Suddenly getting SSL Security Warning

I've been meaning to ask: Does it mean anything that I don't get this error when I login into the admin area that is also set to SSL?

No. There's no back-and-forth mode switching to cause any of that on the admin side.

Does this sound right?

"Yes, if you buy your own SSL , this issue will go away. The Shared SSL is setup using Apache mod_userdir and this is the default behavior. This is an ALTERNATE URL that every client on the server can use as https://server.nocdirect.com/~cPanel_username/

If your script is dependent on the Apache request variables then you should get your own SSL certificate."

I certainly do not know what they mean with that Alternate URL cuz if that was supposed to be a substitute that would work instead of buying one, it did not work.

At this point I would just like to know if what they are saying makes sense, that if I buy one it should really fix the problem??

Well, if they can't make their shared cert work anymore, then yes you'll need to get a dedicated cert.

Again, be mindful that it did work before they changed something (or told you to change something).

And, lotsa people can use shared certificates just fine without any of that problem.

Granted, we do really recommend using a dedicate cert for a multitude of reasons, including simpler security, less complications from bizarre shared-cert setups, easier matching of sessions/cookies because dedicated cert name matches the main domain name, thus making communications more reliable, better browser compatibility, and so on. Plus, it's seldom necessary to spend more than maybe thirty dollars for a simple certificate that does the job just fine.

I'm just afraid I will buy one and still have the problem, in which case I am going to be seriously unhappy.

Ok, I'll go order the cert now, wish me luck!

You will not believe the ending to this story. I cannot purchase an SSL cert for this domain because I already have one on my main domain. Only one unique IP per account (and yes, they knew that the whole time they were emailing with me).

Isn't that lovely!

So, the ball's back in their court to properly configure the server so that it can work happily.
The link I posted earlier gives suggestions of what they can do in their SSL vhost configuration to send at least one of the expected headers. Easiest would be "HTTPS", but any of the others in the ssltest.php script would suffice.

I really do not think they are going to fix anything. They have pretty much told me that I need the cert. So my only choice is to move this to its own account (which really makes me mad cuz I pay for a semi-dedicated server already).

They ran the ssl test but to them the output either didnt mean anything or their interpretation was that it was a zencart problem or that I need to purchase a cert. Period.

So ... ask them ... why did it work fine a couple weeks ago and yet it doesn't work fine now, despite the Zen Cart software hasn't changed?

I have asked that so many time but nobody has answered (I agree, that is the huge question that needs answered). I think they do not believe me that it was working and honestly, I have no way to prove to them that it was except my word.

Today I got a note from support that MIGHT indicate that whoever told me I could not get a cert for that domain was wrong. I'm holding my breath waiting for the reply back on that.

Problem solved, finally.

Good thing I kept complaining because I finally got ahold of a tech who said that Yes, we can install a Cert on your domain. Lots of mistakes and lots of time later, they got it installed correctly and to the best I can see, it is all working properly now.

Thank you DrByte, not only were you a huge help technically, you were a great source of moral support at a time when I really needed that. Certainly you went way above and beyond to help me and I really appreciate that.

Yay! Glad they have at least one person who has a clue. Keep that tech's name ... you'll likely need them again!