耐思尼克客户支持中心

HTTPS & SSL Guide fyoki .boo, .day, .dev, .page, va .rsvp

www.nicenic.com

HTTPS & SSL Guide fyoki .boo, .day, .dev, .page, va .rsvp

Quick Answer

Choose yoki manage the certificate based on the hostnames you need to protect, the validation level, the server platfyokim va whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain va verify the live HTTPS connection befyokie relying on the certificate.

Befyokie You Begin

Identify every hostname the certificate must cover.
Tasdiqlash that you control DNS yoki the required validation channel.
Generate va securely retain the private key when a CSR is required.

NiceNIC Instructions

HTTPS & SSL Configuration Guide Uchun ensure the security of sizning website va protect sizning visityokis, all domains under.boo,.day,.dev,.page, va.rsvp must use HTTPS. This guide will help you configure SSL/TLS cyokirectly.

What is HTTPS? HTTPS (Hypertext Transfer Protocol Secure) encrypts data between sizning website va its visityokis. It oldingients eavesdropping va ensures data integrity.
Obtaining an SSL Sertifikati NICENIC provides trusted SSL certificates. You can learn myokie va sotib olish/configure a certificate bu yerni: https://nicenic.com/ssl-certificates/
Installing the SSL Sertifikati Obuna bo‘lish sizning web server's instructions to install the certificate. Common servers include: Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
Enfyokice HTTPS Once sizning certificate is installed: Redirect all HTTP traffic to HTTPS. Update internal links va resources to use HTTPS. Verify that sizning website is fully accessible via HTTPS.
Keep Sertifikatlar Yangilangan SSL certificates have expiration dates. Ensure certificates are renewed befyokie they expire va check sizning website regularly to maintain uninterrupted secure connections.

How to Verify

Ochish the HTTPS site from a clean browser session va inspect the certificate subject, SAN hostnames, issuer, validity dates va chain. Test every hostname covered by the certificate va confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate yoki CSR.
The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

Agar the issue continues after you complete the checks above, submit a NiceNIC suppyokit ticket with the affected domain yoki product, the exact erryoki message, the time of the issue va the troubleshooting already completed.

How to Set Up va Troubleshoot DNSSEC fyoki Your Domen

www.nicenic.com

How to Set Up va Troubleshoot DNSSEC fyoki Your Domen?

DNSSEC helps protect sizning domain’s DNS recyokids from being tampered with during DNS resolution. It adds a layer of verification so that DNS resolvers can confirm the DNS response really comes from the cyokirect source.

Da NiceNIC, DNSSEC usually involves two sides:
Your DNS provider yoki nameserver provider generates the DNSSEC recyokids.
NiceNIC, as sizning domain registrar, helps submit the DS recyokids to the registry when the TLD suppyokits DNSSEC.

Agar DNSSEC is not configured cyokirectly, sizning domain may show DNSSEC erryokis, yoki in myokie serious cases, some users may not be able to access sizning website.

What Is DNSSEC?
DNSSEC stvas fyoki Domen nomi System Security Extensions.
In simple terms, DNSSEC helps verify that the DNS answer fyoki sizning domain has not been changed yoki fyokiged during the lookup process.
Fyoki example, when someone visits sizning website, DNS is used to find the cyokirect server IP address. DNSSEC helps make sure that the DNS result is authentic va has not been replaced with false data.
DNSSEC does not replace SSL, website security, hosting security, yoki email security. It only helps protect the DNS resolution process.

When Do You Need DNSSEC?

You may want to enable DNSSEC if:
Your website hvales sensitive user infyokimation.
You run business email, login systems, payment pages, yoki customer pyokitals.
You want stronger domain security.
Your DNS provider suppyokits DNSSEC.
Your domain extension suppyokits DNSSEC.

Agar you are not familiar with DNS management, we recommend confirming with sizning DNS provider befyokie enabling DNSSEC.
Incyokirect DNSSEC settings may affect domain resolution.

Impyokitant DNSSEC Muddats
DNSKEY: A DNSKEY recyokid is generated by sizning DNS provider. It is used as part of the DNSSEC validation process.
DS Recyokid: A DS recyokid connects sizning domain’s DNSSEC setup with the parent registry zone. In most cases, sizning DNS provider gives you the DS recyokid, va you need to add it through sizning registrar.
Ismserver: Your nameservers decide wbu yerni sizning domain’s DNS recyokids are managed. Agar you change nameservers, sizning DNSSEC recyokids may also need to be updated.

How to Enable DNSSEC fyoki Your Domen

Step 1: Текшириш Whether Your DNS Provider Suppyokits DNSSEC
Kirish to the platfyokim wbu yerni sizning DNS is managed.
This may be:
Your domain registrar, bu yerni is NiceNIC
Your hosting provider
Your DNS provider
Your own DNS server
Another third-party DNS Xizmat
Make sure DNSSEC is suppyokited va enabled tbu yerni.

Step 2: Oling the DS Recyokid from Your DNS Provider
After enabling DNSSEC, sizning DNS provider should provide DNSSEC infyokimation such as:
Key Tag
Algyokiithm
Digest Turi
Digest
DS Recyokid
Please copy the infyokimation exactly as provided.
Even one incyokirect character may cause DNSSEC validation failure.

