SECURITY FINDING
SSL certificate hostname mismatch
What it is
The certificate installed doesn't cover this exact domain. Browsers show a 'your connection is not private' warning before visitors can reach the site, exactly like an expired certificate would.
How to fix it
Install a certificate that explicitly covers this domain (and www., if used).
In depth
Your website's security certificate doesn't match your actual domain name, which is like having a lock that doesn't fit your door. When people try to visit your site, their browser displays a big warning saying the connection isn't safe, which scares away visitors and damages your credibility. This happens because the certificate you installed covers a different domain name than the one people are actually using to reach you. To fix this, you need to install a new SSL certificate that specifically includes your exact domain name, and if people use the www version of your site, that needs to be covered too. You can contact your web hosting company or a certificate provider to install the correct certificate for your domain, and this usually costs between free and fifty dollars depending on your provider. Once the correct certificate is installed, the warning disappears and your visitors will see a padlock icon indicating a secure connection.
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.