Resolved Cannot activate DigiCert symantec SSL

[Dennis Oppelt]

Hi
I am so frustrated

I had to update all my domains to the new Symantec SSL in Plesk months ago.
I was able to do that but it was hard to activate the BASIC SSL.

If I choose Canada as a country, it asks for a proper 'state code'
Canada does not have states, it has provinces, and it has postal codes, not zip codes. I find this all over on american sites, like we dont exist.

anyway, I just added a new domain today
and I cannot activate the Symantec SSL using the DIGI CERT SSL link in website hosting settings for that domain.
I tried everything
I always get the error in the 'state' field

I copied my 'who is info' on the site owner.

I wonder if this service from Symnantec is still working?

or can it be that my domain has not propogated fully yet?

I have the latest Plesk

any ideas?
thanks

 

[Bonsai78]

I guess it is the same what you have to type in like here:
Generate a CSR for Java Web Server

Make sure country is CA (capital letters two digits ISO code) and the fileld "state" is your province like Alberta
We also have no states, here it is Bundesland. ;-)

 

[Dennis Oppelt]

Sorry
but that is not the reason why I cannot activate

when you click on the 'activate Digicert ssl'
a page comes up with fields to fill out.

there is no way you can TYPE IN a country code

they give you a drop down, you choose the country
I did that

and when you pick canada, it still says 'state' where I have tried using alberta

or the postal code

nothing works

 

[Bonsai78]

alberta or Alberta?

Another question .... if the ... cite from www.websecurity.symantec.com/en/ca" industry-leading SSL/TLS and security solutions." from Symantec are failing and you anyway only want the free certificate .... you ever tried Let's Encrypt?

 

[Dennis Oppelt]

I have not tried the alberta instead of Alberta

yes, I am using lets encrypt now for one domain

but a few months ago, plesk changed and suggested to upgrade all SSL to Symantec

I did that so they are all using the SSL site starter

when I went to use Symantec on the last domain, it would not activate
so I used lets encrypt

 

[Bonsai78]

You know this story?
Google and Mozilla are Deprecating Existing Symantec Certificates | Qualys Blog

 

[Dennis Oppelt]

interesting stuff

so it seems that when my existing SSL certs expire

I should use the lets encrypt certs

since Symantec ones will be phased out anyway?

then why does plesk even have the Digicert option in its panel in the first place, if they will no longer activate?

jut wastes peoples time.

 

[Bonsai78]

They probably adviced to renew EXISTING Symantec certificates? I did not get this, but this makes sense, as Symantec stopped doing bullshit and became trusted again (for new certificates)

 

[Dennis Oppelt]

I will wait until a cert. expires, and if it does not renew automatically, I will try to reactivate Symantec.

if it does not reactivate

I will use only the lets encrypt.

it should not be in plesk if the activation does not work.


I did not get the reasons why it does not activate either, from the articles I read.

oh well

thanks

 

[Dennis Oppelt]

Hi

I fixed it

I was able to activate the DigiCert

1. I unchecked the 'create a permanent 301 redirect from http to https
in 'hosting settings'

2. when i went to activate, I used 'AB' for the 'state' filed, instead of alberta, or a postal code
they should be more clear on the form

I dont think I needed to do step 1
but I did it anyway

 

[Dennis Oppelt]

I just tried to AGAIN activate the Digicert secure site starter for a new domain

Again, it will not activate
even when I used the tip I posted before

I give up
it will not activate

Plesk should get rid of this

I even tried to activate the Let's Encrypt cert, and it would not work either

but

it may be because my domain has not propogated yet
I will try again later and let ya know

 

[Dennis Oppelt]

Ha

IT worked

I did not let the DNS propogate fully