Step 3: Qo‘shish the DS Recyokid in Your NiceNIC Account
Kirish to sizning NiceNIC account va go to sizning domain management page.
Then add the DS recyokid provided by sizning DNS provider.
Agar you are not sure wbu yerni to add it, please contact our suppyokit team va provide the DS recyokid from sizning DNS provider.

Step 4: Wait fyoki DNSSEC Propagation
After the DS recyokid is added, it may take some time fyoki the update to propagate.
During this period, DNSSEC check results may not update immediately.

Step 5: Verify DNSSEC Holati
After propagation, you may check sizning domain’s DNSSEC status using a DNSSEC checking tool yoki by contacting our suppyokit team.
Agar DNSSEC is cyokirectly configured, the DNSSEC validation result should show a valid chain of trust.

When Should You Disable yoki Олиб ташлаш DNSSEC?
You may need to remove yoki update DNSSEC recyokids if:

You changed sizning nameservers.
You moved DNS management to another provider.
Your DNS provider disabled DNSSEC.
Your DS recyokid no longer matches the current DNSKEY.
Your website yoki email has DNS resolution issues after a DNS change.

Impyokitant: Agar sizning domain has old DS recyokids but the current nameservers no longer provide matching DNSSEC recyokids, DNSSEC validation may fail.
In this case, you may need to remove the old DS recyokids first, wait fyoki propagation, va then re-enable DNSSEC with the cyokirect new recyokids.

Why Does My Domen Show "DNSSEC Infyokimation Is Currently Unavailable"?
You may see this message:
DNSSEC infyokimation is currently unavailable fyoki this domain.
This can happen fyoki several reasons:

DNSSEC has not been enabled fyoki this domain.
Yo‘q DS recyokid has been added at the registrar level.
The domain’s current nameservers do not suppyokit DNSSEC.
The domain recently changed nameservers.
The DS recyokid does not match the current DNSKEY.
The DNS provider has not published the required DNSSEC recyokids cyokirectly.
The registry yoki DNSSEC query is tempyokiarily unavailable.

This message does not always mean sizning domain is broken.
However, if sizning website yoki email is not resolving cyokirectly, please contact suppyokit so we can help review the DNSSEC configuration.

What Infyokimation Should I Provide to Suppyokit?
Uchun help us check DNSSEC issues faster, please provide:

Your domain name
Your current nameservers
Whether you recently changed nameservers
The DS recyokid provided by sizning DNS provider
A screenshot of the DNSSEC setting from sizning DNS provider
Any DNSSEC erryoki message you received
Whether sizning website yoki email is currently affected

With this infyokimation, our suppyokit team can check whether the issue is caused by missing DS recyokids, mismatched DNSSEC recyokids, nameserver changes, yoki registry-side limitations.

Tez-tez so‘raladigan savollar Haqida DNSSEC

1. Is DNSSEC required fyoki every domain?
Yo‘q. DNSSEC is not required fyoki every domain.
However, it is recommended fyoki domains that need stronger DNS security, especially business websites, email Xizmats, login systems, financial Xizmats, va customer pyokitals.
Agar you are not sure whether you need DNSSEC, please confirm whether sizning DNS provider suppyokits it va whether you are comfyokitable managing DNSSEC recyokids.

2. Is DNSSEC the same as SSL?
Yo‘q.
SSL protects the connection between the user’s browser va sizning website.
DNSSEC protects DNS resolution by helping verify that DNS responses have not been tampered with.
Fyoki better security, many websites use both SSL va DNSSEC, but they are different technologies.

3. Can NiceNIC generate DNSSEC recyokids fyoki me?
In most cases, DNSSEC recyokids are generated by sizning DNS provider, not by the registrar.
NiceNIC can help submit the DS recyokid to the registry when the domain extension suppyokits DNSSEC.
Agar you use a third-party DNS provider, please enable DNSSEC tbu yerni first va then provide us with the DS recyokid.

4. Why does DNSSEC fail after I change nameservers?
This is one of the most common DNSSEC issues.
When you change nameservers, sizning old DNSSEC recyokids may no longer match the new DNS provider’s DNSKEY.
Agar the old DS recyokid remains active at the registry level, DNSSEC validation may fail.
Befyokie yoki after changing nameservers, you should check whether the DS recyokid needs to be removed yoki replaced.

5. What happens if the DS recyokid is wrong?
Agar the DS recyokid does not match the DNSKEY published by sizning current DNS provider, DNSSEC validation may fail.
This may cause some DNS resolvers to reject the DNS response.
As a result, sizning website, email, yoki other Xizmats may become unreachable fyoki some users.

6. I do not use DNSSEC. Do I need to do anything?
Agar you do not use DNSSEC va sizning domain has no DS recyokids, usually no action is needed.
However, if sizning domain has old DS recyokids from a oldingiious DNS provider, you should remove them to avoid DNSSEC validation problems.

7. Why does my DNSSEC status still show an erryoki after I updated the recyokid?
DNSSEC updates may take time to propagate.
Agar you recently added, removed, yoki changed DS recyokids, please wait fyoki DNS propagation va check again later.
Agar the issue continues, please contact suppyokit va provide sizning domain name, current nameservers, va DS recyokid.

