SSL certificate issued by vercel not trusted by multiple platforms

I have an A+ rating on ssllabs.com for https://www.filmaxcinemahub.com certificates but if you expand results for cert#2 there is an error for:

Alternative names no-sni.vercel-infra.com MISMATCH
and
Trusted No
NOT TRUSTED Mozilla Apple Android Java Windows

I am using vercel nameservers on my registrar, I have triple checked any added DNS records to my domain to verify they are all correct. I have registered with google search console, I have 0 detections with sucuri check, but I am constantly seeing SSL protocol issue in my browser, unsafe site reports in my browser, scame reports with malwarebytes, and virustotal has reported 9/96 vendors marking me as malicious.

All of these issues stemming from SSL.

No code.

https://www.filmaxcinemahub.com/

1 Like

The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for bonus points.

You can also use v0 to narrow down the possibilities.

HI @lucasmern, welcome to the Vercel Community!

Sorry that you’re facing this issue. Good thing is that I’m not facing it on my devices, so it means it’s not a global issue.

Can you share a screenshot of the browser issue that you get? Also, which region are you getting an error in? Is your browser up to date?

Yeah so on my desktop:

on edge browser, I get the red malicious site screen
on chrome I don’t but i do get SSL protocol errors from clerk
on my phone in safari everything is fine.

I had a friend from Clerk look on every browser on his computer and didn’t see any issues either.

Is there a way to clear my computer cache to resolve this on my personal desktop? I tried disk cleanup and deleting everything from history in my browser.

I have no pending windows updates. Browser is up to date. US Central.

2 Likes

Also, the apex domain is set to 308 permanent redirect to the www domain and it is not. If i visit the apex domain it says there is no SSL

Hi @lucasmern, thanks for sharing the additional contexts. Would it be possible to remove the domain connection and re-add it? This should regenerate the SSL certificates and may solve the issue.

Can you also try disabling any firewall or antivirus for testing purposes?

I have disabled attack challenge mode, removed the redirects, removed the www and apex domain, and have switched back to default nameservers with my registrar. Will give it time to settle and add the domains back in a few hours. Is there anything else I should disable? I am still missing content compared to other devices so I’m not sure if there is an additional step I need to take to clear my cache on my local machine.

1 Like

Hi @lucasmern, no let’s wait and add it again to see if it helps.

About the firewall, I mean turning off your computer’s firewall or antivirus mechanism just for testing purposes. The Vercel firewall shouldn’t be any problem.

I added it back in again this morning and seems it is still unable to secure the website on my end.

I see a valid cert when I visit the site.

Usually a discrepancy like this is caused by a local firewall or antivirus software, like @anshumanb suggested. If you’re connecting from a university, office, or other shared network, the network administrator may be able to help.

2 Likes

I’m on my home network.
I only have malware bytes, and the default microsoft security.

I have disabled every protection on both microsoft, malwarebytes, and google chrome as well as erasing ALL browsing data stored in chrome, but I am still met with a site not secure icon, and a SSL error or a site not found error.

I have no idea what else I can possibly do at this point.

A visitor of my website messaged me with the same issue. I don’t have any issues myself, so I cannot reproduce.

I did notice after a check on sslchecker.com, that the Vendor Signed says: No > SSL is not trusted
Perhaps this is the problem? I don’t have any knowledge about SSL certificates myself, so I don’t know why this happens or how to solve it…

I’m having the same issue here for my domain https://www.minhnotes.com/ even though I can access https://minhnotes.vercel.app/ while I correctly set up