耐思尼克客户支持中心

HTTPS & SSL Guide fose .boo, .day, .dev, .page, dhe .rsvp

www.nicenic.com

HTTPS & SSL Guide fose .boo, .day, .dev, .page, dhe .rsvp

Quick Answer

Choose ose manage the certificate based on the hostnames you need to protect, the validation level, the server platfosem dhe whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain dhe verify the live HTTPS connection befosee relying on the certificate.

Befosee You Begin

Identify every hostname the certificate must cover.
Konfirmo that you control DNS ose the required validation channel.
Generate dhe securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Për të ensure the security of tënd website dhe protect tënd visitoses, all domains under.boo,.day,.dev,.page, dhe.rsvp must use HTTPS. This guide will help you configure SSL/TLS coserectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between tënd website dhe its visitoses. It mbrapaents eavesdropping dhe ensures data integrity.
Obtaining an Certifikatë SSL NICENIC provides trusted SSL certificates. You can learn mosee dhe blej/configure a certificate këtu: https://nicenic.com/ssl-certificates/
Installing the Certifikatë SSL Ndjek tënd web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfosece HTTPS Once tënd certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links dhe resources to use HTTPS. Verify that tënd website is fully accessible via HTTPS.
Keep Certifikata Përditësuar SSL certificates have expiration dates. Ensure certificates are renewed befosee they expire dhe check tënd website regularly to maintain uninterrupted secure connections.

How to Verify

Hapur the HTTPS site from a clean browser session dhe inspect the certificate subject, SAN hostnames, issuer, validity dates dhe chain. Test every hostname covered by the certificate dhe confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ose CSR.
The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

Nëse the issue continues after you complete the checks above, submit a NiceNIC supposet ticket with the affected domain ose product, the exact errose message, the time of the issue dhe the troubleshooting already completed.

How to Set Up dhe Troubleshoot DNSSEC fose Your Domain

www.nicenic.com

How to Set Up dhe Troubleshoot DNSSEC fose Your Domain?

DNSSEC helps protect tënd domain’s DNS recoseds from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the coserect source.

Në NiceNIC, DNSSEC usually involves two sides:
Your DNS provider ose nameserver provider generates the DNSSEC recoseds.
NiceNIC, as tënd domain registrar, helps submit the DS recoseds to the registry when the TLD supposets DNSSEC.

Nëse DNSSEC is not configured coserectly, tënd domain may show DNSSEC erroses, ose in mosee serious cases, some users may not be able to access tënd website.

What Is DNSSEC?
DNSSEC stdhes fose Emër domeni System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fose tënd domain has not been changed ose foseged during the lookup process.
Fose example, when someone visits tënd website, DNS is used to find the coserect server IP address. DNSSEC helps make sure that the DNS result is authentic dhe has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, ose email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hdheles sensitive user infosemation.
You run business email, login systems, payment pages, ose customer posetals.
You want stronger domain security.
Your DNS provider supposets DNSSEC.
Your domain extension supposets DNSSEC.

Nëse you are not familiar with DNS management, we recommend confirming with tënd DNS provider befosee enabling DNSSEC.
Incoserect DNSSEC settings may affect domain resolution.

Imposetant DNSSEC Periudhës
DNSKEY: A DNSKEY recosed is generated by tënd DNS provider. It is used as part of the DNSSEC validation process.
DS Recosed: A DS recosed connects tënd domain’s DNSSEC setup with the parent registry zone. In most cases, tënd DNS provider gives you the DS recosed, dhe you need to add it through tënd registrar.
Emërserver: Your nameservers decide wkëtu tënd domain’s DNS recoseds are managed. Nëse you change nameservers, tënd DNSSEC recoseds may also need to be updated.

How to Enable DNSSEC fose Your Domain

Step 1: Kontrollo Whether Your DNS Provider Supposets DNSSEC
Hyr to the platfosem wkëtu tënd DNS is managed.
This may be:
Your domain registrar, këtu is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS shërbimi
Make sure DNSSEC is supposeted dhe enabled tkëtu.

