Cert Rejected: Certificate Transparency Log Mismatch
Chrome rejects an otherwise valid cert with NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED. The cert was issued but never logged to CT, or its SCTs are bad.
#SSL
Articles tagged with #SSL
HSTS Preload Stuck: Can't Roll Back HTTPS Even After Removal
You enabled HSTS preload then needed to roll back. Browsers still force HTTPS for years. Understand why, and what limited recovery actually exists.
SSL Cert Auto-Renewal Failed Silently, Site Now Untrusted
Certbot or platform renewal stopped months ago. You only noticed when the browser flashed NET::ERR_CERT_DATE_INVALID. Find why and restore the cron.
Custom Domain Works on Vercel But Not Firebase (2026)
Same domain works fine when bound to Vercel, fails when you try Firebase Hosting. Why Firebase has stricter requirements and how to fix.
Domain Points to the Wrong Hosting Provider
You changed hosts but DNS still resolves to the old provider. Where to look in the DNS chain to find where the wrong record lives.
Duplicate Domain Versions Indexed — http, https, www, non-www
Google has indexed all four versions of your site. Each version splits link equity. How to unify under one canonical.
HTTPS Not Forced — Site Serves on Both http and https
Your site responds on both http and https. Google indexes both versions and your security score is downgraded.
Name Server vs DNS Records — Where Do I Actually Change Things (2026)
Beginners confuse name servers (NS) and individual DNS records (A, CNAME). Changing one without understanding the other causes hours of debugging.
Old Deployment URL Appears in Search Instead of Custom Domain
Google indexes `your-app.vercel.app` or `your-site.web.app` instead of your custom domain. Why and how to fix.
Redirects Broken After Domain Change
You moved from old.com to new.com. Some pages redirect correctly, others return 404. How to map and verify a complete redirect set.
RSS / OG URLs Still Use Placeholder Domain
You shipped from a starter template but RSS feed entries and og:url still say `https://example.com/...`. Why these are silent SEO killers and how to fix.
Search Console Property Mismatch After New Domain
You moved domains but your old GSC property doesn't track the new one. How to migrate without losing historical data.
Site Opens Intermittently After Domain Connect
Sometimes the site loads, sometimes it shows a hosting platform error or DNS error. Common causes after binding a domain to a new platform.
Sitemap Still References Old Domain
After domain migration, sitemap.xml still lists URLs on the old domain. Search Console sees mismatched URLs.
SSL Mixed Content Warning in Browser
Site is on HTTPS but browser shows a "Not fully secure" warning. Caused by HTTP assets loaded on HTTPS pages.
TTL Too High Makes DNS Changes Slow
You changed DNS but it takes 24+ hours to propagate. Lowering TTL before changes makes propagation predictable.
www and non-www Both Open Separately
Visitors can reach both yourdomain.com and www.yourdomain.com. Both load. Why this hurts SEO and how to fix.
Deploying an Astro Site to Firebase Hosting
Step-by-step on deploying a static Astro site to Firebase Hosting, with the configuration that avoids the common pitfalls in 2026.
Connecting a custom domain to Firebase Hosting
Add a custom domain to Firebase Hosting with the exact DNS records, dig commands for verification, and the common failures explained.
Adding a custom domain on Vercel (and what waits to break)
Point a custom domain at Vercel with the exact DNS records, dig + curl verification, and Cloudflare-in-front configuration that does not break SSL.
SSL Certificate Not Issued After Custom Domain Setup
You bound a custom domain on Vercel / Firebase / Netlify but SSL stays "pending."
What an SSL Certificate Actually Is (and Why You Don't Need to Buy One)
Free SSL is the 2026 default. Use these Caddyfile / Nginx / curl commands to verify your cert, set auto-renew, and avoid paid CA upsells.