Home of the BrewNosers

I would normal just PM or email this to Dave, but since some web browsers might give a very scary message to visitors to the site I wanted to post it so no one was too scared to visit it.

The SSL certificate has expired on the site, so if you get a warning don't be scared away. Dave, if you hadn't noticed it yet it is time to contact RapidSSL and renew your cert. And on a related note, congrats on 1 year.

Thanks! My one year anniversary was actually yesterday, March 28th.

The certificate isn't actually expired,it auto renewed on March 19th, but there is an issue with the site recognizing it. I've got my guys on it and it should be dealt with by tonight.

Dave

EverwoodAveBrewShop wrote:Thanks! My one year anniversary was actually yesterday, March 28th.

The certificate isn't actually expired,it auto renewed on March 19th, but there is an issue with the site recognizing it. I've got my guys on it and it should be dealt with by tonight.

Dave

The certificate you have is expired. Certificates, once issued, cannot be changed; this is part of the cryptographic integrity of the system.
Your billing is what auto-renewed. What your guys most likely will have to do, depending on the issuer, is create a new Certificate Signing Request (CSR). This is essentially a new certificate. They will send it to your provider who will cryptographically "sign" it and send back the signed version. They will then install the new version to your web server and all will be hunky dory once again. You may need to be involved with some part of this depending on what level of access you've given to your guys.

If they've already done all this the problem is that the web server is still serving the expired certificate and not the newly issued one.

^ This. Depending on the software you're using for managing your server it's sometimes as easy as copy/paste from a CSR file to generate the new cert.

In four non run-on sentences, what does this mean, and why is it important?

Guarantees all traffic to and from web server is encrypted. Especially important when dealing with financial, personal, or sensitive information, i.e. ecommerce.

It's fixed, so we can all go back to our regularly scheduled drinking.

I offered a simple explanation for the masses and I didn't expect the interweb police to be on patrol tonight!

The truth is that the certificate was renewed, but since I recently moved from a shared server to a VPS when the certificate auto-renewed it didn't get applied to my account automatically as my host doesn't provide that hand-holding service with a VPS. My trusted web guy had to go into the backend and manually enter the certificate for me. So when you ran the SSL check, RapidSSL couldn't verify that the certificate was installed on my site, however the certificate had been issued and was active, just not linked to my domain. Better explanation?