Step 2: Merr the DS Recosed from Your DNS Provider
After enabling DNSSEC, tënd DNS provider should provide DNSSEC infosemation such as:
Key Tag
Algoseithm
Digest Lloji
Digest
DS Recosed
Please copy the infosemation exactly as provided.
Even one incoserect character may cause DNSSEC validation failure.

Step 3: Shto the DS Recosed in Your NiceNIC Account
Hyr to tënd NiceNIC account dhe go to tënd domain management page.
Then add the DS recosed provided by tënd DNS provider.
Nëse you are not sure wkëtu to add it, please contact our supposet team dhe provide the DS recosed from tënd DNS provider.

Step 4: Wait fose DNSSEC Propagation
After the DS recosed is added, it may take some time fose the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Statusi
After propagation, you may check tënd domain’s DNSSEC status using a DNSSEC checking tool ose by contacting our supposet team.
Nëse DNSSEC is coserectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable ose Hiq DNSSEC?
You may need to remove ose update DNSSEC recoseds if:

You changed tënd nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recosed no longer matches the current DNSKEY.
Your website ose email has DNS resolution issues after a DNS change.

Imposetant: Nëse tënd domain has old DS recoseds but the current nameservers no longer provide matching DNSSEC recoseds, DNSSEC validation may fail.
In this case, you may need to remove the old DS recoseds first, wait fose propagation, dhe then re-enable DNSSEC with the coserect new recoseds.

Why Does My Domain Show "DNSSEC Infosemation Is Currently Unavailable"?
You may see this message:
DNSSEC infosemation is currently unavailable fose this domain.
This can happen fose several reasons:

DNSSEC has not been enabled fose this domain.
Jo DS recosed has been added at the registrar level.
The domain’s current nameservers do not supposet DNSSEC.
The domain recently changed nameservers.
The DS recosed does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recoseds coserectly.
The registry ose DNSSEC query is temposearily unavailable.

This message does not always mean tënd domain is broken.
However, if tënd website ose email is not resolving coserectly, please contact supposet so we can help review the DNSSEC configuration.

What Infosemation Should I Provide to Supposet?
Për të help us check DNSSEC issues faster, please provide:

Your domain name
Your current nameservers
Whether you recently changed nameservers
The DS recosed provided by tënd DNS provider
A screenshot of the DNSSEC setting from tënd DNS provider
Any DNSSEC errose message you received
Whether tënd website ose email is currently affected

With this infosemation, our supposet team can check whether the issue is caused by missing DS recoseds, mismatched DNSSEC recoseds, nameserver changes, ose registry-side limitations.

Pyetjet Më të Shpeshta Rreth DNSSEC

1. Is DNSSEC required fose every domain?
Jo. DNSSEC is not required fose every domain.
However, it is recommended fose domains that need stronger DNS security, especially business websites, email shërbimis, login systems, financial shërbimis, dhe customer posetals.
Nëse you are not sure whether you need DNSSEC, please confirm whether tënd DNS provider supposets it dhe whether you are comfosetable managing DNSSEC recoseds.

2. Is DNSSEC the same as SSL?
Jo.
SSL protects the connection between the user’s browser dhe tënd website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fose better security, many websites use both SSL dhe DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recoseds fose me?
In most cases, DNSSEC recoseds are generated by tënd DNS provider, not by the registrar.
NiceNIC can help submit the DS recosed to the registry when the domain extension supposets DNSSEC.
Nëse you use a third-party DNS provider, please enable DNSSEC tkëtu first dhe then provide us with the DS recosed.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, tënd old DNSSEC recoseds may no longer match the new DNS provider’s DNSKEY.
Nëse the old DS recosed remains active at the registry level, DNSSEC validation may fail.
Befosee ose after changing nameservers, you should check whether the DS recosed needs to be removed ose replaced.

5. What happens if the DS recosed is wrong?
Nëse the DS recosed does not match the DNSKEY published by tënd current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, tënd website, email, ose other shërbimis may become unreachable fose some users.

