Subsequently you install an SSL document on your web server, you should always run an SSL check to verify that everything is prepare up correctly. SSL/TLS certificates require not only your main certificate but also what they telephone call intermediate certificates (concatenation) to also be installed. If you don't have these set up upward properly, visitors could become a alert in their browsers, like the "your connection is not private" error, which in turn might drive them abroad. And depending on the browser and version, y'all may or may not see this alert if your certificate is setup incorrectly. That is why information technology is of import to run an SSL cheque with a 3rd party tool.

How to Perform an SSL Bank check

We recommend using the gratis SSL bank check tool from Qualys SSL Labs. It is very reliable and nosotros utilize information technology for all Kinsta clients when verifying certificates. Simply head over to their SSL check tool, input your domain into the Hostname field and click on "Submit." Y'all tin also select the option to hibernate public results if y'all prefer. Information technology could take a minute or two to scan your site's SSL/TLS configuration on your spider web server.

ssl check domain
SSL bank check domain

Passing SSL Check with an A Grade

SSL Labs will assign yous an SSL server rating, anywhere from an A to an F. You lot should always be aiming for an A grade. This ways you have both your SSL document and intermediate certificate setup correctly. And that your WordPress host has the residuum of your web server up to current specifications. If y'all don't, see further beneath for an explanation of warnings and errors and how to fix them. You tin always reach out to your WordPress host for help as well.

ssl check a grade
SSL check A grade

Certificate Concatenation Incomplete Warning

The "document concatenation incomplete" is ane of the most common warnings when running an SSL bank check. When you install an SSL certificate on your spider web server, or with Kinsta, it requires that yous add your document key, individual central, and chain. If y'all just add your primary document y'all will see a alarm every bit seen beneath: "This server's certificate concatenation is incomplete. Grade capped to B." It as well will also study further below as simply having chain issue.

ssl check chain incomplete
SSL check concatenation incomplete

To gear up this yous need to add your intermediate certificate equally well. Most SSL providers will electronic mail you a .crt file and a .ca-bundle file. For Kinsta customers, simply paste the contents of your .crt file in the "Certificate" section outset and and then the contents of the .ca-parcel file beneath it. Yous can use a text editor like Notepad or TextMate to open the certificate and bundle files. If you don't take or know your intermediate document you can use a free tool like https://whatsmychaincert.com/ to generate it.

update https
Update HTTPS

If you are using a different web hosting provider you lot can open up a back up ticket and provide them with your intermediate document. After calculation it, you can clear the cache on your SSL Labs exam and re-run it to ensure that your B grade goes to an A.

clear ssl cache
Articulate SSL cache

Brand sure to also cheque out this guide on SSL and TLS Deployment Best Practices.

Also, moving from HTTP to HTTPS requires a lot of changes, make sure you read this complete migration tutorial: In-Depth HTTP to HTTPS Migration Guide for WordPress

Save fourth dimension, costs and maximize site functioning with:

  • Instant help from WordPress hosting experts, 24/vii.
  • Cloudflare Enterprise integration.
  • Global audience achieve with 29 data centers worldwide.
  • Optimization with our built-in Awarding Operation Monitoring.

All of that and much more, in one plan with no long-term contracts, assisted migrations, and a thirty-mean solar day-money-dorsum-guarantee. Check out our plans or talk to sales to find the plan that'southward correct for you.