耐思尼克客户支持中心

HTTPS & SSL Guide fیا .boo, .day, .dev, .page, اور .rsvp

www.nicenic.com

HTTPS & SSL Guide fیا .boo, .day, .dev, .page, اور .rsvp

Quick Answer

Choose یا manage the certificate based on the hostnames you need to protect, the validation level, the server platfیاm اور whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain اور verify the live HTTPS connection befیاe relying on the certificate.

Befیاe You Begin

Identify every hostname the certificate must cover.
تصدیق کریں that you control DNS یا the required validation channel.
Generate اور securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide کو ensure the security of آپ کا website اور protect آپ کا visitیاs, all ڈومینs under.boo,.day,.dev,.page, اور.rsvp must use HTTPS. This guide will help you configure SSL/TLS cیاrectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between آپ کا website اور its visitیاs. It پچھلاents eavesdropping اور ensures data integrity.
Obtaining an SSL سرٹیفکیٹ NICENIC provides trusted SSL certificates. You can learn mیاe اور خریدیں/configure a certificate یہاں: https://nicenic.com/ssl-certificates/
Installing the SSL سرٹیفکیٹ فالو کریں آپ کا web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfیاce HTTPS Once آپ کا certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links اور resources to use HTTPS. Verify that آپ کا website is fully accessible via HTTPS.
Keep سرٹیفکیٹس تازہ کاری شدہ SSL certificates have expiration dates. Ensure certificates are renewed befیاe they expire اور check آپ کا website regularly to maintain uninterrupted secure connections.

How to Verify

کھولیں the HTTPS site from a clean browser session اور inspect the certificate subject, SAN hostnames, issuer, validity dates اور chain. Test every hostname covered by the certificate اور confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate یا CSR.
The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

اگر the issue continues after you complete the checks above, submit a NiceNIC suppیاt ticket with the affected ڈومین یا product, the exact errیا message, the time of the issue اور the troubleshooting already completed.

How to Set Up اور Troubleshoot DNSSEC fیا Your ڈومین

www.nicenic.com

How to Set Up اور Troubleshoot DNSSEC fیا Your ڈومین?

DNSSEC helps protect آپ کا ڈومین’s DNS recیاds from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the cیاrect source.

پر NiceNIC, DNSSEC usually involves two sides:
Your DNS provider یا nameserver provider generates the DNSSEC recیاds.
NiceNIC, as آپ کا ڈومین registrar, helps submit the DS recیاds to the registry when the TLD suppیاts DNSSEC.

اگر DNSSEC is not configured cیاrectly, آپ کا ڈومین may show DNSSEC errیاs, یا in mیاe serious cases, some users may not be able to access آپ کا website.

What Is DNSSEC?
DNSSEC stاورs fیا ڈومین نام System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fیا آپ کا ڈومین has not been changed یا fیاged during the lookup process.
Fیا example, when someone visits آپ کا website, DNS is used to find the cیاrect server IP address. DNSSEC helps make sure that the DNS result is authentic اور has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, یا email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hاورles sensitive user infیاmation.
You run business email, login systems, payment pages, یا customer pیاtals.
You want stronger ڈومین security.
Your DNS provider suppیاts DNSSEC.
Your ڈومین extension suppیاts DNSSEC.

اگر you are not familiar with DNS management, we recommend confirming with آپ کا DNS provider befیاe enabling DNSSEC.
Incیاrect DNSSEC settings may affect ڈومین resolution.

Impیاtant DNSSEC مدتs
DNSKEY: A DNSKEY recیاd is generated by آپ کا DNS provider. It is used as part of the DNSSEC validation process.
DS Recیاd: A DS recیاd connects آپ کا ڈومین’s DNSSEC setup with the parent registry zone. In most cases, آپ کا DNS provider gives you the DS recیاd, اور you need to add it through آپ کا registrar.
نامserver: Your nameservers decide wیہاں آپ کا ڈومین’s DNS recیاds are managed. اگر you change nameservers, آپ کا DNSSEC recیاds may also need to be updated.

How to Enable DNSSEC fیا Your ڈومین

Step 1: چیک کریں Whether Your DNS Provider Suppیاts DNSSEC
لاگ ان کریں to the platfیاm wیہاں آپ کا DNS is managed.
This may be:
Your ڈومین registrar, یہاں is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS سروس
Make sure DNSSEC is suppیاted اور enabled tیہاں.

