Ssl Certificate

I purchased an SSL certificate from my service provider on Saturday, and they indicated it would take a few hours for it to populate worldwide and remove the "Not Secure" text next to my URL. "Not Secure is still visible. I contacted them and they sent several responses. Here they are:

Hello,
There is an installed certificate on the domain you can see it here: https://www.sslshopper.com/ssl-checker.html?hostname=roughstockphotography.com
The certificate will expire in 365 days.
The domain is loading over https from my end: https://www.roughstockphotography.com/
It may take several hours for the new Shared IP for SSL (? record) worldwide propagation for the site to become accessible over it and to become loading the domain from it over https.

Best Regards,
Stanley Fisher

ME: Yes, when I enter https//www.roughstockphotography.com the "Not Secure" text does not appear, however when I enter the basic www.roughstockphotography.com it does appear. All of my business cards, email signature line contact info, website, etc. lists www.roughstockphotography.com. It is my impression that buying the SSL would somehow re-direct anyone typing in the old url to the new url that starts with https. When I go to SSL Shopper to verify that my certificate was installed I see these comments:
1. roughstockphotography.com resolves to, and it gives me an ip address.
2. Server Type: Apache
3. The certificate should be trusted by all major web browsers
4. The certificate was issued by Sectigo
5. The certificate will expire in 364 days
6. The hostname (roughstockphotography.com) is correctly listed in the certificate.

ME: All of the above have a green check mark next to them.

I contacted my isp again stating the Not Secure text is still there and they replied:

Hello,
The site is loading from my end over https. If you want to load only on https you should contact your developer to update the link from http to https.
You can redirect traffic from http to https for a domain on which there is already an installed certificate by settings these rules at the top of a .htaccess file in the domain folder:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Best Regards,
Stanley Fisher

ME: I have no idea what they are talking about, and obviously don't know how to do what they suggest.

Can you tell me how to get this accomplished. I am sure I am losing orders when customers see "Not Secure" text by my url.

Thank you for looking into this.

Edited by

See this:
https://www.picturespro.com/sytist-manual/installation/forcing-site-to-use-ssl-https/

Edited by

Tim, when I make your changes and try to save I get a 500 Server error and cannot move on to your last suggested change.
This is the error msg:
The server encountered an internal error and was unable to complete your request.

Error message:
/services/users/zstorage12p2/roughstk/www/roughstockphotography.com/.htaccess: RewriteCond: bad argument line '%{SERVER_PORT}80'

And my website is now down.

Edited Mon Jun 10, 19 1:09 PM by Reed Settle

You probably made a mistake in editing that file. You will need to go into the file manager in your hosting control panel to edit that file now.

The file name is .htaccess

Remove the code in there now and add this:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

If that doesn't work, try this:

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.roughstockphotography.com/$1 [R,L]

Edited by

Tim, That worked. Thanks.

Now I need to insert the Positive SSL Trust logo. They gave me the code to add and say insert it before the Body tag on my site. Can you direct me to the right place to do this?

Edited Tue Jun 11, 19 2:04 PM by Reed Settle

If it is javascript code (<script> tags), add it to Design -> Header & Footer in the HEAD code tab.

Edited by