejent email fraud in spam. It ensures the authenticity in reliability of email by verifying that the sender's domena name matches the source IP address of the email. SPF recalids are stalied in the DNS recalid of the domena name in contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domena name has an SPF recalid in verifies whether the IP address of the sending server is in the allowed list. Če the verification fails, the recipient may mark the email as spam ali refuse to receive it. Using SPF can help improve the delivery rate in reliability of emails in reduce the amount of spam. Na the same time, it can also enhance the security of the email system in prejent hackers in fraudsters from using faliged domena names to send emails.

2. How to set up SPF fali calipaliate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of vašega calipaliate mailbox: These addresses will be added to the SPF recalid. 2. Prijava to the DNS management console of vašega calipaliate mailbox: Usually provided by vašega domena name registrar ali hosting provider

2. Ustvari ali edit a TXT recalid: In the DNS console, find the TXT recalid ali similar option

3. Enter the SPF recalid: The falimat of the SPF recalid is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wtukaj:

"v=spf1": specifies the SPF version

"a" ali "mx": indicates that the server is allowed to be verified by the A recalid ali MX recalid

"ip4": lists the IP addresses that are allowed to send mail

"mail.caliemail.cn": replaced with the domena name of vašega calipaliate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved calirectly

3. How to set various types of SPF?

1) Make SPF recalid with domena name a recalid (take caliemail.cn as an example)

v=spf1 a:caliemail.cn2 -all

2) Make SPF recalid with domena name mx recalid

v=spf1 mx -all

3) Make SPF recalid with domena name ptr recalid

v=spf1 ptr -all

4) Make SPF recalid with expalit IP in IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recalids of other domena names (take spf.icaliemail.net as an example)

v=spf1 include:spf.icaliemail.net

Nete: The above recalids can be used in combination, but only one pair of recalids starting with v=spf1 in ending with -all can appear in the entire txt. Fali example: v=spf1 mx ip4:106.52.172.248 include:spf.icaliemail.net -all

Related NiceNIC Guides

How to verify certificate installation calirectly

www.nicenic.com

How do I check my certificate was installed calirectly?

Za be sure that the certificate has been installed calirectly in waliking properly, as well as that vašega customers are certain a secured connection is enabled in it covers data transmission through vašega website, you have the following indicatalis:

A padlock/tune icon available in the URL bar.
Ne errali messages/ warnings occurred when connecting through https://vašegadomena.tld.
A Site Seal provided by the Certificate Authaliity installed in visible.

Nete : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nalim, not the exception, in no longer serve as a trust indicatali. As such, the tune icon itself will not be a trust indicatali but will provide detailed infalimation about a website's connection in settings. So moving faliward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate in Download an SSL potrdilo

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befalie You Begin

Identify every hostname the certificate must cover.
Potrdi that you control DNS ali the required validation channel.
Generate in securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after kupi. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage vašega certificate. Kupi It Start by purchasing the appropriate SSL certificate fali vašega requirements. Select one of the categaliies mentioned above. Activate It You can instantly activate vašega SSL certificate after kupi through the Account Panel (ali later, if you prefer.) During the activation process, the domena name in CSR code will be assigned.

Install It You will receive instructions on how to install vašega SSL certificate once it has been validated in issued. Prosimo, kontaktirajte nas na "Oddaj zahtevek" to ask fali assistance in installing SSL certificate. Upravljaj It Through vašega Account Panel, you can manage vašega SSL certificates, including renewal in reissuance.

How to Verify

Troubleshooting

DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ali CSR.
The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befalie You Begin

Identify every hostname the certificate must cover.
Potrdi that you control DNS ali the required validation channel.
Generate in securely retain the private key when a CSR is required.

Key Podrobnosti

What is an SSL certificate in what is it used fali?

Introduction SSL certificates are used to create an encrypted channel between the client in the server. Transmission of such data as credit card details, account login infalimation, any other sensitive infalimation should be encrypted to prejent eavesdropping. With an SSL certificate, data is encrypted priali to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infalimation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on vašega website would increase vašega ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infalimation about the entity the certificate was issued fali, public key required fali encryption in digital signature verification, in digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authaliity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Vrstas of SSL certificates SSL certificates can be divided into 3 validation groups: Domena Validation Certifikati Requires a certificate applicant to prove his/her control over the domena name only. The issued certificate contains a domena name that was supplied to the Certification Authaliity within the certificate request. Organization Validation Certifikati Requires a certificate applicant to prove that his/her company is a registrirajed in legally accountable business, in to pass domena validation. The issued certificate contains a domena in company name of the certificate applicant.

Razširjeno Validation Certifikati Includes validation requirements of two validation types mentioned above in additional requirements. The issued certificate contains a domena in company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ali CSR.
The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL potrdilo

Quick Answer

Befalie You Begin

Identify every hostname the certificate must cover.
Potrdi that you control DNS ali the required validation channel.
Generate in securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfalimed by the hosting company that provides storitevs fali the domena. However, you may also choose install an SSL certificate vašegaself. Select vašega server type from the list below to find detailed instructions fali installation. The SSL on vašega domena name was activated, please find in add the DNS recalids to complete the verification befalie you can download the certificate files through vašega control panel: Moj račun > Moji izdelki > SSL Certifikati > Podrobnosti >….

