耐思尼克客户支持中心

HTTPS & SSL Guide fili .boo, .day, .dev, .page, i .rsvp

www.nicenic.com

HTTPS & SSL Guide fili .boo, .day, .dev, .page, i .rsvp

Quick Answer

Choose ili manage the certificate based on the hostnames you need to protect, the validation level, the server platfilim i whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain i verify the live HTTPS connection befilie relying on the certificate.

Befilie You Begin

Identify every hostname the certificate must cover.
Potvrdi that you control DNS ili the required validation channel.
Generate i securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Za ensure the security of tvoj website i protect tvoj visitilis, all domens under.boo,.day,.dev,.page, i.rsvp must use HTTPS. This guide will help you configure SSL/TLS cilirectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between tvoj website i its visitilis. It prethodnoents eavesdropping i ensures data integrity.
Obtaining an SSL sertifikat NICENIC provides trusted SSL certificates. You can learn milie i kupi/configure a certificate ovde: https://nicenic.com/ssl-certificates/
Installing the SSL sertifikat Prati tvoj web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfilice HTTPS Once tvoj certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links i resources to use HTTPS. Verify that tvoj website is fully accessible via HTTPS.
Keep Sertifikati Ažurirano SSL certificates have expiration dates. Ensure certificates are renewed befilie they expire i check tvoj website regularly to maintain uninterrupted secure connections.

How to Verify

Otvoreno the HTTPS site from a clean browser session i inspect the certificate subject, SAN hostnames, issuer, validity dates i chain. Test every hostname covered by the certificate i confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ili CSR.
The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

Ako the issue continues after you complete the checks above, submit a NiceNIC suppilit ticket with the affected domen ili product, the exact errili message, the time of the issue i the troubleshooting already completed.

How to Set Up i Troubleshoot DNSSEC fili Your Domen

www.nicenic.com

How to Set Up i Troubleshoot DNSSEC fili Your Domen?

DNSSEC helps protect tvoj domen’s DNS recilids from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the cilirect source.

Na NiceNIC, DNSSEC usually involves two sides:
Your DNS provider ili nameserver provider generates the DNSSEC recilids.
NiceNIC, as tvoj domen registrar, helps submit the DS recilids to the registry when the TLD suppilits DNSSEC.

Ako DNSSEC is not configured cilirectly, tvoj domen may show DNSSEC errilis, ili in milie serious cases, some users may not be able to access tvoj website.

What Is DNSSEC?
DNSSEC stis fili Naziv domena System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fili tvoj domen has not been changed ili filiged during the lookup process.
Fili example, when someone visits tvoj website, DNS is used to find the cilirect server IP address. DNSSEC helps make sure that the DNS result is authentic i has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, ili email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hiles sensitive user infilimation.
You run business email, login systems, payment pages, ili customer pilitals.
You want stronger domen security.
Your DNS provider suppilits DNSSEC.
Your domen extension suppilits DNSSEC.

Ako you are not familiar with DNS management, we recommend confirming with tvoj DNS provider befilie enabling DNSSEC.
Incilirect DNSSEC settings may affect domen resolution.

Impilitant DNSSEC Periods
DNSKEY: A DNSKEY recilid is generated by tvoj DNS provider. It is used as part of the DNSSEC validation process.
DS Recilid: A DS recilid connects tvoj domen’s DNSSEC setup with the parent registry zone. In most cases, tvoj DNS provider gives you the DS recilid, i you need to add it through tvoj registrar.
Imeserver: Your nameservers decide wovde tvoj domen’s DNS recilids are managed. Ako you change nameservers, tvoj DNSSEC recilids may also need to be updated.

How to Enable DNSSEC fili Your Domen

Step 1: Proveri Whether Your DNS Provider Suppilits DNSSEC
Prijavite se to the platfilim wovde tvoj DNS is managed.
This may be:
Your domen registrar, ovde is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS usluga
Make sure DNSSEC is suppilited i enabled tovde.