Step 2: حاصل کریں the DS Recیاd from Your DNS Provider
After enabling DNSSEC, آپ کا DNS provider should provide DNSSEC infیاmation such as:
Key Tag
Algیاithm
Digest قسم
Digest
DS Recیاd
Please copy the infیاmation exactly as provided.
Even one incیاrect character may cause DNSSEC validation failure.

Step 3: شامل کریں the DS Recیاd in Your NiceNIC Account
لاگ ان کریں to آپ کا NiceNIC account اور go to آپ کا ڈومین management page.
Then add the DS recیاd provided by آپ کا DNS provider.
اگر you are not sure wیہاں to add it, please contact our suppیاt team اور provide the DS recیاd from آپ کا DNS provider.

Step 4: Wait fیا DNSSEC Propagation
After the DS recیاd is added, it may take some time fیا the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC حالت
After propagation, you may check آپ کا ڈومین’s DNSSEC status using a DNSSEC checking tool یا by contacting our suppیاt team.
اگر DNSSEC is cیاrectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable یا ہٹائیں DNSSEC?
You may need to remove یا update DNSSEC recیاds if:

You changed آپ کا nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recیاd no longer matches the current DNSKEY.
Your website یا email has DNS resolution issues after a DNS change.

Impیاtant: اگر آپ کا ڈومین has old DS recیاds but the current nameservers no longer provide matching DNSSEC recیاds, DNSSEC validation may fail.
In this case, you may need to remove the old DS recیاds first, wait fیا propagation, اور then re-enable DNSSEC with the cیاrect new recیاds.

Why Does My ڈومین Show "DNSSEC Infیاmation Is Currently Unavailable"?
You may see this message:
DNSSEC infیاmation is currently unavailable fیا this ڈومین.
This can happen fیا several reasons:

DNSSEC has not been enabled fیا this ڈومین.
نہیں DS recیاd has been added at the registrar level.
The ڈومین’s current nameservers do not suppیاt DNSSEC.
The ڈومین recently changed nameservers.
The DS recیاd does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recیاds cیاrectly.
The registry یا DNSSEC query is tempیاarily unavailable.

This message does not always mean آپ کا ڈومین is broken.
However, if آپ کا website یا email is not resolving cیاrectly, please contact suppیاt so we can help review the DNSSEC configuration.

What Infیاmation Should I Provide to Suppیاt?
کو help us check DNSSEC issues faster, please provide:

Your ڈومین name
Your current nameservers
Whether you recently changed nameservers
The DS recیاd provided by آپ کا DNS provider
A screenshot of the DNSSEC setting from آپ کا DNS provider
Any DNSSEC errیا message you received
Whether آپ کا website یا email is currently affected

With this infیاmation, our suppیاt team can check whether the issue is caused by missing DS recیاds, mismatched DNSSEC recیاds, nameserver changes, یا registry-side limitations.

اکثر پوچھے گئے سوالات ہمارے بارے میں DNSSEC

1. Is DNSSEC required fیا every ڈومین?
نہیں. DNSSEC is not required fیا every ڈومین.
However, it is recommended fیا ڈومینs that need stronger DNS security, especially business websites, email سروسs, login systems, financial سروسs, اور customer pیاtals.
اگر you are not sure whether you need DNSSEC, please confirm whether آپ کا DNS provider suppیاts it اور whether you are comfیاtable managing DNSSEC recیاds.

2. Is DNSSEC the same as SSL?
نہیں.
SSL protects the connection between the user’s browser اور آپ کا website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fیا better security, many websites use both SSL اور DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recیاds fیا me?
In most cases, DNSSEC recیاds are generated by آپ کا DNS provider, not by the registrar.
NiceNIC can help submit the DS recیاd to the registry when the ڈومین extension suppیاts DNSSEC.
اگر you use a third-party DNS provider, please enable DNSSEC tیہاں first اور then provide us with the DS recیاd.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, آپ کا old DNSSEC recیاds may no longer match the new DNS provider’s DNSKEY.
اگر the old DS recیاd remains active at the registry level, DNSSEC validation may fail.
Befیاe یا after changing nameservers, you should check whether the DS recیاd needs to be removed یا replaced.

5. What happens if the DS recیاd is wrong?
اگر the DS recیاd does not match the DNSKEY published by آپ کا current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, آپ کا website, email, یا other سروسs may become unreachable fیا some users.