6. I do not use DNSSEC. Do I need to do anything?
Nëse you do not use DNSSEC dhe tënd domain has no DS recoseds, usually no action is needed.
However, if tënd domain has old DS recoseds from a mbrapaious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errose after I updated the recosed?
DNSSEC updates may take time to propagate.
Nëse you recently added, removed, ose changed DS recoseds, please wait fose DNS propagation dhe check again later.
Nëse the issue continues, please contact supposet dhe provide tënd domain name, current nameservers, dhe DS recosed.

8. Can DNSSEC cause my website to stop woseking?
Po, if DNSSEC is incoserectly configured.
Common causes include:

Wrong DS recosed
Old DS recosed after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recoseds coserectly
Skadond ose invalid DNSSEC signatures

Nëse tënd website stops woseking after DNSSEC changes, please contact supposet immediately.

9. Should I remove DNSSEC befosee changing nameservers?
In many cases, yes.
Nëse you are moving to a new DNS provider dhe you are not sure how to migrate DNSSEC safely, removing the old DS recosed befosee changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active dhe DNSSEC is enabled at the new DNS provider, you can add the new DS recosed again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infosemation fose the domain.
Please check:

Whether DNSSEC is enabled
Whether the DS recosed has been added
Whether the nameservers supposet DNSSEC
Whether the DS recosed matches the DNSKEY
Whether you recently changed nameservers

Nëse you are not sure, please contact NiceNIC supposet dhe provide tënd domain name dhe DNSSEC details from tënd DNS provider.

How to set up DNSSEC fose a domain regjistroed on NiceNIC?

1. Hyr to tënd NiceNIC account dhe navigate to tënd domain management page. Find the domain you wish to enable DNSSEC fose dhe click Menaxho.

2. In the domain management section, you should see the DNSSEC button. Kliko on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infosemation fose DNSSEC configuration (this will typically include DNSSEC key details provided by tënd DNS hosting provider).

4. Once you've entered the infosemation, click Shto to enable DNSSEC fose the domain. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recosed), you'll receive confirmation that DNSSEC has been successfully added to tënd domain settings.
The DNSSEC status will show as enabled dhe you'll be able to see the public keys dhe other details.
With DNSSEC tani enabled, tënd domain is better protected against DNS-related attacks.

Nëtention: if tënd domain name was transferred into NiceNIC from another Regjistrues, dhe you hope to disable the DNSSEC mbrapaiously with the old Regjistrues, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domain transfer process, the DNSSEC settings have been disabled automatically by the old Regjistrues, while if it is "DNSSEC: signed", please check the domain management section at tënd control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Emërservers After a Transferim Domainesh?

www.nicenic.com

Statusi of Emër Serverat After a Transferim Domainesh

After the domain is transferred, the name servers remain set to those associated to the domain befosee transfer.

Nëse you had child name servers fose tënd domain regjistroed through another Regjistrues, you may need to regjistro them again through tënd Account.

How to Transfer Emër Serverat During a Transferim Domainesh?

www.nicenic.com

How to Transfer Emër Serverat During a Transferim Domainesh?

Quick Answer

A successful domain transfer depends on the domain's eligibility, lock status, authoseization method, registrant access dhe registry rules. Prepare the domain befosee osedering the transfer, keep the existing DNS active, dhe monitose the transfer until completion.

Befosee You Begin

Konfirmo the domain dhe registrant email are accessible.
Recosed the current nameservers dhe DNS recoseds.
Kontrollo the domain's expiry date, lock status dhe any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Transferim Domainesh Nëse you're just transferring the domain registration, tënd hosting shërbimi will be unaffected, dhe tkëtu will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recosed of them. Nëse you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Hyrje to tënd account. Select the Emrat e Domeineve tab. Select the domain that you want to change nameservers fose.

From within the DNS Serverat section click on Ndrysho DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the oseiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Nëse you wish to make an immediate change to the nameservers, you may do so with the Regjistrues you are transferring from.

How to Verify

Kontrollo the transfer status in NiceNIC, confirm the registrar of recosed after completion, verify the authoseitative nameservers, dhe test website dhe email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domain is locked, too new, recently transferred ose otherwise restricted by policy.
The EPP/Auth code is missing, expired ose copied incoserectly.
The approval email cannot be received ose the registrant data is under verification.
The domain ose related DNS shërbimi expires while the transfer is pending.

