# Help me, please! My site is still insecure because I don't have a valid certificate on my server **URL:** \ **Category:** Hosting Support\ **Created:** [June 28, 2023, 7:53pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257 "2023-06-28T19:53:52Z")\ **Posts on this page:** 18\ **Page:** 2
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [June 30, 2023, 8:30am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/21 "2023-06-30T08:30:07Z")
The SSL certificate has been successfully! Okay, I will go to Cloudflare’s website and use the “Always Use HTTPS” option to force visitors to HTTPS and also set the SSL option to “Full (Strict)” as you had mentioned I should do. I had to pause my website on Cloudflare while I was trying to get all these things done to ensure my website was secured. After I’m done, I will set it back on to “Enable Cloudflare on Site.” ![SSL Certificate is installed!](https://forum-cdn.infinityfree.net/original/3X/2/e/2ed38bd4e585fc64f9c68fb10f67f334c620cb63.jpeg) ---
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [June 30, 2023, 8:30am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/22 "2023-06-30T08:30:56Z")
> [@DCRamsey](#): > > I had to pause my website on Cloudflare while I was trying to get all these things done to ensure my website was secured. Oh, that’s why I thought your proxy was turned off on your DNS settings! Well, after you’ve done so, re-enable Cloudflare and wait some time! ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [June 30, 2023, 8:33am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/23 "2023-06-30T08:33:02Z")
Yeah, They told me to pause it while I was trying to get it secured. I’m sorry, I should have brought that up you and Frank419. ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 3:36am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/24 "2023-07-01T03:36:14Z")
Do I need to turn the proxy on for the last two records? For the last two records, the Proxy status is set to “DNS only.” Will I need to change the setting for both to “Proxied?” Also, I want to mention that “Automatic HTTPS Rewrites”, “Always use HTTPS”, and Brotli is ON. ![Do I need to turn the proxy on for the last two records.](https://forum-cdn.infinityfree.net/original/3X/a/f/af18c417c4b322f175fe0df70e32391bd0006529.jpeg) ![Automatic HTTPS Rewrites is ON.](https://forum-cdn.infinityfree.net/original/3X/9/b/9b3373b3cc84b6ced4146f21b6b15376273d5548.jpeg) ![Always Use HTTPS is ON.](https://forum-cdn.infinityfree.net/original/3X/b/2/b2e5f874b241cf2e4357d07607dda02c3d2fd6b3.jpeg) ![Brotli is ON.](https://forum-cdn.infinityfree.net/original/3X/6/f/6f93be11d066c5ce758e1c26fd1fd3233b5c1276.jpeg) ---
**Author:** ![Meishin](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/meishin/32/59902_2.png) [@Meishin](https://forum.infinityfree.com/u/Meishin)\ **Post date:** [July 1, 2023, 3:42am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/25 "2023-07-01T03:42:51Z")
> [@DCRamsey](#): > > “Automatic HTTPS Rewrites”, “Always use HTTPS”, and Brotli is ON. It is good and your site is using https smooothly.Good job! > [@DCRamsey](#): > > Do I need to turn the proxy on for the last two records? You decide whether to change the proxy status for that CNAME record.Both would work. For the MX record,as it was shown in the picture,there isn’t even a button.(And since you are using formspree for emails,this record doesn’t really matter.) ---
**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\ **Post date:** [July 1, 2023, 3:49am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/26 "2023-07-01T03:49:45Z")
> [@DCRamsey](#): > > Do I need to turn the proxy on for the last two records? No need > [@DCRamsey](#): > > “Automatic HTTPS Rewrites” Not advisable ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 3:57am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/27 "2023-07-01T03:57:08Z")
Encryption mode has been set to Full Strict, and Cloudflare has been enabled on website. ![Encryption mode has been set to Full Strict.](https://forum-cdn.infinityfree.net/original/3X/2/4/246422e9164193d901e795cbb1a9a8c51829a34b.jpeg) ![Cloudflare has been enabled on website.](https://forum-cdn.infinityfree.net/original/3X/9/2/92ee0c91a80b6c104d2c2aa4f3f299cc8cd2abea.jpeg) ---