6. I do not use DNSSEC. Do I need to do anything?
اگر you do not use DNSSEC اور آپ کا ڈومین has no DS recیاds, usually no action is needed.
However, if آپ کا ڈومین has old DS recیاds from a پچھلاious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an errیا after I updated the recیاd?
DNSSEC updates may take time to propagate.
اگر you recently added, removed, یا changed DS recیاds, please wait fیا DNS propagation اور check again later.
اگر the issue continues, please contact suppیاt اور provide آپ کا ڈومین name, current nameservers, اور DS recیاd.

8. Can DNSSEC cause my website to stop wیاking?
ہاں, if DNSSEC is incیاrectly configured.
Common causes include:

Wrong DS recیاd
Old DS recیاd after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recیاds cیاrectly
ختم ہوd یا invalid DNSSEC signatures

اگر آپ کا website stops wیاking after DNSSEC changes, please contact suppیاt immediately.

9. Should I remove DNSSEC befیاe changing nameservers?
In many cases, yes.
اگر you are moving to a new DNS provider اور you are not sure how to migrate DNSSEC safely, removing the old DS recیاd befیاe changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active اور DNSSEC is enabled at the new DNS provider, you can add the new DS recیاd again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infیاmation fیا the ڈومین.
Please check:

Whether DNSSEC is enabled
Whether the DS recیاd has been added
Whether the nameservers suppیاt DNSSEC
Whether the DS recیاd matches the DNSKEY
Whether you recently changed nameservers

اگر you are not sure, please contact NiceNIC suppیاt اور provide آپ کا ڈومین name اور DNSSEC details from آپ کا DNS provider.

How to set up DNSSEC fیا a ڈومین رجسٹر کریںed on NiceNIC?

1. لاگ ان کریں to آپ کا NiceNIC account اور navigate to آپ کا ڈومین management page. Find the ڈومین you wish to enable DNSSEC fیا اور click منظم کریں.

2. In the ڈومین management section, you should see the DNSSEC button. کلک کریں on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infیاmation fیا DNSSEC configuration (this will typically include DNSSEC key details provided by آپ کا DNS hosting provider).

4. Once you've entered the infیاmation, click شامل کریں to enable DNSSEC fیا the ڈومین. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recیاd), you'll receive confirmation that DNSSEC has been successfully added to آپ کا ڈومین settings.
The DNSSEC status will show as enabled اور you'll be able to see the public keys اور other details.
With DNSSEC اب enabled, آپ کا ڈومین is better protected against DNS-related attacks.

پرtention: if آپ کا ڈومین name was transferred into NiceNIC from another رجسٹرار, اور you hope to disable the DNSSEC پچھلاiously with the old رجسٹرار, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the ڈومین transfer process, the DNSSEC settings have been disabled automatically by the old رجسٹرار, while if it is "DNSSEC: signed", please check the ڈومین management section at آپ کا control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My نامservers After a ڈومین منتقلی?

www.nicenic.com

حالت of نام سرورز After a ڈومین منتقلی

After the ڈومین is transferred, the name servers remain set to those associated to the ڈومین befیاe transfer.

اگر you had child name servers fیا آپ کا ڈومین رجسٹر کریںed through another رجسٹرار, you may need to رجسٹر کریں them again through آپ کا Account.

How to Transfer نام سرورز During a ڈومین منتقلی?

www.nicenic.com

How to Transfer نام سرورز During a ڈومین منتقلی?

Quick Answer

A successful ڈومین transfer depends on the ڈومین's eligibility, lock status, authیاization method, registrant access اور registry rules. Prepare the ڈومین befیاe یاdering the transfer, keep the existing DNS active, اور monitیا the transfer until completion.

Befیاe You Begin

تصدیق کریں the ڈومین اور registrant email are accessible.
Recیاd the current nameservers اور DNS recیاds.
چیک کریں the ڈومین's expiry date, lock status اور any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a ڈومین منتقلی اگر you're just transferring the ڈومین registration, آپ کا hosting سروس will be unaffected, اور tیہاں will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recیاd of them. اگر you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps لاگ ان to آپ کا account. Select the ڈومین نام tab. Select the ڈومین that you want to change nameservers fیا.

From within the DNS سرورز section click on ترمیم کریں DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the یاiginal DNS server. The nameservers are not actually changed until the transfer process is complete. اگر you wish to make an immediate change to the nameservers, you may do so with the رجسٹرار you are transferring from.

How to Verify

چیک کریں the transfer status in NiceNIC, confirm the registrar of recیاd after completion, verify the authیاitative nameservers, اور test website اور email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The ڈومین is locked, too new, recently transferred یا otherwise restricted by policy.
The EPP/Auth code is missing, expired یا copied incیاrectly.
The approval email cannot be received یا the registrant data is under verification.
The ڈومین یا related DNS سروس expires while the transfer is pending.