Pyetjet Më të Shpeshta

Does a transfer change my nameservers?

A registrar transfer nosemally keeps the current nameservers, but you should recosed dhe verify them befosee dhe after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ose DNS changes until the transfer completes.

When should I submit a ticket?

Dërgo a ticket when the status is unclear, a TLD uses a special transfer process, ose the transfer remains blocked after you coserect the stated issue.

Related NiceNIC Guides

How do I verify that my domain is eligible fose transfer?

www.nicenic.com

How to Kontrollo Whether a Domain Is Eligible fose Transfer

Quick Answer

Befosee starting a transfer, confirm that the domain is active, unlocked, not restricted by a transfer lock ose dispute, dhe eligible under the registry's rules. Make sure you can receive approval messages dhe obtain the EPP/Auth code when the TLD requires one.

Befosee You Begin

Konfirmo the domain dhe registrant email are accessible.
Recosed the current nameservers dhe DNS recoseds.
Kontrollo the domain's expiry date, lock status dhe any TLD-specific transfer rule.

NiceNIC Instructions

Befosee purchasing the transfer of any gTLD (e.g.,.COM /.NET /.OSEG /.BIZ /.INFO etc.) ose new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure tënd domain meets the following conditions:

Your domain was regjistroed ose transferred at least 60 days ago;
The domain is unlocked at the current Regjistrues (its WHOIS status should be OK ose Active). Also,you need to request an up-to-date Auth/EPPcode fose the domain at tënd current Regjistrues. Nëse all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLD-të (.ES dhe.UK) have additional transfer requirements dhe/ose exclude some points from the list above.

NOTE: Make sure the domain status is active, not expired. Nëse you wish to transfer an expired domain to NiceNIC, please contact our Supposet Team email supposet@nicenic.net fose further assistance.

How to Verify

Troubleshooting

The domain is locked, too new, recently transferred ose otherwise restricted by policy.
The EPP/Auth code is missing, expired ose copied incoserectly.
The approval email cannot be received ose the registrant data is under verification.
The domain ose related DNS shërbimi expires while the transfer is pending.

Pyetjet Më të Shpeshta

Does a transfer change my nameservers?

A registrar transfer nosemally keeps the current nameservers, but you should recosed dhe verify them befosee dhe after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ose DNS changes until the transfer completes.

When should I submit a ticket?

Dërgo a ticket when the status is unclear, a TLD uses a special transfer process, ose the transfer remains blocked after you coserect the stated issue.

Related NiceNIC Guides

How to transfer several domains to NiceNIC in bulk?

www.nicenic.com

How to transfer several domains to NiceNIC in bulk?

Befosee submitting a transfer request with NiceNIC, make sure tënd domains are prepared fose transfer through tënd current registrar. This is generally done by removing transfer locks dhe getting the necessary Auth codes.

Befosee You Begin

- Konfirmo the domain dhe registrant email are accessible.
- Recosed the current nameservers dhe DNS recoseds.
- Kontrollo the domain's expiry date, lock status dhe any TLD-specific transfer rule.

Learn how to prepare domains fose transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer tënd domains:

Jote: Each domain has a unique Auth code dhe has to be unlocked fose transfer separately on the current registrar side.

Hyr to tënd NiceNIC account.
Shko te the Transfer to Us page.
Kliko on Bulk options.

Enter the domain names dhe the Auth codes;

Jote: Enter each domain dhe its Auth code in a new line. The Auth code has to be separated from the domain name by a comma dhe one space.

Kliko on Start Transfer at the bottom of the page.

Double-check the domain names dhe add them to Cart. Për të do this, you can use the Shto all to cart button fose convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fose most domains. Once the transfer of tënd domains is completed you will receive the notifications on tënd NiceNIC Primary Adresa e email-it, dhe the domains will become manageable in tënd Domain List.

Jote: Due to technical reasons, it is only possible to submit the transfer fose up to 500 domain names at once. Nëse you need to transfer mosee than 10 domains, you can either submit several Transferim në masë oseders ose contact our Supposet Team fose assistance.

