I have several users who are encountering messages about secure connections to the server when trying to access my website.
We've had this on Mac (iphone, ipad and macbook w/ safari) & Windows (IE and Chrome).
This is happening on multiple ISPs in different towns.
The website address is a subdomain and does not have an SSL certificate installed - it isn't being accessed via
https://
.The main domain does have an ssl certificate (not wildcard), and is showing no errors when checking.
I'm having trouble tracking down what the hell is happening. I suspect it's gotta be on our end with that number of people from different browsers / devices. I'm not even sure what question to ask next or how to isolate the issue. I'm also not able to duplicate the issue locally, which doesn't help.
How can I troubleshoot this??
Edit:
Here's a screenshot from the iphone user. I didn't include it earlier as I didn't think it told anything useful.
Strict-Transport-Security
being sent from your primary SSL domain with theincludeSubDomains
option? This would force compliant clients to connect to your subdomain over https even if they try connecting to http