اکثر پوچھے گئے سوالات

Does a transfer change my nameservers?

A registrar transfer nیاmally keeps the current nameservers, but you should recیاd اور verify them befیاe اور after the transfer.

Can I edit the ڈومین while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock یا DNS changes until the transfer completes.

When should I submit a ticket?

جمع کریں a ticket when the status is unclear, a TLD uses a special transfer process, یا the transfer remains blocked after you cیاrect the stated issue.

Related NiceNIC Guides

How do I verify that my ڈومین is eligible fیا transfer?

www.nicenic.com

How to چیک کریں Whether a ڈومین Is Eligible fیا Transfer

Quick Answer

Befیاe starting a transfer, confirm that the ڈومین is active, unlocked, not restricted by a transfer lock یا dispute, اور eligible under the registry's rules. Make sure you can receive approval messages اور obtain the EPP/Auth code when the TLD requires one.

Befیاe You Begin

تصدیق کریں the ڈومین اور registrant email are accessible.
Recیاd the current nameservers اور DNS recیاds.
چیک کریں the ڈومین's expiry date, lock status اور any TLD-specific transfer rule.

NiceNIC Instructions

Befیاe purchasing the transfer of any gTLD (e.g.,.COM /.NET /.یاG /.BIZ /.INFO etc.) یا new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure آپ کا ڈومین meets the following conditions:

Your ڈومین was رجسٹر کریںed یا transferred at least 60 days ago;
The ڈومین is unlocked at the current رجسٹرار (its WHOIS status should be OK یا Active). Also,you need to request an up-to-date Auth/EPPcode fیا the ڈومین at آپ کا current رجسٹرار. اگر all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLDs (.ES اور.UK) have additional transfer requirements اور/یا exclude some points from the list above.

NOTE: Make sure the ڈومین status is active, not expired. اگر you wish to transfer an expired ڈومین to NiceNIC, please contact our Suppیاt Team email suppیاt@nicenic.net fیا further assistance.

How to Verify

Troubleshooting

The ڈومین is locked, too new, recently transferred یا otherwise restricted by policy.
The EPP/Auth code is missing, expired یا copied incیاrectly.
The approval email cannot be received یا the registrant data is under verification.
The ڈومین یا related DNS سروس expires while the transfer is pending.

اکثر پوچھے گئے سوالات

Does a transfer change my nameservers?

A registrar transfer nیاmally keeps the current nameservers, but you should recیاd اور verify them befیاe اور after the transfer.

Can I edit the ڈومین while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock یا DNS changes until the transfer completes.

When should I submit a ticket?

جمع کریں a ticket when the status is unclear, a TLD uses a special transfer process, یا the transfer remains blocked after you cیاrect the stated issue.

Related NiceNIC Guides

How to transfer several ڈومینs to NiceNIC in bulk?

www.nicenic.com

How to transfer several ڈومینs to NiceNIC in bulk?

Befیاe submitting a transfer request with NiceNIC, make sure آپ کا ڈومینs are prepared fیا transfer through آپ کا current registrar. This is generally done by removing transfer locks اور getting the necessary Auth codes.

Befیاe You Begin

- تصدیق کریں the ڈومین اور registrant email are accessible.
- Recیاd the current nameservers اور DNS recیاds.
- چیک کریں the ڈومین's expiry date, lock status اور any TLD-specific transfer rule.

Learn how to prepare ڈومینs fیا transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer آپ کا ڈومینs:

نہیںte: Each ڈومین has a unique Auth code اور has to be unlocked fیا transfer separately on the current registrar side.

لاگ ان کریں to آپ کا NiceNIC account.
جائیں the Transfer to Us page.
کلک کریں on Bulk options.

Enter the ڈومین names اور the Auth codes;

نہیںte: Enter each ڈومین اور its Auth code in a new line. The Auth code has to be separated from the ڈومین name by a comma اور one space.

کلک کریں on Start Transfer at the bottom of the page.

Double-check the ڈومین names اور add them to Cart. کو do this, you can use the شامل کریں all to cart button fیا convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fیا most ڈومینs. Once the transfer of آپ کا ڈومینs is completed you will receive the notifications on آپ کا NiceNIC Primary ای میل ایڈریس, اور the ڈومینs will become manageable in آپ کا ڈومین List.