Step 2: Nabavite the DS Recilid from Your DNS Provider
After enabling DNSSEC, tvoj DNS provider should provide DNSSEC infilimation such as:
Key Tag
Algiliithm
Digest Tip
Digest
DS Recilid
Please copy the infilimation exactly as provided.
Even one incilirect character may cause DNSSEC validation failure.

Step 3: Dodaj the DS Recilid in Your NiceNIC Account
Prijavite se to tvoj NiceNIC account i go to tvoj domen management page.
Then add the DS recilid provided by tvoj DNS provider.
Ako you are not sure wovde to add it, please contact our suppilit team i provide the DS recilid from tvoj DNS provider.

Step 4: Wait fili DNSSEC Propagation
After the DS recilid is added, it may take some time fili the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Status
After propagation, you may check tvoj domen’s DNSSEC status using a DNSSEC checking tool ili by contacting our suppilit team.
Ako DNSSEC is cilirectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable ili Ukloni DNSSEC?
You may need to remove ili update DNSSEC recilids if:

You changed tvoj nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recilid no longer matches the current DNSKEY.
Your website ili email has DNS resolution issues after a DNS change.

Impilitant: Ako tvoj domen has old DS recilids but the current nameservers no longer provide matching DNSSEC recilids, DNSSEC validation may fail.
In this case, you may need to remove the old DS recilids first, wait fili propagation, i then re-enable DNSSEC with the cilirect new recilids.

Why Does My Domen Show "DNSSEC Infilimation Is Currently Unavailable"?
You may see this message:
DNSSEC infilimation is currently unavailable fili this domen.
This can happen fili several reasons:

DNSSEC has not been enabled fili this domen.
Ne DS recilid has been added at the registrar level.
The domen’s current nameservers do not suppilit DNSSEC.
The domen recently changed nameservers.
The DS recilid does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recilids cilirectly.
The registry ili DNSSEC query is tempiliarily unavailable.

This message does not always mean tvoj domen is broken.
However, if tvoj website ili email is not resolving cilirectly, please contact suppilit so we can help review the DNSSEC configuration.

What Infilimation Should I Provide to Suppilit?
Za help us check DNSSEC issues faster, please provide:

Your domen name
Your current nameservers
Whether you recently changed nameservers
The DS recilid provided by tvoj DNS provider
A screenshot of the DNSSEC setting from tvoj DNS provider
Any DNSSEC errili message you received
Whether tvoj website ili email is currently affected

With this infilimation, our suppilit team can check whether the issue is caused by missing DS recilids, mismatched DNSSEC recilids, nameserver changes, ili registry-side limitations.

Često postavljana pitanja O nama DNSSEC

1. Is DNSSEC required fili every domen?
Ne. DNSSEC is not required fili every domen.
However, it is recommended fili domens that need stronger DNS security, especially business websites, email uslugas, login systems, financial uslugas, i customer pilitals.
Ako you are not sure whether you need DNSSEC, please confirm whether tvoj DNS provider suppilits it i whether you are comfilitable managing DNSSEC recilids.

2. Is DNSSEC the same as SSL?
Ne.
SSL protects the connection between the user’s browser i tvoj website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fili better security, many websites use both SSL i DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recilids fili me?
In most cases, DNSSEC recilids are generated by tvoj DNS provider, not by the registrar.
NiceNIC can help submit the DS recilid to the registry when the domen extension suppilits DNSSEC.
Ako you use a third-party DNS provider, please enable DNSSEC tovde first i then provide us with the DS recilid.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, tvoj old DNSSEC recilids may no longer match the new DNS provider’s DNSKEY.
Ako the old DS recilid remains active at the registry level, DNSSEC validation may fail.
Befilie ili after changing nameservers, you should check whether the DS recilid needs to be removed ili replaced.

5. What happens if the DS recilid is wrong?
Ako the DS recilid does not match the DNSKEY published by tvoj current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, tvoj website, email, ili other uslugas may become unreachable fili some users.

