Free SSL certificate not matching / installing

Using infinityfree’s free SSL, I submitted for a private key and then to generate a certificate. I tried the steps 3 times following the online instructions.
Each time, when I enter the certificate and submit it, the result says the certificate does not match the key, but they both came from the same steps using the infinity dashboard.

Sorry if that is not enough info, but any help would be greatly appreciated.
Thanks

Hello, SSL may still not work. Please read the pinned topic before creating a new one.
Thanks.

EDIT: It should work now, just to double check, you are following these instructions correct?

This YouTube Video can also help a lot:

2 Likes

Hi Thanks for the reply and sorry I missed the pinned topic.
Thanks for the video, I viewed it and I believe I am doing all the same steps, with the exception that I am applying for the certificate for the main domain for shakeyap.epizy.com
I request the SSL, and get the private key. I hit upload for the private key and then hit generate Certificate Request. I added the CNAME that was provided, and then submit the Certificate on the SSL section and it always says “The certificate you have entered does not match the current private key.”

You need to wait some time after installing the certificate

Hi - To confirm, do you mean wait some time even if it says “The certificate you have entered does not match the current private key.” ?
I left it with that result last night, and there was no difference this morning, that I could determine.

1 Like

@OverloadedTech, you only wait if not given an error message.

@alanshakeyprice, hold on, let me take a look

1 Like

Ok, request a new free certificate and try it

@alanshakeyprice, can you make sure the CNAME checks are at “Ready”? and that you copied everything in the private key and certificate boxes, including the —START— and —END— lines.
Thanks.

I have started the steps over again. On the page " View SSL certificate for shakeyap.epizy.com" it shows:
|Record Name|_0db0bb498857d70bee6db15961ca0xxx|
|Domain|shakeyap.epizy.com|
|Destination|A14281D8EE20D18FBDF82758C48C9273.A11E2F120863F82A13B15F9A9C7D6378.t065154800162143xxx.comodoca.com|
|Current Destination|(not found) Not Ready|

The Current Destination has the read box “not ready” - Is that what you refer to for the CNAME checks? On the CNAME entry page, there does not appear to be any status update.

I believe so, but could you take a screenshot? I believe that “Not Ready” means that the CNAME record had not updated yet (You just have to wait for that to happen)

The new certificate has also not arrived yet. I will wait to see if the “not ready” goes away at the same time the certificate appears.

And here shows the CNAME record already entered in the CNAME entry page:

Yea, just wait for the “Not Ready” to go away. Than the certificate should show. Also, I believe that LetsEncript is easier and has less issues than whatever one you are using (I forget what its called). You can just request a new certificate with LetsEncript on the SSL page.

1 Like

Thanks.
The SSL page updates and showed that the “Destination” was now “ready” (green) along with a long number in that entry. The certificate did not appear yet.
While waiting, I refreshed the page and not it says Destination is Not Ready again! (and still not certificate). So I will wait more…
I think the “Let’s Encrypt” was only available when entering a custom domain. I used the SubDomain option so I could enter the epizy.com, and it only allows “Get SSL” (or something like that).

OK - This is the 5th time I have tried.
The certificate appeared and all the status (read / not ready) is no longer visible on the SSL page.
I entered the full private key into the certificate generation page and made the Certificate Request, then I pasted in the provided Certificate and hit Upload Certificate. Again, the result is “The certificate you have entered does not match the current private key.”

That’s weird. Could you send a screenshot of that last error and maybe Admin will be able to help you out.

Ok, I think you did it wrong.

  1. Clear all three boxes in the control panel and refresh
  2. Copy the Private key in and click “Upload Key”
  3. LEAVE THE CSR BOX BLANK
  4. Copy the Certificate key and click “Upload certificate”
  5. Refresh and make sure it is still all there (if not, start over)
  6. Test your site on HTTPS
2 Likes