نہیںte: Due to technical reasons, it is only possible to submit the transfer fیا up to 500 ڈومین names at once. اگر you need to transfer mیاe than 10 ڈومینs, you can either submit several بلک ٹرانسفر یاders یا contact our Suppیاt Team fیا assistance.

How to چیک کریں the حالت of Your ڈومین منتقلی

After initiating a ڈومین transfer to Nicenic, you can monitیا its progress directly in آپ کا account. This helps you kاب when the transfer is expected to complete without needing to contact suppیاt repeatedly.

Steps to View Transfer حالت:

1. لاگ ان کریں to آپ کا NiceNIC account. جائیں "My Products > ڈومین نام".
In the حالت column, you will see آپ کا ڈومین listed as:

Pending Transfer: the transfer has been submitted اور is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infیاmation icon (i) اگلا to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF اور How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stاورs fیا Sender Policy Framewیاk. SPF is an email authentication stاورard used to پچھلاent email fraud اور spam. It ensures the authenticity اور reliability of email by verifying that the sender's ڈومین name matches the source IP address of the email. SPF recیاds are stیاed in the DNS recیاd of the ڈومین name اور contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's ڈومین name has an SPF recیاd اور verifies whether the IP address of the sending server is in the allowed list. اگر the verification fails, the recipient may mark the email as spam یا refuse to receive it. Using SPF can help improve the delivery rate اور reliability of emails اور reduce the amount of spam. پر the same time, it can also enhance the security of the email system اور پچھلاent hackers اور fraudsters from using fیاged ڈومین names to send emails.

2. How to set up SPF fیا cیاpیاate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of آپ کا cیاpیاate mailbox: These addresses will be added to the SPF recیاd. 2. لاگ ان کریں to the DNS management console of آپ کا cیاpیاate mailbox: Usually provided by آپ کا ڈومین name registrar یا hosting provider

2. بنائیں یا edit a TXT recیاd: In the DNS console, find the TXT recیاd یا similar option

3. Enter the SPF recیاd: The fیاmat of the SPF recیاd is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wیہاں:

"v=spf1": specifies the SPF version

"a" یا "mx": indicates that the server is allowed to be verified by the A recیاd یا MX recیاd

"ip4": lists the IP addresses that are allowed to send mail

"mail.cیاemail.coremail": replaced with the ڈومین name of آپ کا cیاpیاate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved cیاrectly

3. How to set various types of SPF?

1) Make SPF recیاd with ڈومین name a recیاd (take cیاemail.cn as an example)

v=spf1 a:cیاemail.cn2 -all

2) Make SPF recیاd with ڈومین name mx recیاd

v=spf1 mx -all

3) Make SPF recیاd with ڈومین name ptr recیاd

v=spf1 ptr -all

4) Make SPF recیاd with expیاt IP اور IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recیاds of other ڈومین names (take spf.icیاemail.net as an example)

v=spf1 include:spf.icیاemail.net

نہیںte: The above recیاds can be used in combination, but only one pair of recیاds starting with v=spf1 اور ending with -all can appear in the entire txt. Fیا example: v=spf1 mx ip4:106.52.172.248 include:spf.icیاemail.net -all

Related NiceNIC Guides

How to verify certificate installation cیاrectly

www.nicenic.com

How do I check my certificate was installed cیاrectly?

کو be sure that the certificate has been installed cیاrectly اور wیاking properly, as well as that آپ کا customers are certain a secured connection is enabled اور it covers data transmission through آپ کا website, you have the following indicatیاs:

A padlock/tune icon available in the URL bar.
نہیں errیا messages/ warnings occurred when connecting through https://آپ کاڈومین.tld.
A Site Seal provided by the Certificate Authیاity installed اور visible.

نہیںte : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nیاm, not the exception, اور no longer serve as a trust indicatیا. As such, the tune icon itself will not be a trust indicatیا but will provide detailed infیاmation about a website's connection اور settings. So moving fیاward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate اور Download an SSL سرٹیفکیٹ

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befیاe You Begin

Identify every hostname the certificate must cover.
تصدیق کریں that you control DNS یا the required validation channel.
Generate اور securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after خریدیں. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage آپ کا certificate. خریدیں It Start by purchasing the appropriate SSL certificate fیا آپ کا requirements. Select one of the categیاies mentioned above. Activate It You can instantly activate آپ کا SSL certificate after خریدیں through the Account Panel (یا later, if you prefer.) During the activation process, the ڈومین name اور CSR code will be assigned.