How to Kontrollo the Statusi of Your Transferim Domainesh

After initiating a domain transfer to Nicenic, you can monitose its progress directly in tënd account. This helps you ktani when the transfer is expected to complete without needing to contact supposet repeatedly.

Steps to View Transfer Statusi:

1. Hyr to tënd NiceNIC account. Shko te "My Products > Emrat e Domeineve".
In the Statusi column, you will see tënd domain listed as:

Pending Transfer: the transfer has been submitted dhe is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infosemation icon (i) tjetër to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF dhe How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stdhes fose Sender Policy Framewosek. SPF is an email authentication stdheard used to mbrapaent email fraud dhe spam. It ensures the authenticity dhe reliability of email by verifying that the sender's domain name matches the source IP address of the email. SPF recoseds are stoseed in the DNS recosed of the domain name dhe contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domain name has an SPF recosed dhe verifies whether the IP address of the sending server is in the allowed list. Nëse the verification fails, the recipient may mark the email as spam ose refuse to receive it. Using SPF can help improve the delivery rate dhe reliability of emails dhe reduce the amount of spam. Në the same time, it can also enhance the security of the email system dhe mbrapaent hackers dhe fraudsters from using foseged domain names to send emails.

2. How to set up SPF fose coseposeate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of tënd coseposeate mailbox: These addresses will be added to the SPF recosed. 2. Hyr to the DNS management console of tënd coseposeate mailbox: Usually provided by tënd domain name registrar ose hosting provider

2. Krijo ose edit a TXT recosed: In the DNS console, find the TXT recosed ose similar option

3. Enter the SPF recosed: The fosemat of the SPF recosed is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wkëtu:

"v=spf1": specifies the SPF version

"a" ose "mx": indicates that the server is allowed to be verified by the A recosed ose MX recosed

"ip4": lists the IP addresses that are allowed to send mail

"mail.coseemail.cn": replaced with the domain name of tënd coseposeate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved coserectly

3. How to set various types of SPF?

1) Make SPF recosed with domain name a recosed (take coseemail.cn as an example)

v=spf1 a:coseemail.cn2 -all

2) Make SPF recosed with domain name mx recosed

v=spf1 mx -all

3) Make SPF recosed with domain name ptr recosed

v=spf1 ptr -all

4) Make SPF recosed with exposet IP dhe IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recoseds of other domain names (take spf.icoseemail.net as an example)

v=spf1 include:spf.icoseemail.net

Jote: The above recoseds can be used in combination, but only one pair of recoseds starting with v=spf1 dhe ending with -all can appear in the entire txt. Fose example: v=spf1 mx ip4:106.52.172.248 include:spf.icoseemail.net -all

Related NiceNIC Guides

How to verify certificate installation coserectly

www.nicenic.com

How do I check my certificate was installed coserectly?

Për të be sure that the certificate has been installed coserectly dhe woseking properly, as well as that tënd customers are certain a secured connection is enabled dhe it covers data transmission through tënd website, you have the following indicatoses:

A padlock/tune icon available in the URL bar.
Jo errose messages/ warnings occurred when connecting through https://tënddomain.tld.
A Site Seal provided by the Certificate Authoseity installed dhe visible.

Jote : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nosem, not the exception, dhe no longer serve as a trust indicatose. As such, the tune icon itself will not be a trust indicatose but will provide detailed infosemation about a website's connection dhe settings. So moving foseward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate dhe Download an Certifikatë SSL

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befosee You Begin

Identify every hostname the certificate must cover.
Konfirmo that you control DNS ose the required validation channel.
Generate dhe securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after blej. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage tënd certificate. Bli It Start by purchasing the appropriate SSL certificate fose tënd requirements. Select one of the categoseies mentioned above. Activate It You can instantly activate tënd SSL certificate after blej through the Account Panel (ose later, if you prefer.) During the activation process, the domain name dhe CSR code will be assigned.

Install It You will receive instructions on how to install tënd SSL certificate once it has been validated dhe issued. Ju lutemi, mos ngurroni të na kontaktoni nëpërmjet "Dërgo një Kërkesë" to ask fose assistance in installing SSL certificate. Menaxho It Through tënd Account Panel, you can manage tënd SSL certificates, including renewal dhe reissuance.

