Invalid Security Certificate

  • Unknown's avatar

    Hi, I’ve logged on to my wordpress site’s dashboard, girlfriendscommunity.wordpress.com. All worked well until I clicked on WP admin. When I clicked there, it opened another tab on my browser (Firefox) which said:

    Your connection is not secure

    The owner of girlfriendscommunity.wordpress.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

    This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox may only connect to it securely. As a result, it is not possible to add an exception for this certificate.

    girlfriendscommunity.wordpress.com uses an invalid security certificate. The certificate is only valid for search.dnsadvantage.com Error code: SSL_ERROR_BAD_CERT_DOMAIN

    I believe I can tell Firefox to make an exception, but I don’t want to do that without understanding the issue.

    Also, when I entered my site address, http://www.girlfriendscommunity.wordpress.com, directly, it took me to a Norton ConnectSafe page where I got this message:

    Malicious Website Blocked!

    This website may be dangerous, and it is recommended that you do not continue. For your protection, this site has been blocked.

    Again, I can tell it to let me view the site anyway, but don’t want to do so until I understand the security issue.

    I have this same issue when using the WordPress app on my iPhone. Usually it is resolved by turning the phone off and on again. I just switched from a pc to a mac – I never had this issue with the pc. I wonder if iOS doesn’t play nice with WordPress??

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    All WordPress.com sites free or otherwise use HTTPS. Read https://en.support.wordpress.com/https/

    No wordpress.COM URLs contain “www”.

    All www URLs seamlessly redirect to the same content under the URL without the redundant “www” which has not been required for over a decade. The software will continue to strip out the redundant and unnecessary www if you are entering it.

    Be aware that www is an old protocol from way back when the web was new and everything was under separate server hardware. www (www.example.com) was the web server, mail (mail.example.com) was the mail server, ftp (ftp.example.com) was the FTP server, print (print.example.com) was the print server, etc.

    These days, everything is run under the web server, making www. redundant and a waste of four characters.

  • Unknown's avatar
  • Hi @girlfriendscomunity, try https://girlfriendscommunity.wordpress.com/wp-admin and let us know whether you need more help. As timethief mentioned, you’ll get errors if you try to add www.

  • The topic ‘Invalid Security Certificate’ is closed to new replies.