Help needed – “Deceptive site” warning after installing 2 SSL certificates Post:

[huycola]

Hi everyone,

I accidentally installed two SSL certificates (Let’s Encrypt and a custom one) on my website hosted on InfinityFree. After that, my site started showing a “Deceptive site ahead” warning in the browser.

I’ve already removed one of the certificates and kept only the Let’s Encrypt SSL. However, the warning still appears.

Can someone please guide me on what steps I should take next to fix this and make my site safe to access again? Do I need to clear cache, force HTTPS, or contact Google for a review?

I’d really appreciate any help. Thank you in advance!

[Greenreader9]

It’s not possible to install multiple certificates, if you add a new one the previous one gets deleted.

Also,

Why Do I See a "Deceptive Site Ahead" Warning on My Website?

If you’re trying to access your website and encounter a bright red warning page that looks something like this: Deceptive site ahead Firefox blocked this page because it may trick you into doing something dangerous like installing software or revealing personal information such as passwords or credit cards. Advisory provided by Google Safe Browsing. Don’t worry - you’re not alone. This article will explain what this warning means, why it appears, and what steps you can take to fix it. What…

[huycola]

So why does SSL Labs still show two certificates installed? Is there any way to fix this, or do I just have to wait for it to refresh?

[Admin]

Every SSL connection always uses only one SSL certificate. It is technically impossible to use multiple SSL certificates.

I don’t know what you see at SSL Labs that makes you suspect differently, but I think you misunderstand what you see there.

The most likely confusion that comes to mind is the CA chain. Every SSL certificate includes a reference to the certificate from the SSL provider that issued the certificate. That certificate may also be seen by SSL Labs. That’s not having “multiple SSL certificates”, that’s just providing visitors with the information needed to validate your domain’s certificate against the certificate store of their device, which is necessary to be able to trust the certificate.