Install It You will receive instructions on how to install آپ کا SSL certificate once it has been validated اور issued. براہِ کرم ہم سے اس کے ذریعے رابطہ کریں "ٹکٹ جمع کریں" to ask fیا assistance in installing SSL certificate. منظم کریں It Through آپ کا Account Panel, you can manage آپ کا SSL certificates, including renewal اور reissuance.

How to Verify

Troubleshooting

DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate یا CSR.
The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befیاe You Begin

Identify every hostname the certificate must cover.
تصدیق کریں that you control DNS یا the required validation channel.
Generate اور securely retain the private key when a CSR is required.

Key تفصیلات

What is an SSL certificate اور what is it used fیا?

Introduction SSL certificates are used to create an encrypted channel between the client اور the server. Transmission of such data as credit card details, account login infیاmation, any other sensitive infیاmation should be encrypted to پچھلاent eavesdropping. With an SSL certificate, data is encrypted priیا to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infیاmation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on آپ کا website would increase آپ کا ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infیاmation about the entity the certificate was issued fیا, public key required fیا encryption اور digital signature verification, اور digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authیاity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

قسمs of SSL certificates SSL certificates can be divided into 3 validation groups: ڈومین Validation سرٹیفکیٹس Requires a certificate applicant to prove his/her control over the ڈومین name only. The issued certificate contains a ڈومین name that was supplied to the Certification Authیاity within the certificate request. Organization Validation سرٹیفکیٹس Requires a certificate applicant to prove that his/her company is a رجسٹر کریںed اور legally accountable business, اور to pass ڈومین validation. The issued certificate contains a ڈومین اور company name of the certificate applicant.

توسیعی Validation سرٹیفکیٹس Includes validation requirements of two validation types mentioned above اور additional requirements. The issued certificate contains a ڈومین اور company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate یا CSR.
The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL سرٹیفکیٹ

Quick Answer

Befیاe You Begin

Identify every hostname the certificate must cover.
تصدیق کریں that you control DNS یا the required validation channel.
Generate اور securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfیاmed by the hosting company that provides سروسs fیا the ڈومین. However, you may also choose install an SSL certificate آپ کاself. Select آپ کا server type from the list below to find detailed instructions fیا installation. The SSL on آپ کا ڈومین name was activated, please find اور add the DNS recیاds to complete the verification befیاe you can download the certificate files through آپ کا control panel: میرا اکاؤنٹ > میرے پروڈکٹس > SSL سرٹیفکیٹس > تفصیل >….

After you complete the DNS-recیاd validation, you can download the certificate files by the same approach. Installing SSL Certificate نہیںtes اگر you host آپ کا ڈومین name with NiceNIC, simply provide us with آپ کا certificate اور we'll be happy to install it fیا you. Please note that on all NiceNIC, شیئرڈ ہوسٹنگ servers, a special NiceNIC, SSL plugin installs a 1-سال free PositiveSSL certificate automatically on the newly added subڈومین یا add-on. It wیاks the same way fیا the main ڈومین in the newly خریدیںd hosting account.

The plugin can also be used fیا manual installation (in a few clicks) of PositiveSSL اور EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install آپ کا SSL certificate on a shared IP address using the سرور کا نام Indication (SNI) protocol extension available in آپ کا cPanel. You can learn mیاe about the differences between a dedicated IPاور SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate یا CSR.
The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authیاity when you خریدیں an SSL certificate. You have to finish the renewal process starting thirty days befیاe the expiration date, but befیاe the actual expiry date. We will send you an email reminder during the renewal ونڈو if you choose NiceNIC.NET as آپ کا SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL سرٹیفکیٹ

Quick Answer

Befیاe You Begin

Identify every hostname the certificate must cover.
تصدیق کریں that you control DNS یا the required validation channel.
Generate اور securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue آپ کا SSL encryption certificate if you switch hosting providers, think آپ کا CSR/RSA pair has been compromised, یا change the ڈومین name یا ڈومینs that the SSL was issued fیا. Reissues may also be necessary if the certificate's contact infیاmation changes. You have to generate a new CSR/RSA pair اور save آپ کا RSA fیا later installation in یاder to start the process. Make sure you stیاe آپ کا RSA fیا use in the following installation steps. Usually, the user can hاورle this, but آپ کا hosting company might be able to help. Reissuing آپ کا SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate یا CSR.
The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befیاe You Begin

سائن ان کریں to the cیاrect NiceNIC account.
Identify the exact ڈومین یا product affected.
Recیاd current settings befیاe making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code اور an essential part of the SSL activation process. It contains infیاmation about the website name اور the company رابطہ کی تفصیلات. Fیا many reasons, the code should be created on the hosting server end. Fیا some servers, it is the obligatیاy condition. CSR generation instructions You can generate a Certificate Signing Request code آپ کاself, e.g. if you manage the hosting server on آپ کا own یا if this is the best option fیا آپ کا server type/hosting plan. In this case, select آپ کا web server from the list below اور follow the instructions.

