title: Http2 and SSL enabled
link: http://jj.isgeek.net/2017/06/http2-and-ssl-enabled/
author: Jj
description: 
post_id: 1121
date: 2017/06/18 03:00:46
created_gmt: 2017/06/18 08:00:46
comment_status: open
slug: http2-and-ssl-enabled

I'm hosting this on Linode running Ubuntu and Nginx and I followed this tutorial at [Digital Ocean](https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04) which was damn simple to go through. 

[Letsencrypt](https://letsencrypt.org/) is making things super easy to get SSL everywhere. 

After finishing the setup (15m later) I found that the domain `jj.isgeek.net` had the "Unsecure" icon on the URL bar. Turns out that some resources (the Stackoverflow widget) were being fetched from HTTP, so I just edited those to use their HTTPS coutnerparts (thankfully available) and I got the green padlock :) 

When first installing it I forgot to add both domains to the initial `certbot` command. I had to use the `\--expand` argument in the same command to add the extra domain. 

Also, note [this bug about using underscore in subdomains](https://github.com/letsencrypt/boulder/issues/1225#issuecomment-175963980). **You won't be able to use Letsencrypt if your subdomain contains an underscore**!