**Author:** ![Admin](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/admin/32/36437_2.png) [@Admin](https://forum.infinityfree.com/u/Admin)\ **Post date:** [July 1, 2023, 9:51am UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/28 "2023-07-01T09:51:09Z")
> [@DCRamsey](#): > > Do I need to turn the proxy on for the last two records? As you can see, it’s not possible to enable the proxy on the MX record. Also, the MX record is invalid. It points to our old mail server (which doesn’t exist anymore), and it points to a record with the Cloudflare proxy enabled, which would prefer email from coming through even if the email server were up. The same is true for the ftp record. So of the records shown there, please delete the first, second, and last records. Everything else is fine. Do not enable the proxy on the CNAME record. You’ll see in the client area it specifically says to not enable them. If you enable it anyways, the CNAME record will not be detected and will not work. > [@DCRamsey](#): > > Also, I want to mention that “Automatic HTTPS Rewrites”, “Always use HTTPS”, and Brotli is ON. Please do not use Automatic HTTPS Rewrites. All it does is hide configuration problems, and can cause very weird behavior. ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 3:22pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/29 "2023-07-01T15:22:29Z")
Okay. I will not use that. I will delete the first, second, and last records. And will not turn proxy on the CNAME record. Is there anything else I should do? ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 8:57pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/30 "2023-07-01T20:57:51Z")
I’ve deleted the first, second, and last DNS records. These are the three DNS records that I’m left with. The proxy was NOT turned on the CNAME record. “Automatic HTTPS Rewrites” has been turned OFF. See images below. Is there anything else I must do to ensure the safety and security of my website? ![The three DNS records I now have.](https://forum-cdn.infinityfree.net/original/3X/3/d/3d92ef89d267dc999f7eff6aa012b7b58a9f9908.jpeg) ![Automatic HTTPS Rewrites is OFF.](https://forum-cdn.infinityfree.net/original/3X/a/e/aeca24fd8ed28515efe6eba8c5ea40c6537fcc74.jpeg) ---
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [July 1, 2023, 9:12pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/31 "2023-07-01T21:12:41Z")
There is nothing else you need to do for now. Anyway, the certificate you installed on the hosting account will expire in 89/90 days after its release, so you don’t have to renew it until you get an expiration warning (30 days before its expiration), then you’ll have to renew it by doing the exact same steps you did before except for adding the DNS record, pausing and resuming Cloudflare and setting the options as we told you to do. ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 9:18pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/32 "2023-07-01T21:18:25Z")
Okay. Thank you! To summarize, the main problem with my website was that the free SSL Certificate was never issued. It was still being held in draft by Let’s Encrypt. Am I correct or is there more to it than just that? ---
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [July 1, 2023, 9:21pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/33 "2023-07-01T21:21:39Z")
You never checked the records status when it was on draft until you checked it when I told you to get a self-signed SSL certificate from the same page of the Let’s Encrypt certificate you were getting before that. ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 9:30pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/34 "2023-07-01T21:30:52Z")
I did checked it before and told you and Frank419 that it was still in draft. You may not remember but I did informed you two that it was still in draft. Anyhow, it now shows that the free SSL Certificate has been issued. See image below. ![SSL Certificate status shows it has been issued.](https://forum-cdn.infinityfree.net/original/3X/a/2/a2524287a9a8fa8f2b73056eb16cb34c76047a3d.jpeg) ---
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [July 1, 2023, 9:34pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/35 "2023-07-01T21:34:25Z")
Oh. And now that is issued and you installed it there is nothing to do, at least for until you get the expiral notification on your email! ---
**Author:** ![DCRamsey](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dcramsey/32/36304_2.png) [@DCRamsey](https://forum.infinityfree.com/u/DCRamsey)\ **Post date:** [July 1, 2023, 9:38pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/36 "2023-07-01T21:38:23Z")
I want to thank you, Frank419, and the Admin (Owner of InfinityFree) for all the help you have given me. ---
**Author:** ![anon90933456](https://forum.infinityfree.com/letter_avatar/anon90933456/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon90933456](https://forum.infinityfree.com/u/anon90933456)\ **Post date:** [July 1, 2023, 9:38pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/37 "2023-07-01T21:38:55Z")
You’re welcome, I’m always glad to help you whenever you need it! ---
**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\ **Post date:** [July 8, 2023, 9:39pm UTC](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257/38 "2023-07-08T21:39:21Z")
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed. [Previous page](https://forum.infinityfree.com/t/help-me-please-my-site-is-still-insecure-because-i-dont-have-a-valid-certificate-on-my-server/78257.md?page=1)