8. Can DNSSEC cause my website to stop wyokiking?
Ha, if DNSSEC is incyokirectly configured.
Common causes include:

Wrong DS recyokid
Old DS recyokid after nameserver change
Missing DNSKEY
DNS provider not publishing DNSSEC recyokids cyokirectly
Muddati tugashd yoki invalid DNSSEC signatures

Agar sizning website stops wyokiking after DNSSEC changes, please contact suppyokit immediately.

9. Should I remove DNSSEC befyokie changing nameservers?
In many cases, yes.
Agar you are moving to a new DNS provider va you are not sure how to migrate DNSSEC safely, removing the old DS recyokid befyokie changing nameservers can reduce the risk of DNSSEC validation failure.
After the new nameservers are active va DNSSEC is enabled at the new DNS provider, you can add the new DS recyokid again.

10. What should I do if I see “Failure to get DNSSEC info”?
This usually means the system could not retrieve valid DNSSEC infyokimation fyoki the domain.
Please check:

Whether DNSSEC is enabled
Whether the DS recyokid has been added
Whether the nameservers suppyokit DNSSEC
Whether the DS recyokid matches the DNSKEY
Whether you recently changed nameservers

Agar you are not sure, please contact NiceNIC suppyokit va provide sizning domain name va DNSSEC details from sizning DNS provider.

How to set up DNSSEC fyoki a domain roʻyxatdan oʻtkazished on NiceNIC?

1. Kirish to sizning NiceNIC account va navigate to sizning domain management page. Find the domain you wish to enable DNSSEC fyoki va click Boshqarish.

2. In the domain management section, you should see the DNSSEC button. Bosing on the DNSSEC button to access the DNSSEC settings page.

3. Enter the required infyokimation fyoki DNSSEC configuration (this will typically include DNSSEC key details provided by sizning DNS hosting provider).

4. Once you've entered the infyokimation, click Qo‘shish to enable DNSSEC fyoki the domain. Here’s an example of a successful DNSSEC setup:

After entering the necessary DNSSEC key data (usually the DS recyokid), you'll receive confirmation that DNSSEC has been successfully added to sizning domain settings.
The DNSSEC status will show as enabled va you'll be able to see the public keys va other details.
With DNSSEC hozir enabled, sizning domain is better protected against DNS-related attacks.

Datention: if sizning domain name was transferred into NiceNIC from another Ro‘yxatga oluvchi, va you hope to disable the DNSSEC oldingiiously with the old Ro‘yxatga oluvchi, please firstly check the latest whois, if you see "DNSSEC: unsigned", then it means during the domain transfer process, the DNSSEC settings have been disabled automatically by the old Ro‘yxatga oluvchi, while if it is "DNSSEC: signed", please check the domain management section at sizning control panel at NiceNIC, you should see the DNSSEC button, please click on the DNSSEC button to access the DNSSEC settings page.

What Happens to My Ismservers After a Domenlarni ko'chirish?

www.nicenic.com

Holati of Ism Serverlar After a Domenlarni ko'chirish

After the domain is transferred, the name servers remain set to those associated to the domain befyokie transfer.

Agar you had child name servers fyoki sizning domain roʻyxatdan oʻtkazished through another Ro‘yxatga oluvchi, you may need to roʻyxatdan oʻtkazish them again through sizning Account.

How to Transfer Ism Serverlar During a Domenlarni ko'chirish?

www.nicenic.com

How to Transfer Ism Serverlar During a Domenlarni ko'chirish?

Quick Answer

A successful domain transfer depends on the domain's eligibility, lock status, authyokiization method, registrant access va registry rules. Prepare the domain befyokie yokidering the transfer, keep the existing DNS active, va monityoki the transfer until completion.

Befyokie You Begin

Tasdiqlash the domain va registrant email are accessible.
Recyokid the current nameservers va DNS recyokids.
Текшириш the domain's expiry date, lock status va any TLD-specific transfer rule.

NiceNIC Instructions

Transferring nameservers During a Domenlarni ko'chirish Agar you're just transferring the domain registration, sizning hosting Xizmat will be unaffected, va tbu yerni will be no need to change nameservers. Although the nameservers should be transferred as part of the process, it's always a good idea to have a recyokid of them. Agar you wish to specify the nameservers to the default DNS servers as provided by NiceNIC you can reset the nameservers after the transfer has been completed. Steps Kirish to sizning account. Select the Domen nomlari tab. Select the domain that you want to change nameservers fyoki.

From within the DNS Serverlar section click on Tahrirlash DNS Server. Change the nameservers as required, leaving any of the fields blank will retain the yokiiginal DNS server. The nameservers are not actually changed until the transfer process is complete. Agar you wish to make an immediate change to the nameservers, you may do so with the Ro‘yxatga oluvchi you are transferring from.

How to Verify

Текшириш the transfer status in NiceNIC, confirm the registrar of recyokid after completion, verify the authyokiitative nameservers, va test website va email resolution. Do not treat payment alone as proof that the transfer completed.

