SSL certificate errors: what to check first
Identify the warning and the affected hostname before replacing a certificate or changing server settings.
Start with the evidence
Check the served certificate
Identify the deployment owner
Match the symptom to the next check
| What you see | What to check | Practical next step |
|---|---|---|
| Expired or not-yet-valid certificate | Check the certificate dates and the client clock. Confirm which certificate is being served. | Arrange an appropriate replacement, install it and verify the live site. |
| Name mismatch | Compare the requested hostname with the certificate’s covered names. Check server/SNI selection. | Correct the deployment or request coverage for the missing name. |
| Unknown issuer or incomplete chain | Check that the intended certificate and issuer-provided chain are installed. | Use the CA’s platform instructions; do not substitute an unrelated intermediate. |
| Mixed content | Look for HTTP images, scripts, styles or other requests on an HTTPS page. | Update the application’s resource URLs and verify those resources support HTTPS. |
| Old certificate still appears | Check each relevant server, gateway or CDN endpoint and its active certificate binding. | Have the administrator verify deployment across the affected endpoints. |
Keep the checks safe
Send a useful support request
Existing certificate order
Installation or replacement help
Common questions
Will buying another certificate fix every HTTPS warning?
No. First determine whether the issue is coverage, expiry, deployment, trust-chain configuration or application content. A new purchase may not address the cause.
Why does the warning affect only www or one subdomain?
That hostname may not be included, may reach another server or may use a different certificate binding. Check the exact name and endpoint.
What if the site uses a CDN?
The browser-facing edge and the origin can have separate TLS configurations. Have the administrator check both according to the provider’s instructions.
Why do I still see mixed content after installing a certificate?
An HTTPS page can still request some resources over HTTP. Fix those application references and check the browser console for remaining insecure requests.