: How can I remove the security/malicious user warning from my website? I have a domain name tradespring.net, and www.tradespring.net that redirect to my Heroku app with a CNAME record. However

@Kevin317

Check your .htaccess file for a http to https redirect and remove it.

Since your website does not handle sensitive information, you need not waste money on an SSL certificate.
is used only when there is a valid SSL certificate installed on the server. An error will be thrown if the certificate is missing.

Vote Up Vote Down

@Goswami781

I don't think i need an SSL certificate because this site is not sending sensitive info (credit card info, etc.).


So then why is your app 301 redirecting HTTP to the HTTPS site? Don't do that and you won't get the certificate warning.

Have you followed these directions?

Vote Up Vote Down

@Angela700

You'll need to get your own SSL

"This warning is presented by a web browser when accessing a website that has a security certificate installed (for data encryption) that was issued to a domain other than the one being accessed."
www.digicert.com/ssl-support/certificate-name-mismatch-error.htm
In Chrome it tells me

"Google Chrome can say for sure that you reached *.herokuapp.com, but cannot verify that that is the same site as tradespring.net which you intended to reach. If you proceed, Chrome will not check for any further name mismatches."

Vote Up Vote Down