SSL Certificate Help Needed

I don't always get a secure connection.

[PKfanSteph]

I just installed a new shopping cart for my company and I am having trouble getting a secure connection. When I go to [mysite.com...] I get the following message in IE (and similar messages in other browsers):

"Unable to establish a secure connection to 'mysite.com'. There is a problem with the security certificate from that site (The identity certificate site name is not correct.)

The information you view and submit will be readable to others while in transit, and it may not go to the intended party.

Continue loading this page?"

I don't seem to get the error when I use [mysite.com...] But I still don't see the little icon that says it's secure.

When I looked at the config file for the shopping cart, it included the "www". Are carts and certificates that picky? Is it as simple as removing the "www" from the config or always using it in the links, or is it something else that's causing the problem?

I had the same trouble on the old shopping cart I was using, but it didn't happen every single time and I only had one or two complaints.

Thanks for any help!

[lorax]

Which Fully Qualified Domain Name did you use when you purchased the SSL cert? The mysite.com or www.mysite.com - it looks like you may have purchased an SSL for www.mysite.com. Your cert will only work for the FQD it was setup for so you'll either need to change your links to match or buy another SSL cert.

And how are determining the security isn't there? If the use of https works without error then you have an SSL in place. Maybe a shared cert is installed?

[FalseDawn]

Also check if the cert has a chained root or not - if so, you will need to install the intermediate certificate on your web server, or it won't work.

"If the use of https works without error then you have an SSL in place"

This might be correct, but I wouldn't rely on it.
If the "lock" icon is not appearing on a secure page, you likely have some elements (images probably) that are not secure (i.e. you are linking them using [)...]

HTH

[lorax]

>> but I wouldn't rely on it

It is correct but the point is that it could be ANY SSL - even the wrong or an outdated one.