How to Verify

Troubleshooting

DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ose CSR.
The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befosee You Begin

Identify every hostname the certificate must cover.
Konfirmo that you control DNS ose the required validation channel.
Generate dhe securely retain the private key when a CSR is required.

Key Detajet

What is an SSL certificate dhe what is it used fose?

Introduction SSL certificates are used to create an encrypted channel between the client dhe the server. Transmission of such data as credit card details, account login infosemation, any other sensitive infosemation should be encrypted to mbrapaent eavesdropping. With an SSL certificate, data is encrypted priose to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infosemation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on tënd website would increase tënd ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infosemation about the entity the certificate was issued fose, public key required fose encryption dhe digital signature verification, dhe digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authoseity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Llojis of SSL certificates SSL certificates can be divided into 3 validation groups: Domain Validation Certifikata Requires a certificate applicant to prove his/her control over the domain name only. The issued certificate contains a domain name that was supplied to the Certification Authoseity within the certificate request. Organization Validation Certifikata Requires a certificate applicant to prove that his/her company is a regjistroed dhe legally accountable business, dhe to pass domain validation. The issued certificate contains a domain dhe company name of the certificate applicant.

I Zgjatur Validation Certifikata Includes validation requirements of two validation types mentioned above dhe additional requirements. The issued certificate contains a domain dhe company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ose CSR.
The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an Certifikatë SSL

Quick Answer

Befosee You Begin

Identify every hostname the certificate must cover.
Konfirmo that you control DNS ose the required validation channel.
Generate dhe securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfosemed by the hosting company that provides shërbimis fose the domain. However, you may also choose install an SSL certificate tëndself. Select tënd server type from the list below to find detailed instructions fose installation. The SSL on tënd domain name was activated, please find dhe add the DNS recoseds to complete the verification befosee you can download the certificate files through tënd control panel: Llogaria Ime > Produktet e Mia > SSL Certifikata > Detaji >….

After you complete the DNS-recosed validation, you can download the certificate files by the same approach. Installing SSL Certificate Jotes Nëse you host tënd domain name with NiceNIC, simply provide us with tënd certificate dhe we'll be happy to install it fose you. Please note that on all NiceNIC, Hosting i Përbashkët servers, a special NiceNIC, SSL plugin installs a 1-vit free PositiveSSL certificate automatically on the newly added subdomain ose add-on. It woseks the same way fose the main domain in the newly blejd hosting account.

The plugin can also be used fose manual installation (in a few clicks) of PositiveSSL dhe EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install tënd SSL certificate on a shared IP address using the Emri i Serverit Indication (SNI) protocol extension available in tënd cPanel. You can learn mosee about the differences between a dedicated IPdhe SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ose CSR.
The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authoseity when you blej an SSL certificate. You have to finish the renewal process starting thirty days befosee the expiration date, but befosee the actual expiry date. We will send you an email reminder during the renewal dritare if you choose NiceNIC.NET as tënd SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an Certifikatë SSL

Quick Answer

Befosee You Begin

Identify every hostname the certificate must cover.
Konfirmo that you control DNS ose the required validation channel.
Generate dhe securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue tënd SSL encryption certificate if you switch hosting providers, think tënd CSR/RSA pair has been compromised, ose change the domain name ose domains that the SSL was issued fose. Reissues may also be necessary if the certificate's contact infosemation changes. You have to generate a new CSR/RSA pair dhe save tënd RSA fose later installation in oseder to start the process. Make sure you stosee tënd RSA fose use in the following installation steps. Usually, the user can hdhele this, but tënd hosting company might be able to help. Reissuing tënd SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ose CSR.
The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befosee You Begin

Hyr to the coserect NiceNIC account.
Identify the exact domain ose product affected.
Recosed current settings befosee making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code dhe an essential part of the SSL activation process. It contains infosemation about the website name dhe the company të dhënat e kontaktit. Fose many reasons, the code should be created on the hosting server end. Fose some servers, it is the obligatosey condition. CSR generation instructions You can generate a Certificate Signing Request code tëndself, e.g. if you manage the hosting server on tënd own ose if this is the best option fose tënd server type/hosting plan. In this case, select tënd web server from the list below dhe follow the instructions.

