FAQs

If a root certificate is missing, the solution is to download the trusted root CA first and then attempt to install the certificate again. To fix the intermediate certificate missing error, ensure you have followed all the SSL installation steps required for your server, including uploading the intermediate certificates in the correct order and file format.

Copy Link

To combine the root and intermediate certificates, you need to chain all of them (excluding the server certificate) in the order of verification. The quickest way is to copy the contents of your root certificate and paste them below the intermediate certificates. The combined file will have the following order:

• Intermediate certificate 1
• Intermediate certificate 2
• Root Certificate to complete the chain of trust.

Copy Link

You don’t need to identify the root and intermediate certificates when configuring your SSL certificate if you’ve received them inside a CA Bundle file. Open the file with any text editor, and you’ll notice that all certificates are inside in the correct order. If you’ve received the root and intermediate certificates in separate files, check the file name, as it must include the word “root” or “intermediate” for easy identification.

Copy Link

When you order an SSL certificate, the CA delivers the installation files in an archived ZIP folder. Inside it, you will find the server certificate issued for your domain and a CA Bundle file containing the root and intermediate certificates. Some CAs may send the root and intermediate certificates in separate text files

Copy Link

You need an SSL/TLS certificate to encrypt sensitive data and follow the latest security guidelines. Without an SSL/TLS certificate, your website will not be accessible to visitors. Instead, they will get a security warning. All SSL certificates use the TLS protocol, while SSL is now deprecated. TLS is the standard means of performing encryption.

Copy Link

HTTPS uses TLS 1.2 and TLS 1.3. These are the most secure and reliable protocols that satisfy current online security needs. The SSL protocols are now obsolete and no longer in use.

Copy Link

You can check any website’s TLS status with our SSL Checker tool. It will also tell you in-depth details about the SSL certificate.

Copy Link

Most modern servers and email clients support TLS 1.2 or TLS 1.3. Only legacy servers and old systems might allow obsolete SSL protocols to run. Here’s how to identify what protocol is enabled on Windows and Linux systems.

Windows

WindowsMicrosoft enabled TLS 1.3 in the latest Windows 10 builds starting with build 20170.

Follow the steps below:

• Press the Windows key + R to start Run, type regedit, and press Enter.
• Go to the following key and check it. If it’s present, the value should be 0:
  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.2ClientDisabledByDefault
• Next, check the following key. If you find it, its value should be 1:
  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.2ClientEnabled
• If none of the keys is present or if their values are incorrect, then TLS 1.2 is not enabledLinuxThe easiest and quickest way to check the TLS version on various Linux servers is with an Open SSL command: $ openssl s_client -connect {domain}:443 -servername {domain} -tls{version}

Linux

The easiest and quickest way to check the TLS version on various Linux servers is with an Open SSL command:

$ openssl s_client -connect {domain}:443 -servername {domain} -tls{version}

Copy Link

Yes, TLS is better than SSL in every aspect, from security and cipher strength to the handshake speed TLS is the clear winner. The latest TLS 1.3 release enhances security even further by removing obsolete ciphers and algorithms.

Normally, the handshake required several roundtrips to exchange the keys and authenticate the server, adding latency to connections. TLS 1.2 slowed it down, while TLS 1.3 refined it to a single roundtrip. The new Zero Round Trip Time Resumption (0-RTT) feature makes the connection almost instantaneous when a user re-visits your site in a short time.

Copy Link

Once you’ve installed OpenSSL on Windows, double-click the Openssl.exe file to run it.

Copy Link