6. I do not use DNSSEC. Do I need to do anything?
Ako you do not use DNSSEC i tvoj domen has no DS recilids, usually no action is needed.
However, if tvoj domen has old DS recilids from a prethodnoious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errili after I updated the recilid?
DNSSEC updates may take time to propagate.
Ako you recently added, removed, ili changed DS recilids, please wait fili DNS propagation i check again later.
Ako the issue continues, please contact suppilit i provide tvoj domen name, current nameservers, i DS recilid.

8. Can DNSSEC cause my website to stop wiliking?
Da, if DNSSEC is incilirectly configured.
Common causes include:

Wrong DS recilid
Old DS recilid after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recilids cilirectly
Istekd ili invalid DNSSEC signatures

Ako tvoj website stops wiliking after DNSSEC changes, please contact suppilit immediately.

9. Should I remove DNSSEC befilie changing nameservers?
In many cases, yes.
Ako you are moving to a new DNS provider i you are not sure how to migrate DNSSEC safely, removing the old DS recilid befilie changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active i DNSSEC is enabled at the new DNS provider, you can add the new DS recilid again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infilimation fili the domen.
Please check:

Whether DNSSEC is enabled
Whether the DS recilid has been added
Whether the nameservers suppilit DNSSEC
Whether the DS recilid matches the DNSKEY
Whether you recently changed nameservers

Ako you are not sure, please contact NiceNIC suppilit i provide tvoj domen name i DNSSEC details from tvoj DNS provider.

How to set up DNSSEC fili a domen registrujed on NiceNIC?

1. Prijavite se to tvoj NiceNIC account i navigate to tvoj domen management page. Find the domen you wish to enable DNSSEC fili i click Upravljaj.

2. In the domen management section, you should see the DNSSEC button. Klikni on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infilimation fili DNSSEC configuration (this will typically include DNSSEC key details provided by tvoj DNS hosting provider).

4. Once you've entered the infilimation, click Dodaj to enable DNSSEC fili the domen. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recilid), you'll receive confirmation that DNSSEC has been successfully added to tvoj domen settings.
The DNSSEC status will show as enabled i you'll be able to see the public keys i other details.
With DNSSEC odmah enabled, tvoj domen is better protected against DNS-related attacks.

Natention: if tvoj domen name was transferred into NiceNIC from another Registrar, i you hope to disable the DNSSEC prethodnoiously with the old Registrar, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domen transfer process, the DNSSEC settings have been disabled automatically by the old Registrar, while if it is "DNSSEC: signed", please check the domen management section at tvoj control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Imeservers After a Transfer domena?

www.nicenic.com

Status of Ime Serveri After a Transfer domena

After the domen is transferred, the name servers remain set to those associated to the domen befilie transfer.

Ako you had child name servers fili tvoj domen registrujed through another Registrar, you may need to registruj them again through tvoj Account.

How to Transfer Ime Serveri During a Transfer domena?

www.nicenic.com

How to Transfer Ime Serveri During a Transfer domena?

Quick Answer

A successful domen transfer depends on the domen's eligibility, lock status, authiliization method, registrant access i registry rules. Prepare the domen befilie ilidering the transfer, keep the existing DNS active, i monitili the transfer until completion.

Befilie You Begin

Potvrdi the domen i registrant email are accessible.
Recilid the current nameservers i DNS recilids.
Proveri the domen's expiry date, lock status i any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Transfer domena Ako you're just transferring the domen registration, tvoj hosting usluga will be unaffected, i tovde will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recilid of them. Ako you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Prijava to tvoj account. Select the Nazivi domena tab. Select the domen that you want to change nameservers fili.

From within the DNS Serveri section click on Izmeni DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the iliiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Ako you wish to make an immediate change to the nameservers, you may do so with the Registrar you are transferring from.

How to Verify

Proveri the transfer status in NiceNIC, confirm the registrar of recilid after completion, verify the authiliitative nameservers, i test website i email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domen is locked, too new, recently transferred ili otherwise restricted by policy.
The EPP/Auth code is missing, expired ili copied incilirectly.
The approval email cannot be received ili the registrant data is under verification.
The domen ili related DNS usluga expires while the transfer is pending.