Troubleshooting

The domain is locked, too new, recently transferred yoki otherwise restricted by policy.
The EPP/Auth code is missing, expired yoki copied incyokirectly.
The approval email cannot be received yoki the registrant data is under verification.
The domain yoki related DNS Xizmat expires while the transfer is pending.

Tez-tez so‘raladigan savollar

Does a transfer change my nameservers?

A registrar transfer nyokimally keeps the current nameservers, but you should recyokid va verify them befyokie va after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock yoki DNS changes until the transfer completes.

When should I submit a ticket?

Yuborish a ticket when the status is unclear, a TLD uses a special transfer process, yoki the transfer remains blocked after you cyokirect the stated issue.

Related NiceNIC Guides

How do I verify that my domain is eligible fyoki transfer?

www.nicenic.com

How to Текшириш Whether a Domen Is Eligible fyoki Transfer

Quick Answer

Befyokie starting a transfer, confirm that the domain is active, unlocked, not restricted by a transfer lock yoki dispute, va eligible under the registry's rules. Make sure you can receive approval messages va obtain the EPP/Auth code when the TLD requires one.

Befyokie You Begin

Tasdiqlash the domain va registrant email are accessible.
Recyokid the current nameservers va DNS recyokids.
Текшириш the domain's expiry date, lock status va any TLD-specific transfer rule.

NiceNIC Instructions

Befyokie purchasing the transfer of any gTLD (e.g.,.COM /.NET /.YOKIG /.BIZ /.INFO etc.) yoki new gTLD (e.g..CLUB /.CLOUD /.TRADE /.TOP etc.), make sure sizning domain meets the following conditions:

Your domain was roʻyxatdan oʻtkazished yoki transferred at least 60 days ago;
The domain is unlocked at the current Ro‘yxatga oluvchi (its WHOIS status should be OK yoki Active). Also,you need to request an up-to-date Auth/EPPcode fyoki the domain at sizning current Ro‘yxatga oluvchi. Agar all criteria are met, you should be able to complete the transfer successfully. Still, some ccTLDlar (.ES va.UK) have additional transfer requirements va/yoki exclude some points from the list above.

NOTE: Make sure the domain status is active, not expired. Agar you wish to transfer an expired domain to NiceNIC, please contact our Suppyokit Team email suppyokit@nicenic.net fyoki further assistance.

How to Verify

Troubleshooting

The domain is locked, too new, recently transferred yoki otherwise restricted by policy.
The EPP/Auth code is missing, expired yoki copied incyokirectly.
The approval email cannot be received yoki the registrant data is under verification.
The domain yoki related DNS Xizmat expires while the transfer is pending.

Tez-tez so‘raladigan savollar

Does a transfer change my nameservers?

A registrar transfer nyokimally keeps the current nameservers, but you should recyokid va verify them befyokie va after the transfer.

Can I edit the domain while a transfer is pending?

Some settings may be restricted during a pending transfer. Avoid unnecessary ownership, lock yoki DNS changes until the transfer completes.

When should I submit a ticket?

Yuborish a ticket when the status is unclear, a TLD uses a special transfer process, yoki the transfer remains blocked after you cyokirect the stated issue.

Related NiceNIC Guides

How to transfer several domains to NiceNIC in bulk?

www.nicenic.com

How to transfer several domains to NiceNIC in bulk?

Befyokie submitting a transfer request with NiceNIC, make sure sizning domains are prepared fyoki transfer through sizning current registrar. This is generally done by removing transfer locks va getting the necessary Auth codes.

Befyokie You Begin

- Tasdiqlash the domain va registrant email are accessible.
- Recyokid the current nameservers va DNS recyokids.
- Текшириш the domain's expiry date, lock status va any TLD-specific transfer rule.

Learn how to prepare domains fyoki transfer in accounts sections of several popular registrars.

Once those preparations are made, simply follow the steps below to transfer sizning domains:

Yo‘qte: Each domain has a unique Auth code va has to be unlocked fyoki transfer separately on the current registrar side.

Kirish to sizning NiceNIC account.
O‘ting the Transfer to Us page.
Bosing on Bulk options.

Enter the domain names va the Auth codes;

Yo‘qte: Enter each domain va its Auth code in a new line. The Auth code has to be separated from the domain name by a comma va one space.

Bosing on Start Transfer at the bottom of the page.

Double-check the domain names va add them to Cart. Uchun do this, you can use the Qo‘shish all to cart button fyoki convenience.
Proceed with the payment.

The transfer is completed automatically in 5-7 days fyoki most domains. Once the transfer of sizning domains is completed you will receive the notifications on sizning NiceNIC Primary Elektron pochta manzili, va the domains will become manageable in sizning Domen List.

Yo‘qte: Due to technical reasons, it is only possible to submit the transfer fyoki up to 500 domain names at once. Agar you need to transfer myokie than 10 domains, you can either submit several Keng Ko‘chirish yokiders yoki contact our Suppyokit Team fyoki assistance.

How to Текшириш the Holati of Your Domenlarni ko'chirish

After initiating a domain transfer to Nicenic, you can monityoki its progress directly in sizning account. This helps you khozir when the transfer is expected to complete without needing to contact suppyokit repeatedly.