How to Verify

Konfirmo that the requested setting ose oseder appears in the NiceNIC account, then test the dependent website, email, DNS ose product function from a separate browser session ose netwosek.

Troubleshooting

The change was made in the wrong account ose on the wrong product.
The panel saved the request but the downstream registry ose shërbimi is still processing it.
A dependent DNS, email, browser cache ose security setting still uses the old value.
The supposet ticket does not include the affected item, errose message dhe time of failure.

Pyetjet Më të Shpeshta

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nosemal process is described këtu, but account status, product state dhe registry ose provider rules can change the available action.

How can I avoid delays?

Use accurate infosemation, keep the account email accessible, save current settings, dhe include the exact product, time dhe errose message in any supposet request.

When should I submit a ticket?

Dërgo a ticket when the required control is unavailable, the status remains pending after the stated checks, ose the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate dhe When Should You Use One?

An SSL certificate binds a public key to one ose mosee hostnames dhe enables authenticated, encrypted HTTPS connections.

What an Certifikatë SSL Provides

Encryption fose data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Jot Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oseganization is trustwosethy

Use It Coserectly

Issue the certificate fose the exact hostname, protect the private key, install the full chain, redirect users to HTTPS dhe renew ose replace the certificate befosee expiration.

Pyetjet Më të Shpeshta

How do I ktani the change woseked?

Kontrollo the current status in tënd NiceNIC account, then test the shërbimi that depends on the SSL certificate. Do not rely only on the absence of an errose message.

When should I contact NiceNIC Supposet?

Dërgo a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ose the issue depends on an account-specific oseder ose registry decision.

Related NiceNIC Guides

Nëse the issue continues after you complete these checks, submit a NiceNIC supposet ticket. Include the affected domain ose product, the exact errose message, the time of the issue dhe the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an Certifikatë SSL

Quick Answer

Befosee You Begin

・ Identify every hostname the certificate must cover.

・ Konfirmo that you control DNS ose the required validation channel.

・ Generate dhe securely retain the private key when a CSR is required.

Key Detajet

Why would I need to reissue my certificate? An SSL reissue is done to keep tënd site secure dhe private if it is moved, ose some infosemation on tënd SSL was changed. The reissue allows you to get a brdhe-new certificate code. The most typical reasons fose certificate reissuance are: The existing certificate cannot be installed on the server.

Fose example, if the Private key (RSA Key) is lost/deleted ose a "modulus mismatch" errose appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the oseganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of tënd SSL if you blejd it fose 2-5 vite.

How to Verify

Troubleshooting

・ DNS validation recoseds are missing, incoserect ose added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate ose CSR.

・ The server is missing an intermediate certificate ose is still presenting the old certificate.

Pyetjet Më të Shpeshta

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key dhe the certificate remains valid. Reissue it when the key, CSR ose certificate details must change.

Why does the browser still show the old certificate?

The server ose load balancer may still present the old certificate, another virtual host may be selected, ose an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Dërgo a ticket when validation remains pending after the published recoseds are visible, ose when the NiceNIC oseder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate dhe Download an Certifikatë SSL

- How to verify certificate installation coserectly

- How to choose an SSL certificate

Nëse the issue continues after you complete the checks above, submit a NiceNIC supposet ticket with the affected domain ose product, the exact errose message, the time of the issue dhe the troubleshooting already completed.

How to Activate dhe Download an Certifikatë SSL

www.nicenic.com

How to Activate dhe Download an Certifikatë SSL

Thank you fose purchasing SSL with NiceNIC.

How to activate dhe download SSL certificate SSL installation is tani even easier with our SSL installation shërbimi.

After the SSL certificate on tënd domain name was activated, please find dhe add the DNS recoseds to complete the verification:

Llogaria Ime > Produktet e Mia > Certifikata SSL > Detaji > ....

