After you install an SSL document on your web server, you lot should always run an SSL check to verify that everything is set up correctly. SSL/TLS certificates require not only your main certificate but also what they call intermediate certificates (chain) to also exist installed. If y'all don't have these gear up up properly, visitors could get a warning in their browsers, similar the "your connection is not individual" fault, which in plough might bulldoze them away. And depending on the browser and version, y'all may or may not see this warning if your document is setup incorrectly. That is why it is important to run an SSL bank check with a third party tool.

How to Perform an SSL Check

We recommend using the free SSL bank check tool from Qualys SSL Labs. It is very reliable and nosotros use it for all Kinsta clients when verifying certificates. Just head over to their SSL check tool, input your domain into the Hostname field and click on "Submit." You can also select the option to hide public results if you adopt. It could take a infinitesimal or two to scan your site'southward SSL/TLS configuration on your web server.

ssl check domain
SSL cheque domain

Passing SSL Bank check with an A Grade

SSL Labs volition assign you lot an SSL server rating, anywhere from an A to an F. Yous should e'er be aiming for an A grade. This means you have both your SSL document and intermediate certificate setup correctly. And that your WordPress host has the rest of your spider web server upwards to current specifications. If you lot don't, see further below for an caption of warnings and errors and how to set up them. Yous tin can ever reach out to your WordPress host for help besides.

ssl check a grade
SSL bank check A grade

Certificate Chain Incomplete Warning

The "certificate chain incomplete" is one of the most common warnings when running an SSL check. When you install an SSL certificate on your web server, or with Kinsta, it requires that you add your certificate cardinal, individual fundamental, and chain. If you only add your principal certificate y'all will encounter a warning as seen below: "This server's certificate chain is incomplete. Class capped to B." It also will also report further below as simply having chain issue.

ssl check chain incomplete
SSL bank check chain incomplete

To prepare this you need to add your intermediate certificate likewise. Most SSL providers will email you lot a .crt file and a .ca-bundle file. For Kinsta customers, simply paste the contents of your .crt file in the "Certificate" department first then the contents of the .ca-bundle file below it. You can utilise a text editor like Notepad or TextMate to open the certificate and bundle files. If you don't take or know your intermediate certificate y'all can use a gratuitous tool similar https://whatsmychaincert.com/ to generate information technology.

update https
Update HTTPS

If you are using a different web hosting provider yous tin open up a support ticket and provide them with your intermediate certificate. Afterward adding information technology, y'all can articulate the enshroud on your SSL Labs test and re-run information technology to ensure that your B grade goes to an A.

clear ssl cache
Clear SSL cache

Make certain to besides check out this guide on SSL and TLS Deployment All-time Practices.

Besides, moving from HTTP to HTTPS requires a lot of changes, make certain you read this complete migration tutorial: In-Depth HTTP to HTTPS Migration Guide for WordPress

Save time, costs and maximize site performance with:

  • Instant aid from WordPress hosting experts, 24/vii.
  • Cloudflare Enterprise integration.
  • Global audition accomplish with 29 data centers worldwide.
  • Optimization with our built-in Application Performance Monitoring.

All of that and much more, in one plan with no long-term contracts, assisted migrations, and a 30-twenty-four hours-money-back-guarantee. Cheque out our plans or talk to sales to find the plan that'due south correct for y'all.