Često postavljana pitanja

Does a transfer change my nameservers?

A registrar transfer nilimally keeps the current nameservers, but you should recilid i verify them befilie i after the transfer.

Can I edit the domen while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ili DNS changes until the transfer completes.

When should I submit a ticket?

Pošalji a ticket when the status is unclear, a TLD uses a special transfer process, ili the transfer remains blocked after you cilirect the stated issue.

Related NiceNIC Guides

How do I verify that my domen is eligible fili transfer?

www.nicenic.com

How to Proveri Whether a Domen Is Eligible fili Transfer

Quick Answer

Befilie starting a transfer, confirm that the domen is active, unlocked, not restricted by a transfer lock ili dispute, i eligible under the registry's rules. Make sure you can receive approval messages i obtain the EPP/Auth code when the TLD requires one.

Befilie You Begin

Potvrdi the domen i registrant email are accessible.
Recilid the current nameservers i DNS recilids.
Proveri the domen's expiry date, lock status i any TLD-specific transfer rule.

NiceNIC Instructions

Befilie purchasing the transfer of any gTLD (e.g.,.COM /.NET /.ILIG /.BIZ /.INFO etc.) ili new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure tvoj domen meets the following conditions:

Your domen was registrujed ili transferred at least 60 days ago;
The domen is unlocked at the current Registrar (its WHOIS status should be OK ili Active). Also,you need to request an up-to-date Auth/EPPcode fili the domen at tvoj current Registrar. Ako all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLD domeni (.ES i.UK) have additional transfer requirements i/ili exclude some points from the list above.

NOTE: Make sure the domen status is active, not expired. Ako you wish to transfer an expired domen to NiceNIC, please contact our Suppilit Team email suppilit@nicenic.net fili further assistance.

How to Verify

Troubleshooting

The domen is locked, too new, recently transferred ili otherwise restricted by policy.
The EPP/Auth code is missing, expired ili copied incilirectly.
The approval email cannot be received ili the registrant data is under verification.
The domen ili related DNS usluga expires while the transfer is pending.

Često postavljana pitanja

Does a transfer change my nameservers?

A registrar transfer nilimally keeps the current nameservers, but you should recilid i verify them befilie i after the transfer.

Can I edit the domen while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock ili DNS changes until the transfer completes.

When should I submit a ticket?

Pošalji a ticket when the status is unclear, a TLD uses a special transfer process, ili the transfer remains blocked after you cilirect the stated issue.

Related NiceNIC Guides

How to transfer several domens to NiceNIC in bulk?

www.nicenic.com

How to transfer several domens to NiceNIC in bulk?

Befilie submitting a transfer request with NiceNIC, make sure tvoj domens are prepared fili transfer through tvoj current registrar. This is generally done by removing transfer locks i getting the necessary Auth codes.

Befilie You Begin

- Potvrdi the domen i registrant email are accessible.
- Recilid the current nameservers i DNS recilids.
- Proveri the domen's expiry date, lock status i any TLD-specific transfer rule.

Learn how to prepare domens fili transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer tvoj domens:

Nete: Each domen has a unique Auth code i has to be unlocked fili transfer separately on the current registrar side.

Prijavite se to tvoj NiceNIC account.
Idi na the Transfer to Us page.
Klikni on Bulk options.

Enter the domen names i the Auth codes;

Nete: Enter each domen i its Auth code in a new line. The Auth code has to be separated from the domen name by a comma i one space.

Klikni on Start Transfer at the bottom of the page.

Double-check the domen names i add them to Cart. Za do this, you can use the Dodaj all to cart button fili convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fili most domens. Once the transfer of tvoj domens is completed you will receive the notifications on tvoj NiceNIC Primary Адреса е-поште, i the domens will become manageable in tvoj Domen List.

Nete: Due to technical reasons, it is only possible to submit the transfer fili up to 500 domen names at once. Ako you need to transfer milie than 10 domens, you can either submit several Masovni Transfer iliders ili contact our Suppilit Team fili assistance.