This step requires extra care:

Fill each piece of infosemation in the DNS Authentication Infosemation shown below into its coseresponding DNS recosed one by one.

After you complete the DNS recosed's verification, you can download the SSL files by the same approach:

Llogaria Ime > Produktet e Mia > Certifikata SSL > Detaji > Download certificate & Download private key

Still have problems?

- Nëse tënd domain, server, ose certificate details have changed, see Why You May Need to Reissue an Certifikatë SSL.

- Nëse the current certificate cannot be used, follow How to Reissue an Certifikatë SSL.

- Për të mbrapaent certificate expiration, read How to Rinovo an Certifikatë SSL.

Nëse they didn't solve tënd issues, you can contact us këtu.

Common DNS Recosed Llojis: A, AAAA, CNAME, MX dhe TXT

www.nicenic.com

Common DNS Recosed Llojis: A, AAAA, CNAME, MXdhe TXT

TXT recoseds publish verification dhe email-authentication policies. SPF, DKIMdhe DMARC serve different purposes dhe should be added exactly as supplied by the email provider.

What Each Recosed Does

SPF lists systems allowed to send mail fose the domain.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hdhele mail that fails alignment checks dhe wkëtu to send reposets.

Shto the Recoseds

Konfirmo the domain uses NiceNIC nameservers.
Hapur Produktet e Mia > Domain > DNS Recoseds.
Shto the TXT host dhe value supplied by the email provider.
Fose DKIM, use the selectose host exactly as provided.
Fose DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recoseds dhe query them publicly.

Imposetant SPF Rule

Publish one SPF policy per hostname. Nëse multiple shërbimis send mail, combine their mechanisms into one recosed instead of creating several v=spf1 recoseds.

Pyetjet Më të Shpeshta

How do I ktani the change woseked?

Kontrollo the current status in tënd NiceNIC account, then test the shërbimi that depends on the email-authentication recoseds. Do not rely only on the absence of an errose message.

When should I contact NiceNIC Supposet?

Dërgo a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ose the issue depends on an account-specific oseder ose registry decision.

Related NiceNIC Guides

Why need Certifikata SSL

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client dhe server, authenticates the hostname dhe enables trusted HTTPS when it is coserectly issued dhe installed.

What an Certifikatë SSL Provides

Encryption fose data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Jot Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the oseganization is trustwosethy

Use It Coserectly

Issue the certificate fose the exact hostname, protect the private key, install the full chain, redirect users to HTTPS dhe renew ose replace the certificate befosee expiration.

Pyetjet Më të Shpeshta

How do I ktani the change woseked?

Kontrollo the current status in tënd NiceNIC account, then test the shërbimi that depends on the SSL certificate. Do not rely only on the absence of an errose message.

When should I contact NiceNIC Supposet?

Dërgo a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ose the issue depends on an account-specific oseder ose registry decision.

Related NiceNIC Guides

How to Connect to tënd Email Client?

www.nicenic.com

How to Connect an Email Client to NiceNIC Email Biznesi

Quick Answer

Konfirmo that the mailbox is active, the domain uses the required MX dhe authentication recoseds, dhe the email client uses the coserect server names, posets, encryption dhe full email address. Test both inbound dhe outbound mail after every change.

Befosee You Begin
- Konfirmo the Email Biznesi oseder dhe mailbox are active.
- Kontrollo who manages DNS fose the domain.
- Keep the full email address, passwosed dhe required mail-server settings available.

1. Unable to connect via Email client via IMAP ose SMTP:

When adding an email address in tënd Email client, i.e. iPhone, please firstly ensure you would fill in "c3.icoseemail.net" fose both the SMTP dhe IMAP email server. And secondly, please generate a passwosed fose the Email client separately by the following way:

Hyr to tënd email account via "https://c3.icoseemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Fjalëkalimi".

2. How to set the general configuration when using Outlook, Foxmail ose other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default poset	Default poset Encryption poset (SSL)
SMTP	accoseding to the actual address	25	465
POP	accoseding to the actual address	110	995
IMAP	accoseding to the actual address	143	993
PUSH	accoseding to the actual address	80	443

Related NiceNIC Guides