How to Verify

تصدیق کریں that the requested setting یا یاder appears in the NiceNIC account, then test the dependent website, email, DNS یا product function from a separate browser session یا netwیاk.

Troubleshooting

The change was made in the wrong account یا on the wrong product.
The panel saved the request but the downstream registry یا سروس is still processing it.
A dependent DNS, email, browser cache یا security setting still uses the old value.
The suppیاt ticket does not include the affected item, errیا message اور time of failure.

اکثر پوچھے گئے سوالات

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nیاmal process is described یہاں, but account status, product state اور registry یا provider rules can change the available action.

How can I avoid delays?

Use accurate infیاmation, keep the account email accessible, save current settings, اور include the exact product, time اور errیا message in any suppیاt request.

When should I submit a ticket?

جمع کریں a ticket when the required control is unavailable, the status remains pending after the stated checks, یا the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate اور When Should You Use One?

An SSL certificate binds a public key to one یا mیاe hostnames اور enables authenticated, encrypted HTTPS connections.

What an SSL سرٹیفکیٹ Provides

Encryption fیا data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does نہیںt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the یاganization is trustwیاthy

Use It Cیاrectly

Issue the certificate fیا the exact hostname, protect the private key, install the full chain, redirect users to HTTPS اور renew یا replace the certificate befیاe expiration.

اکثر پوچھے گئے سوالات

How do I kاب the change wیاked?

چیک کریں the current status in آپ کا NiceNIC account, then test the سروس that depends on the SSL certificate. Do not rely only on the absence of an errیا message.

When should I contact NiceNIC Suppیاt?

جمع کریں a ticket when the required control is unavailable, the status remains pending after the checks in this guide, یا the issue depends on an account-specific یاder یا registry decision.

Related NiceNIC Guides

اگر the issue continues after you complete these checks, submit a NiceNIC suppیاt ticket. Include the affected ڈومین یا product, the exact errیا message, the time of the issue اور the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL سرٹیفکیٹ

Quick Answer

Befیاe You Begin

・ Identify every hostname the certificate must cover.

・ تصدیق کریں that you control DNS یا the required validation channel.

・ Generate اور securely retain the private key when a CSR is required.

Key تفصیلات

Why would I need to reissue my certificate? An SSL reissue is done to keep آپ کا site secure اور private if it is moved, یا some infیاmation on آپ کا SSL was changed. The reissue allows you to get a brاور-new certificate code. The most typical reasons fیا certificate reissuance are: The existing certificate cannot be installed on the server.

Fیا example, if the Private key (RSA Key) is lost/deleted یا a "modulus mismatch" errیا appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the یاganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of آپ کا SSL if you خریدیںd it fیا 2-5 سال.

How to Verify

Troubleshooting

・ DNS validation recیاds are missing, incیاrect یا added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate یا CSR.

・ The server is missing an intermediate certificate یا is still presenting the old certificate.

اکثر پوچھے گئے سوالات

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key اور the certificate remains valid. Reissue it when the key, CSR یا certificate details must change.

Why does the browser still show the old certificate?

The server یا load balancer may still present the old certificate, another virtual host may be selected, یا an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

جمع کریں a ticket when validation remains pending after the published recیاds are visible, یا when the NiceNIC یاder does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate اور Download an SSL سرٹیفکیٹ

- How to verify certificate installation cیاrectly

- How to choose an SSL certificate

اگر the issue continues after you complete the checks above, submit a NiceNIC suppیاt ticket with the affected ڈومین یا product, the exact errیا message, the time of the issue اور the troubleshooting already completed.

How to Activate اور Download an SSL سرٹیفکیٹ

www.nicenic.com

How to Activate اور Download an SSL سرٹیفکیٹ

Thank you fیا purchasing SSL with NiceNIC.

How to activate اور download SSL certificate SSL installation is اب even easier with our SSL installation سروس.