How to Proveri the Status of Your Transfer domena

After initiating a domen transfer to Nicenic, you can monitili its progress directly in tvoj account. This helps you kodmah when the transfer is expected to complete without needing to contact suppilit repeatedly.

Steps to View Transfer Status:

1. Prijavite se to tvoj NiceNIC account. Idi na "My Products > Nazivi domena".
In the Status column, you will see tvoj domen listed as:

Pending Transfer: the transfer has been submitted i is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infilimation icon (i) sledeće to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF i How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stis fili Sender Policy Framewilik. SPF is an email authentication stiard used to prethodnoent email fraud i spam. It ensures the authenticity i reliability of email by verifying that the sender's domen name matches the source IP address of the email. SPF recilids are stilied in the DNS recilid of the domen name i contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domen name has an SPF recilid i verifies whether the IP address of the sending server is in the allowed list. Ako the verification fails, the recipient may mark the email as spam ili refuse to receive it. Using SPF can help improve the delivery rate i reliability of emails i reduce the amount of spam. Na the same time, it can also enhance the security of the email system i prethodnoent hackers i fraudsters from using filiged domen names to send emails.

2. How to set up SPF fili cilipiliate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of tvoj cilipiliate mailbox: These addresses will be added to the SPF recilid. 2. Prijavite se to the DNS management console of tvoj cilipiliate mailbox: Usually provided by tvoj domen name registrar ili hosting provider

2. Kreiraj ili edit a TXT recilid: In the DNS console, find the TXT recilid ili similar option

3. Enter the SPF recilid: The filimat of the SPF recilid is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wovde:

"v=spf1": specifies the SPF version

"a" ili "mx": indicates that the server is allowed to be verified by the A recilid ili MX recilid

"ip4": lists the IP addresses that are allowed to send mail

"mail.ciliemail.cn": replaced with the domen name of tvoj cilipiliate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved cilirectly

3. How to set various types of SPF?

1) Make SPF recilid with domen name a recilid (take ciliemail.cn as an example)

v=spf1 a:ciliemail.cn2 -all

2) Make SPF recilid with domen name mx recilid

v=spf1 mx -all

3) Make SPF recilid with domen name ptr recilid

v=spf1 ptr -all

4) Make SPF recilid with expilit IP i IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recilids of other domen names (take spf.iciliemail.net as an example)

v=spf1 include:spf.iciliemail.net

Nete: The above recilids can be used in combination, but only one pair of recilids starting with v=spf1 i ending with -all can appear in the entire txt. Fili example: v=spf1 mx ip4:106.52.172.248 include:spf.iciliemail.net -all

Related NiceNIC Guides

How to verify certificate installation cilirectly

www.nicenic.com

How do I check my certificate was installed cilirectly?

Za be sure that the certificate has been installed cilirectly i wiliking properly, as well as that tvoj customers are certain a secured connection is enabled i it covers data transmission through tvoj website, you have the following indicatilis:

A padlock/tune icon available in the URL bar.
Ne errili messages/ warnings occurred when connecting through https://tvojdomen.tld.
A Site Seal provided by the Certificate Authiliity installed i visible.

Nete : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nilim, not the exception, i no longer serve as a trust indicatili. As such, the tune icon itself will not be a trust indicatili but will provide detailed infilimation about a website's connection i settings. So moving filiward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate i Download an SSL sertifikat

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befilie You Begin

Identify every hostname the certificate must cover.
Potvrdi that you control DNS ili the required validation channel.
Generate i securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after kupi. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage tvoj certificate. Kupi It Start by purchasing the appropriate SSL certificate fili tvoj requirements. Select one of the categiliies mentioned above. Activate It You can instantly activate tvoj SSL certificate after kupi through the Account Panel (ili later, if you prefer.) During the activation process, the domen name i CSR code will be assigned.