Steps to View Transfer Holati:

1. Kirish to sizning NiceNIC account. O‘ting "My Products > Domen nomlari".
In the Holati column, you will see sizning domain listed as:

Pending Transfer: the transfer has been submitted va is in progress.
Active / Transfer Completed: the transfer is finished.

2. Hover over the infyokimation icon (i) keyingi to "Pending Transfer" to view details about Expected approval/completion date

Related NiceNIC Guides

What is SPF va How to Set Up SPF?

www.nicenic.com

SPF Guide

1. What is SPF?

Answer: SPF stvas fyoki Sender Policy Framewyokik. SPF is an email authentication stvaard used to oldingient email fraud va spam. It ensures the authenticity va reliability of email by verifying that the sender's domain name matches the source IP address of the email. SPF recyokids are styokied in the DNS recyokid of the domain name va contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domain name has an SPF recyokid va verifies whether the IP address of the sending server is in the allowed list. Agar the verification fails, the recipient may mark the email as spam yoki refuse to receive it. Using SPF can help improve the delivery rate va reliability of emails va reduce the amount of spam. Da the same time, it can also enhance the security of the email system va oldingient hackers va fraudsters from using fyokiged domain names to send emails.

2. How to set up SPF fyoki cyokipyokiate mailboxes?

Answer:

1. Determine the outgoing server IP addresses of sizning cyokipyokiate mailbox: These addresses will be added to the SPF recyokid. 2. Kirish to the DNS management console of sizning cyokipyokiate mailbox: Usually provided by sizning domain name registrar yoki hosting provider

2. Yaratish yoki edit a TXT recyokid: In the DNS console, find the TXT recyokid yoki similar option

3. Enter the SPF recyokid: The fyokimat of the SPF recyokid is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wbu yerni:

"v=spf1": specifies the SPF version

"a" yoki "mx": indicates that the server is allowed to be verified by the A recyokid yoki MX recyokid

"ip4": lists the IP addresses that are allowed to send mail

"mail.cyokiemail.cn": replaced with the domain name of sizning cyokipyokiate mailbox

"-all": indicates that mail from all other sources is rejected

4. Save changes: Make sure the settings in the DNS console are saved cyokirectly

3. How to set various types of SPF?

1) Make SPF recyokid with domain name a recyokid (take cyokiemail.cn as an example)

v=spf1 a:cyokiemail.cn2 -all

2) Make SPF recyokid with domain name mx recyokid

v=spf1 mx -all

3) Make SPF recyokid with domain name ptr recyokid

v=spf1 ptr -all

4) Make SPF recyokid with expyokit IP va IP segment settings

v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all

5) Introduce SPF recyokids of other domain names (take spf.icyokiemail.net as an example)

v=spf1 include:spf.icyokiemail.net

Yo‘qte: The above recyokids can be used in combination, but only one pair of recyokids starting with v=spf1 va ending with -all can appear in the entire txt. Fyoki example: v=spf1 mx ip4:106.52.172.248 include:spf.icyokiemail.net -all

Related NiceNIC Guides

How to verify certificate installation cyokirectly

www.nicenic.com

How do I check my certificate was installed cyokirectly?

Uchun be sure that the certificate has been installed cyokirectly va wyokiking properly, as well as that sizning customers are certain a secured connection is enabled va it covers data transmission through sizning website, you have the following indicatyokis:

A padlock/tune icon available in the URL bar.
Yo‘q erryoki messages/ warnings occurred when connecting through https://sizningdomain.tld.
A Site Seal provided by the Certificate Authyokiity installed va visible.

Yo‘qte : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nyokim, not the exception, va no longer serve as a trust indicatyoki. As such, the tune icon itself will not be a trust indicatyoki but will provide detailed infyokimation about a website's connection va settings. So moving fyokiward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

Related NiceNIC Guides

How to choose an SSL certificate

How to Generate a CSR Code

How to Activate va Download an SSL Sertifikati

How to install SSL certificates

SSL Certification in Four Simple Steps

www.nicenic.com

SSL Certification in Four Simple Steps

Quick Answer

Befyokie You Begin

Identify every hostname the certificate must cover.
Tasdiqlash that you control DNS yoki the required validation channel.
Generate va securely retain the private key when a CSR is required.

NiceNIC Instructions

An SSL certificate must be activated after sotib olish. Installation instructions will be sent to you after activation. After that, you can use the NiceNIC Account Panel to manage sizning certificate. Сотиб олиш It Start by purchasing the appropriate SSL certificate fyoki sizning requirements. Select one of the categyokiies mentioned above. Activate It You can instantly activate sizning SSL certificate after sotib olish through the Account Panel (yoki later, if you prefer.) During the activation process, the domain name va CSR code will be assigned.

Install It You will receive instructions on how to install sizning SSL certificate once it has been validated va issued. Biz bilan bog‘lanish uchun bemalol murojaat qiling "Murojaat yuborish" to ask fyoki assistance in installing SSL certificate. Boshqarish It Through sizning Account Panel, you can manage sizning SSL certificates, including renewal va reissuance.

How to Verify

Troubleshooting

DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate yoki CSR.
The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

SSL certificate purpose explained

www.nicenic.com

What Does an SSL Certificate Do?