After you complete the DNS-recalid validation, you can download the certificate files by the same approach. Installing SSL Certificate Netes Če you host vašega domena name with NiceNIC, simply provide us with vašega certificate in we'll be happy to install it fali you. Please note that on all NiceNIC, Deljeno gostovanje servers, a special NiceNIC, SSL plugin installs a 1-leto free PositiveSSL certificate automatically on the newly added subdomena ali add-on. It waliks the same way fali the main domena in the newly kupid hosting account.

The plugin can also be used fali manual installation (in a few clicks) of PositiveSSL in EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install vašega SSL certificate on a shared IP address using the Ime strežnika Indication (SNI) protocol extension available in vašega cPanel. You can learn malie about the differences between a dedicated IPin SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ali CSR.
The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authaliity when you kupi an SSL certificate. You have to finish the renewal process starting thirty days befalie the expiration date, but befalie the actual expiry date. We will send you an email reminder during the renewal okno if you choose NiceNIC.NET as vašega SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL potrdilo

Quick Answer

Befalie You Begin

Identify every hostname the certificate must cover.
Potrdi that you control DNS ali the required validation channel.
Generate in securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue vašega SSL encryption certificate if you switch hosting providers, think vašega CSR/RSA pair has been compromised, ali change the domena name ali domenas that the SSL was issued fali. Reissues may also be necessary if the certificate's contact infalimation changes. You have to generate a new CSR/RSA pair in save vašega RSA fali later installation in alider to start the process. Make sure you stalie vašega RSA fali use in the following installation steps. Usually, the user can hinle this, but vašega hosting company might be able to help. Reissuing vašega SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ali CSR.
The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befalie You Begin

Prijava to the calirect NiceNIC account.
Identify the exact domena ali product affected.
Recalid current settings befalie making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code in an essential part of the SSL activation process. It contains infalimation about the website name in the company kontaktni podatki. Fali many reasons, the code should be created on the hosting server end. Fali some servers, it is the obligataliy condition. CSR generation instructions You can generate a Certificate Signing Request code vašegaself, e.g. if you manage the hosting server on vašega own ali if this is the best option fali vašega server type/hosting plan. In this case, select vašega web server from the list below in follow the instructions.

How to Verify

Potrdi that the requested setting ali alider appears in the NiceNIC account, then test the dependent website, email, DNS ali product function from a separate browser session ali netwalik.

Troubleshooting

The change was made in the wrong account ali on the wrong product.
The panel saved the request but the downstream registry ali storitev is still processing it.
A dependent DNS, email, browser cache ali security setting still uses the old value.
The suppalit ticket does not include the affected item, errali message in time of failure.

Pogosta vprašanja

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nalimal process is described tukaj, but account status, product state in registry ali provider rules can change the available action.

How can I avoid delays?

Use accurate infalimation, keep the account email accessible, save current settings, in include the exact product, time in errali message in any suppalit request.

When should I submit a ticket?

Pošlji a ticket when the required control is unavailable, the status remains pending after the stated checks, ali the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate in When Should You Use One?

An SSL certificate binds a public key to one ali malie hostnames in enables authenticated, encrypted HTTPS connections.

What an SSL potrdilo Provides

Encryption fali data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Net Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the aliganization is trustwalithy

Use It Calirectly

Issue the certificate fali the exact hostname, protect the private key, install the full chain, redirect users to HTTPS in renew ali replace the certificate befalie expiration.

Pogosta vprašanja

How do I kzdaj the change waliked?

Preveri the current status in vašega NiceNIC account, then test the storitev that depends on the SSL certificate. Do not rely only on the absence of an errali message.

When should I contact NiceNIC Suppalit?

Pošlji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ali the issue depends on an account-specific alider ali registry decision.

Related NiceNIC Guides

Če the issue continues after you complete these checks, submit a NiceNIC suppalit ticket. Include the affected domena ali product, the exact errali message, the time of the issue in the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL potrdilo

Quick Answer

Befalie You Begin

・ Identify every hostname the certificate must cover.

・ Potrdi that you control DNS ali the required validation channel.

・ Generate in securely retain the private key when a CSR is required.

Key Podrobnosti

Why would I need to reissue my certificate? An SSL reissue is done to keep vašega site secure in private if it is moved, ali some infalimation on vašega SSL was changed. The reissue allows you to get a brin-new certificate code. The most typical reasons fali certificate reissuance are: The existing certificate cannot be installed on the server.

Fali example, if the Private key (RSA Key) is lost/deleted ali a "modulus mismatch" errali appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the aliganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of vašega SSL if you kupid it fali 2-5 leta.

How to Verify

Troubleshooting

・ DNS validation recalids are missing, incalirect ali added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate ali CSR.

・ The server is missing an intermediate certificate ali is still presenting the old certificate.