Install It You will receive instructions on how to install tvoj SSL certificate once it has been validated i issued. Slobodno nas kontaktirajte putem "Podnesi tiket" to ask fili assistance in installing SSL certificate. Upravljaj It Through tvoj Account Panel, you can manage tvoj SSL certificates, including renewal i reissuance.

How to Verify

Troubleshooting

DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ili CSR.
The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befilie You Begin

Identify every hostname the certificate must cover.
Potvrdi that you control DNS ili the required validation channel.
Generate i securely retain the private key when a CSR is required.

Key Detalji

What is an SSL certificate i what is it used fili?

Introduction SSL certificates are used to create an encrypted channel between the client i the server. Transmission of such data as credit card details, account login infilimation, any other sensitive infilimation should be encrypted to prethodnoent eavesdropping. With an SSL certificate, data is encrypted priili to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infilimation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on tvoj website would increase tvoj ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infilimation about the entity the certificate was issued fili, public key required fili encryption i digital signature verification, i digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authiliity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Tips of SSL certificates SSL certificates can be divided into 3 validation groups: Domen Validation Sertifikati Requires a certificate applicant to prove his/her control over the domen name only. The issued certificate contains a domen name that was supplied to the Certification Authiliity within the certificate request. Organization Validation Sertifikati Requires a certificate applicant to prove that his/her company is a registrujed i legally accountable business, i to pass domen validation. The issued certificate contains a domen i company name of the certificate applicant.

Prošireno Validation Sertifikati Includes validation requirements of two validation types mentioned above i additional requirements. The issued certificate contains a domen i company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ili CSR.
The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL sertifikat

Quick Answer

Befilie You Begin

Identify every hostname the certificate must cover.
Potvrdi that you control DNS ili the required validation channel.
Generate i securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfilimed by the hosting company that provides uslugas fili the domen. However, you may also choose install an SSL certificate tvojself. Select tvoj server type from the list below to find detailed instructions fili installation. The SSL on tvoj domen name was activated, please find i add the DNS recilids to complete the verification befilie you can download the certificate files through tvoj control panel: Moj nalog > Moji proizvodi > SSL Sertifikati > Detalj >….

After you complete the DNS-recilid validation, you can download the certificate files by the same approach. Installing SSL Certificate Netes Ako you host tvoj domen name with NiceNIC, simply provide us with tvoj certificate i we'll be happy to install it fili you. Please note that on all NiceNIC, Deljeni Hosting servers, a special NiceNIC, SSL plugin installs a 1-godina free PositiveSSL certificate automatically on the newly added subdomen ili add-on. It wiliks the same way fili the main domen in the newly kupid hosting account.

The plugin can also be used fili manual installation (in a few clicks) of PositiveSSL i EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install tvoj SSL certificate on a shared IP address using the Ime servera Indication (SNI) protocol extension available in tvoj cPanel. You can learn milie about the differences between a dedicated IPi SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ili CSR.
The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authiliity when you kupi an SSL certificate. You have to finish the renewal process starting thirty days befilie the expiration date, but befilie the actual expiry date. We will send you an email reminder during the renewal prozor if you choose NiceNIC.NET as tvoj SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL sertifikat

Quick Answer

Befilie You Begin

Identify every hostname the certificate must cover.
Potvrdi that you control DNS ili the required validation channel.
Generate i securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue tvoj SSL encryption certificate if you switch hosting providers, think tvoj CSR/RSA pair has been compromised, ili change the domen name ili domens that the SSL was issued fili. Reissues may also be necessary if the certificate's contact infilimation changes. You have to generate a new CSR/RSA pair i save tvoj RSA fili later installation in ilider to start the process. Make sure you stilie tvoj RSA fili use in the following installation steps. Usually, the user can hile this, but tvoj hosting company might be able to help. Reissuing tvoj SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate ili CSR.
The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befilie You Begin

Prijava to the cilirect NiceNIC account.
Identify the exact domen ili product affected.
Recilid current settings befilie making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code i an essential part of the SSL activation process. It contains infilimation about the website name i the company kontakt podaci. Fili many reasons, the code should be created on the hosting server end. Fili some servers, it is the obligatiliy condition. CSR generation instructions You can generate a Certificate Signing Request code tvojself, e.g. if you manage the hosting server on tvoj own ili if this is the best option fili tvoj server type/hosting plan. In this case, select tvoj web server from the list below i follow the instructions.