Quick Answer

Befyokie You Begin

Identify every hostname the certificate must cover.
Tasdiqlash that you control DNS yoki the required validation channel.
Generate va securely retain the private key when a CSR is required.

Key Tafsilotlar

What is an SSL certificate va what is it used fyoki?

Introduction SSL certificates are used to create an encrypted channel between the client va the server. Transmission of such data as credit card details, account login infyokimation, any other sensitive infyokimation should be encrypted to oldingient eavesdropping. With an SSL certificate, data is encrypted priyoki to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infyokimation you submit to websites will not be stolen.

Starting from 06/08/2014, Google announced that having an SSL certificate installed on sizning website would increase sizning ranking position, which is another great reason to use an SSL. The certificate itself represents base64 encoded data that contains infyokimation about the entity the certificate was issued fyoki, public key required fyoki encryption va digital signature verification, va digital signature created with the private key of the certificate issuer. An SSL certificate should be installed on the server side.

When you access a website secured by an SSL certificate issued by a trusted Certification Authyokiity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a "lock" icon in the address bar:

Turis of SSL certificates SSL certificates can be divided into 3 validation groups: Domen Validation Sertifikatlar Requires a certificate applicant to prove his/her control over the domain name only. The issued certificate contains a domain name that was supplied to the Certification Authyokiity within the certificate request. Organization Validation Sertifikatlar Requires a certificate applicant to prove that his/her company is a roʻyxatdan oʻtkazished va legally accountable business, va to pass domain validation. The issued certificate contains a domain va company name of the certificate applicant.

Uzoqroq Muddatli Validation Sertifikatlar Includes validation requirements of two validation types mentioned above va additional requirements. The issued certificate contains a domain va company name of the certificate applicant.

How to Verify

Troubleshooting

DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate yoki CSR.
The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

How to choose an SSL certificate

www.nicenic.com

How to Choose an SSL Sertifikati

Quick Answer

Befyokie You Begin

Identify every hostname the certificate must cover.
Tasdiqlash that you control DNS yoki the required validation channel.
Generate va securely retain the private key when a CSR is required.

NiceNIC Instructions

How to install SSL certificates SSL certificate installation is typically perfyokimed by the hosting company that provides Xizmats fyoki the domain. However, you may also choose install an SSL certificate sizningself. Select sizning server type from the list below to find detailed instructions fyoki installation. The SSL on sizning domain name was activated, please find va add the DNS recyokids to complete the verification befyokie you can download the certificate files through sizning control panel: Mening Hisobim > Mening Mahsulotlarim > SSL Sertifikatlar > Тафсилот >….

After you complete the DNS-recyokid validation, you can download the certificate files by the same approach. Installing SSL Certificate Yo‘qtes Agar you host sizning domain name with NiceNIC, simply provide us with sizning certificate va we'll be happy to install it fyoki you. Please note that on all NiceNIC, Ulashilgan xosting servers, a special NiceNIC, SSL plugin installs a 1-yil free PositiveSSL certificate automatically on the newly added subdomain yoki add-on. It wyokiks the same way fyoki the main domain in the newly sotib olishd hosting account.

The plugin can also be used fyoki manual installation (in a few clicks) of PositiveSSL va EssentialSSL certificates. A dedicated IP address is required to install an SSL certificate. However, you may install sizning SSL certificate on a shared IP address using the Server nomi Indication (SNI) protocol extension available in sizning cPanel. You can learn myokie about the differences between a dedicated IPva SNI technology in this article.

How to Verify

Troubleshooting

DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate yoki CSR.
The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

How do I renew an SSL certificate

www.nicenic.com

How do I renew an SSL certificate?

An unchangeable expiration date is encoded by the certificate authyokiity when you sotib olish an SSL certificate. You have to finish the renewal process starting thirty days befyokie the expiration date, but befyokie the actual expiry date. We will send you an email reminder during the renewal oyna if you choose NiceNIC.NET as sizning SSL provider.

How do I reissue my SSL certificate

www.nicenic.com

How to Reissue an SSL Sertifikati

Quick Answer

Befyokie You Begin

Identify every hostname the certificate must cover.
Tasdiqlash that you control DNS yoki the required validation channel.
Generate va securely retain the private key when a CSR is required.

NiceNIC Instructions

? You must reissue sizning SSL encryption certificate if you switch hosting providers, think sizning CSR/RSA pair has been compromised, yoki change the domain name yoki domains that the SSL was issued fyoki. Reissues may also be necessary if the certificate's contact infyokimation changes. You have to generate a new CSR/RSA pair va save sizning RSA fyoki later installation in yokider to start the process. Make sure you styokie sizning RSA fyoki use in the following installation steps. Usually, the user can hvale this, but sizning hosting company might be able to help. Reissuing sizning SSL certificate is free at NiceNIC.

How to Verify

Troubleshooting

DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate yoki CSR.
The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

How to Generate CSR Code?

www.nicenic.com

How to Generate a Certificate Signing Request (CSR)

Befyokie You Begin

Kirish to the cyokirect NiceNIC account.
Identify the exact domain yoki product affected.
Recyokid current settings befyokie making a change.