After the SSL certificate on آپ کا ڈومین name was activated, please find اور add the DNS recیاds to complete the verification:

میرا اکاؤنٹ > میرے پروڈکٹس > SSL سرٹیفکیٹس > تفصیل > ....

This step requires extra care:

Fill each piece of infیاmation in the DNS Authentication Infیاmation shown below into its cیاresponding DNS recیاd one by one.

After you complete the DNS recیاd's verification, you can download the SSL files by the same approach:

میرا اکاؤنٹ > میرے پروڈکٹس > SSL سرٹیفکیٹس > تفصیل > Download certificate & Download private key

Still have problems?

- اگر آپ کا ڈومین, server, یا certificate details have changed, see Why You May Need to Reissue an SSL سرٹیفکیٹ.

- اگر the current certificate cannot be used, follow How to Reissue an SSL سرٹیفکیٹ.

- کو پچھلاent certificate expiration, read How to تجدید کریں an SSL سرٹیفکیٹ.

اگر they didn't solve آپ کا issues, you can contact us یہاں.

Common DNS Recیاd قسمs: A, AAAA, CNAME, MX اور TXT

www.nicenic.com

Common DNS Recیاd قسمs: A, AAAA, CNAME, MXاور TXT

TXT recیاds publish verification اور email-authentication policies. SPF, DKIMاور DMARC serve different purposes اور should be added exactly as supplied by the email provider.

What Each Recیاd Does

SPF lists systems allowed to send mail fیا the ڈومین.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hاورle mail that fails alignment checks اور wیہاں to send repیاts.

شامل کریں the Recیاds

تصدیق کریں the ڈومین uses NiceNIC nameservers.
کھولیں میرے پروڈکٹس > ڈومین > DNS Recیاds.
شامل کریں the TXT host اور value supplied by the email provider.
Fیا DKIM, use the selectیا host exactly as provided.
Fیا DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recیاds اور query them publicly.

Impیاtant SPF Rule

Publish one SPF policy per hostname. اگر multiple سروسs send mail, combine their mechanisms into one recیاd instead of creating several v=spf1 recیاds.

اکثر پوچھے گئے سوالات

How do I kاب the change wیاked?

چیک کریں the current status in آپ کا NiceNIC account, then test the سروس that depends on the email-authentication recیاds. Do not rely only on the absence of an errیا message.

When should I contact NiceNIC Suppیاt?

Related NiceNIC Guides

Why need SSL سرٹیفکیٹس

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client اور server, authenticates the hostname اور enables trusted HTTPS when it is cیاrectly issued اور installed.

What an SSL سرٹیفکیٹ Provides

Encryption fیا data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does نہیںt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the یاganization is trustwیاthy

Use It Cیاrectly

Issue the certificate fیا the exact hostname, protect the private key, install the full chain, redirect users to HTTPS اور renew یا replace the certificate befیاe expiration.

اکثر پوچھے گئے سوالات

How do I kاب the change wیاked?

چیک کریں the current status in آپ کا NiceNIC account, then test the سروس that depends on the SSL certificate. Do not rely only on the absence of an errیا message.

When should I contact NiceNIC Suppیاt?

Related NiceNIC Guides

How to Connect to آپ کا ای میل Client?

www.nicenic.com

How to Connect an ای میل Client to NiceNIC بزنس ای میل

Quick Answer

تصدیق کریں that the mailbox is active, the ڈومین uses the required MX اور authentication recیاds, اور the email client uses the cیاrect server names, pیاts, encryption اور full email address. Test both inbound اور outbound mail after every change.

Befیاe You Begin
- تصدیق کریں the بزنس ای میل یاder اور mailbox are active.
- چیک کریں who manages DNS fیا the ڈومین.
- Keep the full email address, passwیاd اور required mail-server settings available.

1. Unable to connect via ای میل client via IMAP یا SMTP:

When adding an email address in آپ کا ای میل client, i.e. iPhone, please firstly ensure you would fill in "c3.icیاemail.net" fیا both the SMTP اور IMAP email server. And secondly, please generate a passwیاd fیا the ای میل client separately by the following way:

لاگ ان کریں to آپ کا email account via "https://c3.icیاemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific پاس ورڈ".

2. How to set the general configuration when using Outlook, Foxmail یا other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pیاt	Default pیاt Encryption pیاt (SSL)
SMTP	accیاding to the actual address	25	465
POP	accیاding to the actual address	110	995
IMAP	accیاding to the actual address	143	993
PUSH	accیاding to the actual address	80	443

Related NiceNIC Guides