Does SSL work with and without www?

What is the question about?

Your website can be reached in two ways. One is example.com. The other is www.example.com. To a browser, these are two different names. An SSL certificate is a digital ID card that lists the names it protects. If your visitor types a name that is not on the card, the browser shows a warning.

Which certificates cover both?

• Many single-domain certificates. A lot of sellers add the www or non-www version for free. Check your order.
• Free AutoSSL and Let's Encrypt. These usually cover both when the www name is set up correctly.
• Wildcard certificates. These cover subdomains such as www.example.com, but the plain example.com must also be listed. Most sellers include it.

A subdomain is a name added in front of your domain, such as www or blog.

Steps to check

1. Open a new browser window.
2. Type https://example.com with your own domain. Check for the padlock.
3. Now type https://www.example.com. Check again.
4. If one of them shows a warning, click the warning and view the certificate. Read the list of names.

Steps to fix

1. Log in to cPanel and open SSL/TLS Status.
2. Look at your domain. Both the plain and the www names should be listed.
3. If the www name is missing, click Run AutoSSL if your plan has it.
4. If you use a paid certificate, ask the seller to re-issue it with both names.
5. Check the DNS. DNS is the internet's phone book. Make sure a record exists for www, usually a CNAME pointing to your main domain.

Need help? Open a ticket at https://secure.hostvento.com/submitticket.php.

Quick recap

• www and non-www are two different names to a browser.
• The certificate must list both.
• Check both addresses with https://.
• Use AutoSSL or ask for a re-issue to add the missing name.
• Redirect one name to the other.