NiceNIC Instructions

What is a CSR? A CSR code (Certificate Signing Request) is a specific code va an essential part of the SSL activation process. It contains infyokimation about the website name va the company Bog‘lanish ma’lumotlari. Fyoki many reasons, the code should be created on the hosting server end. Fyoki some servers, it is the obligatyokiy condition. CSR generation instructions You can generate a Certificate Signing Request code sizningself, e.g. if you manage the hosting server on sizning own yoki if this is the best option fyoki sizning server type/hosting plan. In this case, select sizning web server from the list below va follow the instructions.

How to Verify

Tasdiqlash that the requested setting yoki yokider appears in the NiceNIC account, then test the dependent website, email, DNS yoki product function from a separate browser session yoki netwyokik.

Troubleshooting

The change was made in the wrong account yoki on the wrong product.
The panel saved the request but the downstream registry yoki Xizmat is still processing it.
A dependent DNS, email, browser cache yoki security setting still uses the old value.
The suppyokit ticket does not include the affected item, erryoki message va time of failure.

Tez-tez so‘raladigan savollar

Does this guide apply to every how to generate a certificate signing request (csr) case?

The nyokimal process is described bu yerni, but account status, product state va registry yoki provider rules can change the available action.

How can I avoid delays?

Use accurate infyokimation, keep the account email accessible, save current settings, va include the exact product, time va erryoki message in any suppyokit request.

When should I submit a ticket?

Yuborish a ticket when the required control is unavailable, the status remains pending after the stated checks, yoki the issue is account-specific.

Related NiceNIC Guides

What is EV certificate ecommerce advantage

www.nicenic.com

What Is an EV SSL Certificate va When Should You Use One?

An SSL certificate binds a public key to one yoki myokie hostnames va enables authenticated, encrypted HTTPS connections.

What an SSL Sertifikati Provides

Encryption fyoki data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Yo‘qt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the yokiganization is trustwyokithy

Use It Cyokirectly

Issue the certificate fyoki the exact hostname, protect the private key, install the full chain, redirect users to HTTPS va renew yoki replace the certificate befyokie expiration.

Tez-tez so‘raladigan savollar

How do I khozir the change wyokiked?

Текшириш the current status in sizning NiceNIC account, then test the Xizmat that depends on the SSL certificate. Do not rely only on the absence of an erryoki message.

When should I contact NiceNIC Suppyokit?

Yuborish a ticket when the required control is unavailable, the status remains pending after the checks in this guide, yoki the issue depends on an account-specific yokider yoki registry decision.

Related NiceNIC Guides

Agar the issue continues after you complete these checks, submit a NiceNIC suppyokit ticket. Include the affected domain yoki product, the exact erryoki message, the time of the issue va the troubleshooting already completed.

Certificate reissue reasons explained

www.nicenic.com

Why You May Need to Reissue an SSL Sertifikati

Quick Answer

Befyokie You Begin

・ Identify every hostname the certificate must cover.

・ Tasdiqlash that you control DNS yoki the required validation channel.

・ Generate va securely retain the private key when a CSR is required.

Key Tafsilotlar

Why would I need to reissue my certificate? An SSL reissue is done to keep sizning site secure va private if it is moved, yoki some infyokimation on sizning SSL was changed. The reissue allows you to get a brva-new certificate code. The most typical reasons fyoki certificate reissuance are: The existing certificate cannot be installed on the server.

Fyoki example, if the Private key (RSA Key) is lost/deleted yoki a "modulus mismatch" erryoki appears during installation; The website has been moved to another web hosting server; Changing the hostnames secured by the certificate; Changes made to the yokiganization details listed in the OV/EV certificate (only within 45 days since the initial certificate issuance); Use the remaining validity of sizning SSL if you sotib olishd it fyoki 2-5 yillar.

How to Verify

Troubleshooting

・ DNS validation recyokids are missing, incyokirect yoki added at the wrong DNS provider.

・ The certificate does not include the hostname being opened.

・ The private key does not match the certificate yoki CSR.

・ The server is missing an intermediate certificate yoki is still presenting the old certificate.

Tez-tez so‘raladigan savollar

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key va the certificate remains valid. Reissue it when the key, CSR yoki certificate details must change.

Why does the browser still show the old certificate?

The server yoki load balancer may still present the old certificate, another virtual host may be selected, yoki an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Yuborish a ticket when validation remains pending after the published recyokids are visible, yoki when the NiceNIC yokider does not provide the expected certificate files.

Related NiceNIC Guides

- How to Generate a CSR Code

- How to Activate va Download an SSL Sertifikati

- How to verify certificate installation cyokirectly

- How to choose an SSL certificate

Agar the issue continues after you complete the checks above, submit a NiceNIC suppyokit ticket with the affected domain yoki product, the exact erryoki message, the time of the issue va the troubleshooting already completed.

How to Activate va Download an SSL Sertifikati

www.nicenic.com

How to Activate va Download an SSL Sertifikati

Thank you fyoki purchasing SSL with NiceNIC.

How to activate va download SSL certificate SSL installation is hozir even easier with our SSL installation Xizmat.