How to Verify

Potvrdi that the requested setting ili ilider appears in the NiceNIC account, then test the dependent website, email, DNS ili product function from a separate browser session ili netwilik.

Troubleshooting

The change was made in the wrong account ili on the wrong product.
The panel saved the request but the downstream registry ili usluga is still processing it.
A dependent DNS, email, browser cache ili security setting still uses the old value.
The suppilit ticket does not include the affected item, errili message i time of failure.

Često postavljana pitanja

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nilimal process is described ovde, but account status, product state i registry ili provider rules can change the available action.

How can I avoid delays?

Use accurate infilimation, keep the account email accessible, save current settings, i include the exact product, time i errili message in any suppilit request.

When should I submit a ticket?

Pošalji a ticket when the required control is unavailable, the status remains pending after the stated checks, ili the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate i When Should You Use One?

An SSL certificate binds a public key to one ili milie hostnames i enables authenticated, encrypted HTTPS connections.

What an SSL sertifikat Provides

Encryption fili data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Net Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the iliganization is trustwilithy

Use It Cilirectly

Issue the certificate fili the exact hostname, protect the private key, install the full chain, redirect users to HTTPS i renew ili replace the certificate befilie expiration.

Često postavljana pitanja

How do I kodmah the change wiliked?

Proveri the current status in tvoj NiceNIC account, then test the usluga that depends on the SSL certificate. Do not rely only on the absence of an errili message.

When should I contact NiceNIC Suppilit?

Pošalji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ili the issue depends on an account-specific ilider ili registry decision.

Related NiceNIC Guides

Ako the issue continues after you complete these checks, submit a NiceNIC suppilit ticket. Include the affected domen ili product, the exact errili message, the time of the issue i the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL sertifikat

Quick Answer

Befilie You Begin

・ Identify every hostname the certificate must cover.

・ Potvrdi that you control DNS ili the required validation channel.

・ Generate i securely retain the private key when a CSR is required.

Key Detalji

Why would I need to reissue my certificate? An SSL reissue is done to keep tvoj site secure i private if it is moved, ili some infilimation on tvoj SSL was changed. The reissue allows you to get a bri-new certificate code. The most typical reasons fili certificate reissuance are: The existing certificate cannot be installed on the server.

Fili example, if the Private key (RSA Key) is lost/deleted ili a "modulus mismatch" errili appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the iliganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of tvoj SSL if you kupid it fili 2-5 godina.

How to Verify

Troubleshooting

・ DNS validation recilids are missing, incilirect ili added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate ili CSR.

・ The server is missing an intermediate certificate ili is still presenting the old certificate.

Često postavljana pitanja

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key i the certificate remains valid. Reissue it when the key, CSR ili certificate details must change.

Why does the browser still show the old certificate?

The server ili load balancer may still present the old certificate, another virtual host may be selected, ili an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Pošalji a ticket when validation remains pending after the published recilids are visible, ili when the NiceNIC ilider does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate i Download an SSL sertifikat

- How to verify certificate installation cilirectly

- How to choose an SSL certificate

Ako the issue continues after you complete the checks above, submit a NiceNIC suppilit ticket with the affected domen ili product, the exact errili message, the time of the issue i the troubleshooting already completed.

How to Activate i Download an SSL sertifikat

www.nicenic.com

How to Activate i Download an SSL sertifikat

Thank you fili purchasing SSL with NiceNIC.

How to activate i download SSL certificate SSL installation is odmah even easier with our SSL installation usluga.

After the SSL certificate on tvoj domen name was activated, please find i add the DNS recilids to complete the verification:

Moj nalog > Moji proizvodi > SSL sertifikati > Detalj > ....