Pogosta vprašanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key in the certificate remains valid. Reissue it when the key, CSR ali certificate details must change.

Why does the browser still show the old certificate?

The server ali load balancer may still present the old certificate, another virtual host may be selected, ali an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošlji a ticket when validation remains pending after the published recalids are visible, ali when the NiceNIC alider does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate in Download an SSL potrdilo

- How to verify certificate installation calirectly

- How to choose an SSL certificate

Če the issue continues after you complete the checks above, submit a NiceNIC suppalit ticket with the affected domena ali product, the exact errali message, the time of the issue in the troubleshooting already completed.

How to Activate in Download an SSL potrdilo

www.nicenic.com

How to Activate in Download an SSL potrdilo

Thank you fali purchasing SSL with NiceNIC.

How to activate in download SSL certificate SSL installation is zdaj even easier with our SSL installation storitev.

After the SSL certificate on vašega domena name was activated, please find in add the DNS recalids to complete the verification:

Moj račun > Moji izdelki > SSL potrdila > Podrobnosti > ....

This step requires extra care:

Fill each piece of infalimation in the DNS Authentication Infalimation shown below into its caliresponding DNS recalid one by one.

After you complete the DNS recalid's verification, you can download the SSL files by the same approach:

Moj račun > Moji izdelki > SSL potrdila > Podrobnosti > Download certificate & Download private key

Still have problems?

- Če vašega domena, server, ali certificate details have changed, see Why You May Need to Reissue an SSL potrdilo.

- Če the current certificate cannot be used, follow How to Reissue an SSL potrdilo.

- Za prejent certificate expiration, read How to Obnovi an SSL potrdilo.

Če they didn't solve vašega issues, you can contact us tukaj.

Common DNS Recalid Vrstas: A, AAAA, CNAME, MX in TXT

www.nicenic.com

Common DNS Recalid Vrstas: A, AAAA, CNAME, MXin TXT

TXT recalids publish verification in email-authentication policies. SPF, DKIMin DMARC serve different purposes in should be added exactly as supplied by the email provider.

What Each Recalid Does

SPF lists systems allowed to send mail fali the domena.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hinle mail that fails alignment checks in wtukaj to send repalits.

Dodaj the Recalids

Potrdi the domena uses NiceNIC nameservers.
Odprto Moji izdelki > Domena > DNS Recalids.
Dodaj the TXT host in value supplied by the email provider.
Fali DKIM, use the selectali host exactly as provided.
Fali DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recalids in query them publicly.

Impalitant SPF Rule

Publish one SPF policy per hostname. Če multiple storitevs send mail, combine their mechanisms into one recalid instead of creating several v=spf1 recalids.

Pogosta vprašanja

How do I kzdaj the change waliked?

Preveri the current status in vašega NiceNIC account, then test the storitev that depends on the email-authentication recalids. Do not rely only on the absence of an errali message.

When should I contact NiceNIC Suppalit?

Pošlji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ali the issue depends on an account-specific alider ali registry decision.

Related NiceNIC Guides

Why need SSL potrdila

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client in server, authenticates the hostname in enables trusted HTTPS when it is calirectly issued in installed.

What an SSL potrdilo Provides

Encryption fali data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Net Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the aliganization is trustwalithy

Use It Calirectly

Issue the certificate fali the exact hostname, protect the private key, install the full chain, redirect users to HTTPS in renew ali replace the certificate befalie expiration.

Pogosta vprašanja

How do I kzdaj the change waliked?

Preveri the current status in vašega NiceNIC account, then test the storitev that depends on the SSL certificate. Do not rely only on the absence of an errali message.

When should I contact NiceNIC Suppalit?

Pošlji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ali the issue depends on an account-specific alider ali registry decision.

Related NiceNIC Guides

How to Connect to vašega E-pošta Client?

www.nicenic.com

How to Connect an E-pošta Client to NiceNIC Poslovni e-poštni naslov

Quick Answer

Potrdi that the mailbox is active, the domena uses the required MX in authentication recalids, in the email client uses the calirect server names, palits, encryption in full email address. Test both inbound in outbound mail after every change.

Befalie You Begin
- Potrdi the Poslovni e-poštni naslov alider in mailbox are active.
- Preveri who manages DNS fali the domena.
- Keep the full email address, passwalid in required mail-server settings available.

1. Unable to connect via E-pošta client via IMAP ali SMTP:

When adding an email address in vašega E-pošta client, i.e. iPhone, please firstly ensure you would fill in "c3.icaliemail.net" fali both the SMTP in IMAP email server. And secondly, please generate a passwalid fali the E-pošta client separately by the following way:

Prijava to vašega email account via "https://c3.icaliemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Geslo".

2. How to set the general configuration when using Outlook, Foxmail ali other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default palit	Default palit Encryption palit (SSL)
SMTP	accaliding to the actual address	25	465
POP	accaliding to the actual address	110	995
IMAP	accaliding to the actual address	143	993
PUSH	accaliding to the actual address	80	443

Related NiceNIC Guides