Pages

Friday, May 16, 2014

SSL certificate replaced, but site delivers old one still?

So  I encountered this scenario where the SSL was replaced but the site is still serving the old SSL on a site hosted on IIS 8. You keep checking it on the IIS manager but its already set to the correct SSL Certificate but still you are being presented when browsing the site with an old SSL. How do you solve it ?

It turns out the IIS 8 may have keep another SSL record on its own metabase. You need to reset this in order for the SSL Cert that you've added to take over.

First things first, get the thumprint of your SSL. This is gathered by doubleclicking the Certificate from the MMC (certificate snap-in) and then browsing the properties and looking up the Thumbprint similar to the one shown below :


Then run this command on your server :



Now look at the list of SSL Certs if IP and Port Number in the list has a different thumbprint with the correct SSL. If it is, then most likely the IIS is serving the incorrect SSL.

You can delete this on your server by using the command :


Make sure to specify the correct ipport values, which is similar to the IPPort values on the list earlier.

When done, restart your IIS and then re-assign the SSL Certificate to your site.

Afterwards browse and you will see that your site is serving the correct SSL Certificate.

Please leave comments if this helped you.


13 comments:

  1. Great, thanks. Helped me so much. I'm always looking for blogs like yours to help me solve this tech stuff. So glad the internet lives.

    ReplyDelete
  2. Wonderful article. Fascinating to read. I love to read such an excellent article. Thanks! It has made my task more and extra easy. Keep rocking. SSL certificates

    ReplyDelete
  3. This article is a prologue to a custom curriculum in Irish optional schools. The past then years have seen an ocean change in a custom curriculum arrangement in Ireland. certificate iv in education support

    ReplyDelete
  4. Accounting Services: We are a professional and experienced international accountants we offer our clients the full range of accounting services including Nhbrc Test and Registration in South Africa, NHBRC certificate, CIDB Registration, renewals and upgrades, All Tax Services, Business Plans
    etc. We work with a wide variety of companies and business sectors.
    We're solutions focused, results driven tax and business accountants in Midrand, JohannesburgNHBRC certificate

    ReplyDelete
  5. certainly like your web site but you have to take a look at the spelling on quite a few of your posts. Several of them are rife with spelling problems and I in finding it very bothersome to inform the reality then again I will surely come again again. webflow design agency

    ReplyDelete
  6. Some truly nice stuff on this website , I it. webflow developers

    ReplyDelete
  7. Sweet site, super pattern , real clean and utilize genial . user experience design

    ReplyDelete
  8. After examine a couple of of the weblog posts on your web site now, and I really like your manner of blogging. I bookmarked it to my bookmark website record and will probably be checking back soon. Pls take a look at my web page as well and let me know what you think. front end developer

    ReplyDelete
  9. You might be websites successful individuals, it comes effortlessly, therefore you also earn you see, the jealousy of all the ones a lot of journeymen surrounding you could have challenges within this challenge. motor movers website design agency

    ReplyDelete
  10. i joined so many seo forum on the internet and they are really quite helpful and i have learned a lot, website design company

    ReplyDelete
  11. I am exceedingly glad to read this comprehensible and informative post about the SSL certificate. It is amazing and delightful that SSL certificate has been replaced but the site delivers the old version. Essay Writing Services


    ReplyDelete
  12. Enjoyed every bit of your article post. Really looking forward to read more. Really Cool.ssl certificate not trusted

    ReplyDelete
  13. I read your blog frequently, and I just thought I’d say keep up the fantastic work! It is one of the most outstanding blogs in my opinion. CE certificate

    ReplyDelete