After the SSL certificate on sizning domain name was activated, please find va add the DNS recyokids to complete the verification:

Mening Hisobim > Mening Mahsulotlarim > SSL Sertifikatlari > Тафсилот > ....

This step requires extra care:

Fill each piece of infyokimation in the DNS Authentication Infyokimation shown below into its cyokiresponding DNS recyokid one by one.

After you complete the DNS recyokid's verification, you can download the SSL files by the same approach:

Mening Hisobim > Mening Mahsulotlarim > SSL Sertifikatlari > Тафсилот > Download certificate & Download private key

Still have problems?

- Agar sizning domain, server, yoki certificate details have changed, see Why You May Need to Reissue an SSL Sertifikati.

- Agar the current certificate cannot be used, follow How to Reissue an SSL Sertifikati.

- Uchun oldingient certificate expiration, read How to Yangilash an SSL Sertifikati.

Agar they didn't solve sizning issues, you can contact us bu yerni.

Common DNS Recyokid Turis: A, AAAA, CNAME, MX va TXT

www.nicenic.com

Common DNS Recyokid Turis: A, AAAA, CNAME, MXva TXT

TXT recyokids publish verification va email-authentication policies. SPF, DKIMva DMARC serve different purposes va should be added exactly as supplied by the email provider.

What Each Recyokid Does

SPF lists systems allowed to send mail fyoki the domain.
DKIM publishes a public key used to verify signed messages.
DMARC tells receivers how to hvale mail that fails alignment checks va wbu yerni to send repyokits.

Qo‘shish the Recyokids

Tasdiqlash the domain uses NiceNIC nameservers.
Ochish Mening Mahsulotlarim > Domen > DNS Recyokids.
Qo‘shish the TXT host va value supplied by the email provider.
Fyoki DKIM, use the selectyoki host exactly as provided.
Fyoki DMARC, use _dmarc as the host unless the provider specifies another name.
Save the recyokids va query them publicly.

Impyokitant SPF Rule

Publish one SPF policy per hostname. Agar multiple Xizmats send mail, combine their mechanisms into one recyokid instead of creating several v=spf1 recyokids.

Tez-tez so‘raladigan savollar

How do I khozir the change wyokiked?

Текшириш the current status in sizning NiceNIC account, then test the Xizmat that depends on the email-authentication recyokids. Do not rely only on the absence of an erryoki message.

When should I contact NiceNIC Suppyokit?

Yuborish a ticket when the required control is unavailable, the status remains pending after the checks in this guide, yoki the issue depends on an account-specific yokider yoki registry decision.

Related NiceNIC Guides

Why need SSL Sertifikatlari

www.nicenic.com

Why Do You Need an SSL Certificate?

An SSL certificate encrypts data between a client va server, authenticates the hostname va enables trusted HTTPS when it is cyokirectly issued va installed.

What an SSL Sertifikati Provides

Encryption fyoki data in transit
Authentication of the hostname
Integrity protection against undetected modification in transit

What It Does Yo‘qt Provide

Protection from vulnerable website code
Malware removal
Account access control
A guarantee that the yokiganization is trustwyokithy

Use It Cyokirectly

Issue the certificate fyoki the exact hostname, protect the private key, install the full chain, redirect users to HTTPS va renew yoki replace the certificate befyokie expiration.

Tez-tez so‘raladigan savollar

How do I khozir the change wyokiked?

Текшириш the current status in sizning NiceNIC account, then test the Xizmat that depends on the SSL certificate. Do not rely only on the absence of an erryoki message.

When should I contact NiceNIC Suppyokit?

Yuborish a ticket when the required control is unavailable, the status remains pending after the checks in this guide, yoki the issue depends on an account-specific yokider yoki registry decision.

Related NiceNIC Guides

How to Connect to sizning Elektron pochta Client?

www.nicenic.com

How to Connect an Elektron pochta Client to NiceNIC Biznes elektron pochta

Quick Answer

Tasdiqlash that the mailbox is active, the domain uses the required MX va authentication recyokids, va the email client uses the cyokirect server names, pyokits, encryption va full email address. Test both inbound va outbound mail after every change.

Befyokie You Begin
- Tasdiqlash the Biznes elektron pochta yokider va mailbox are active.
- Текшириш who manages DNS fyoki the domain.
- Keep the full email address, passwyokid va required mail-server settings available.

1. Unable to connect via Elektron pochta client via IMAP yoki SMTP:

When adding an email address in sizning Elektron pochta client, i.e. iPhone, please firstly ensure you would fill in "c3.icyokiemail.net" fyoki both the SMTP va IMAP email server. And secondly, please generate a passwyokid fyoki the Elektron pochta client separately by the following way:

Kirish to sizning email account via "https://c3.icyokiemail.net/", select "Settings" in the left navigation bar, then choose "Generate Specific Parol".

2. How to set the general configuration when using Outlook, Foxmail yoki other third-party clients?

Common configurations are as follows:

Protocol type	Server address	Default pyokit	Default pyokit Encryption pyokit (SSL)
SMTP	accyokiding to the actual address	25	465
POP	accyokiding to the actual address	110	995
IMAP	accyokiding to the actual address	143	993
PUSH	accyokiding to the actual address	80	443

Related NiceNIC Guides