SSL not covering www version of my website address

• 

  avpadvocacia · Member · Sep 23, 2025 at 12:59 am

  • Copy link
  • Add topic to favorites

  When users visit my website using the www version (https://www.valentinperinadvocacia.com.br/), the browser is showing a security alert:
  ========================================
  Your connection is not private

  Attackers might be trying to steal your information from http://www.valentinperinadvocacia.com.br (for example, passwords, messages, or credit cards). Learn more about this warning

  net::ERR_CERT_COMMON_NAME_INVALID
  ========================================
  
  I have no problem with the canonical being the version without www, but the ssl should cover the www version since a lot of people still uses that addressing style. The ssl should cover that and then redirect the users to the canonical version (https://valentinperinadvocacia.com.br) without showing the privacy alert.

  The blog I need help with is: (visible only to logged in users)

• 

  staartmees · Member · Sep 23, 2025 at 5:47 am

  • Copy link

  The www-prefix is obsolete since several decades. Also I can’t reproduce the error you see.

  You find all info at https://wordpress.com/support/www-versus-non-www-domains/

• 

  mortallyzany369d7a2dcb · Member · Sep 27, 2025 at 5:09 pm

  • Copy link

  This issue happens because your SSL certificate does not include the www subdomain. To fix it, you need to reissue or update your SSL to cover both valentinperinadvocacia.com.br and www.valentinperinadvocacia.com.br. After that, set up a redirect so all traffic goes to your preferred non-www version.

  You can check this guide for details: SSL not covering www version

• 

  zikriaahmad411 · Member · Sep 27, 2025 at 6:46 pm

  • Copy link

  Hi @avpadvocacia,

  I understand how concerning it feels to see that kind of security alert when visitors use the www version of your domain. I checked on my end, and the redirect from http://www.valentinperinadvocacia.com.br to valentinperinadvocacia.com.br is working correctly, and the SSL is active as expected. Here’s a screen recording of what I see: https://www.awesomescreenshot.com/video/44693318?key=3a2c2ea6439fa43985300f6cec9c44ef

  This could be a cache issue on your device or browser. To confirm, could you try checking your site in a different browser, using incognito/private mode, or clearing your cache? You’ll find step-by-step instructions here: https://wordpress.com/support/browser-issues/

  You can also double-check the SSL status of your domain directly in your WordPress.com dashboard by following these steps: https://wordpress.com/support/domains/https-ssl/#check-your-ssl-status-in-wordpress-com

  Once you test in another browser, let me know what you see. I’ll be here to continue troubleshooting with you if needed!