"Anslutningen är inte privat" - SSL-certifikatfel

Om din webbplats hos WebHotel24.se visar SSL-certifikatfel, d v s "Anslutningen är inte säker" och texten NET::ERR_CERT_DATE_INVALID så kan du behöva uppdatera din dator, surfplatta eller mobiltelefon.

Felet kan också visas vid anslutning till epost-tjänster eller likande.

Bakgrunden är att ett mellanliggande root-certifikat har gått ut och detta hade utgångsdatum 2021-09-30 kl 16.01.15 (svensk tid). Detta root-certifikat ligger i din dator, surpflatta eller mobiltelefon. Felet ligger alltså inte i webb- eller epost-servern. Det är normalt inte så svårt att lösa - läs vidare.

Installation av SSL-certifikat i Microsoft Exchange 2010

Import the Intermediate certificate

1. Use the correct Intermediate certificate that you received from us and follow the instructions below:
   1. Copy the intermediate certificate from the webpage and paste it into a simple text editor, such as Notepad.
   2. Save it as intermediate.cer on your desktop.
   3. Open MMC.
   4. Select File. Click Add/Remove Snap In.
   5. Click Add.
   6. Select Certificates. Click Add.
   7. Select Computer Account. Click Next.
   8. Select Local Computer. Click Finish. Click Close then OK​.
   9. Select Certificates. Select Intermediate Certification Authoritiesand then Certificates.
   10. Right-Click Certificates. Select All-Tasks. Click Import.
        
2. The Import Wizard will start. Follow the instructions to import the intermediate certificate and close MMC.

Import the SSL certificate

1. Copy the SSL certificate from the email and save this as mydomain.cer. It is advised that you place this on your desktop.

   Installing the certificate with the Exchange Management Console:

   1. Start the Exchange Management Console by selecting Start, Programs, Microsoft Exchange 2010, and Exchange Management Console.
   2. Select Manage Databases, and then Server configuration.
   3. Unless you provided us with the Certificate Signing Request (CSR/.req) file, we have generated one for you. In this case you should not use New Exchange Certificate (or a previously created Exchange Certificate).
      Instead, use Import Exchange Certificate. Select the PFX-file delivered by us and enter the password for the file and import it.
       
2. Press F5 to refresh the page and verify that the imported certificate now says False under Self Signed. If True is still shown, the wrong certificate has been selected, or installed on the wrong server. To resolve this issue, create a new CSR on this Exchange server and reissue the certificate.
3. If installed correctly you now need to enable the certificate. Go back to the Exchange Management Console and click the link to Assign Services to Certificate.
4. Select the server from the list provided. Click Next.
5. Select the services for which the certificate must be enabled then click Next. Click Assign. Click Finish.
6. The certificate is now Installed and enabled for use with Exchange 2010.

Note: Do not use the Certificate snap-in to import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work.

For more info please visit http://technet.microsoft.com/en-us/library/bb125165.aspx

Troubleshooting

• If the status of the certificate remains "this is a pending certificate signing request (csr)" so you are not able to Assign Services to Certificate, make sure you imported the certificate from the PFX-file and not created a new Exchange certificate (it will not match the private key or the request).
• When importing the PFX-file, if you get an error saying "Cannot import certificate. A certificate with the thumbprint NNNNNN already exists." the cause can be that you already tried to import the certificate before. Run MMC and go to Certificates (local computer) >> Personal >> Certificates, find the certificate, right click it and delete it. Then try the PXF import again. 

Vad kostar ett SSL-certifikat till min hemsida?

Svar: I företagsabonnemangen hos WebHotel24 så ingår SSL-certifikat till hemsidan utan extra kostnad.

Ett SSL-certifikat innebär att din hemsida kan nås över https, d v s en krypterad anslutning mellan besökaren och webbservern. På så sätt slipper besökaren se en varning i webbläsaren om att sidan är osäker och Google premierar också din hemsida i sökresultaten om den nås via https med ett giltigt SSL-certifikat.

Kontakta supporten så aktiverar ett kostnadsfritt SSL-certifikat för din hemsida.

Behöver du ett SSL-certifikat som också kan användas till annat än hemsidan så erbjuder vi olika varianter, se prislistan eller kontakta oss för mer information.