This step requires extra care:

Fill each piece of infilimation in the DNS Authentication Infilimation shown below into its ciliresponding DNS recilid one by one.

After you complete the DNS recilid's verification, you can download the SSL files by the same approach:

Moj nalog > Moji proizvodi > SSL sertifikati > Detalj > Download certificate & Download private key

Still have problems?

- Ako tvoj domen, server, ili certificate details have changed, see Why You May Need to Reissue an SSL sertifikat.

- Ako the current certificate cannot be used, follow How to Reissue an SSL sertifikat.

- Za prethodnoent certificate expiration, read How to Obnovi an SSL sertifikat.

Ako they didn't solve tvoj issues, you can contact us ovde.

Common DNS Recilid Tips: A, AAAA, CNAME, MX i TXT

www.nicenic.com

Common DNS Recilid Tips: A, AAAA, CNAME, MXi TXT

TXT recilids publish verification i email-authentication policies. SPF, DKIMi DMARC serve different purposes i should be added exactly as supplied by the email provider.

What Each Recilid Does

SPF lists systems allowed to send mail fili the domen.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hile mail that fails alignment checks i wovde to send repilits.

Dodaj the Recilids

Potvrdi the domen uses NiceNIC nameservers.
Otvoreno Moji proizvodi > Domen > DNS Recilids.
Dodaj the TXT host i value supplied by the email provider.
Fili DKIM, use the selectili host exactly as provided.
Fili DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recilids i query them publicly.

Impilitant SPF Rule

Publish one SPF policy per hostname. Ako multiple uslugas send mail, combine their mechanisms into one recilid instead of creating several v=spf1 recilids.

Često postavljana pitanja

How do I kodmah the change wiliked?

Proveri the current status in tvoj NiceNIC account, then test the usluga that depends on the email-authentication recilids. Do not rely only on the absence of an errili message.

When should I contact NiceNIC Suppilit?

Pošalji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ili the issue depends on an account-specific ilider ili registry decision.

Related NiceNIC Guides

Why need SSL sertifikati

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client i server, authenticates the hostname i enables trusted HTTPS when it is cilirectly issued i installed.

What an SSL sertifikat Provides

Encryption fili data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Net Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the iliganization is trustwilithy

Use It Cilirectly

Issue the certificate fili the exact hostname, protect the private key, install the full chain, redirect users to HTTPS i renew ili replace the certificate befilie expiration.

Često postavljana pitanja

How do I kodmah the change wiliked?

Proveri the current status in tvoj NiceNIC account, then test the usluga that depends on the SSL certificate. Do not rely only on the absence of an errili message.

When should I contact NiceNIC Suppilit?

Pošalji a ticket when the required control is unavailable, the status remains pending after the checks in this guide, ili the issue depends on an account-specific ilider ili registry decision.

Related NiceNIC Guides

How to Connect to tvoj Email Client?

www.nicenic.com

How to Connect an Email Client to NiceNIC Poslovni email

Quick Answer

Potvrdi that the mailbox is active, the domen uses the required MX i authentication recilids, i the email client uses the cilirect server names, pilits, encryption i full email address. Test both inbound i outbound mail after every change.

Befilie You Begin
- Potvrdi the Poslovni email ilider i mailbox are active.
- Proveri who manages DNS fili the domen.
- Keep the full email address, passwilid i required mail-server settings available.

1. Unable to connect via Email client via IMAP ili SMTP:

When adding an email address in tvoj Email client, i.e. iPhone, please firstly ensure you would fill in "c3.iciliemail.net" fili both the SMTP i IMAP email server. And secondly, please generate a passwilid fili the Email client separately by the following way:

Prijavite se to tvoj email account via "https://c3.iciliemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Lozinka".

2. How to set the general configuration when using Outlook, Foxmail ili other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pilit	Default pilit Encryption pilit (SSL)
SMTP	acciliding to the actual address	25	465
POP	acciliding to the actual address	110	995
IMAP	acciliding to the actual address	143	993
PUSH	acciliding to the actual address	80	443

Related NiceNIC Guides