# Por que o Apple Touch Icon é carregado via HTTP em vez de HTTPS?

**URL:** https://meta.discourse.org/t/why-is-the-apple-touch-icon-loaded-via-http-instead-of-https/104501
**Category:** Support
**Created:** [17 Dezembro , 2018 21:53 UTC](https://meta.discourse.org/t/why-is-the-apple-touch-icon-loaded-via-http-instead-of-https/104501 "2018-12-17T21:53:15Z")
**Posts on this page:** 1
**Showing post:** 10

<div class="post-metadata">

### Author: ![Graphiwiz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/graphiwiz/32/126393_2.png) [@Graphiwiz](https://meta.discourse.org/u/Graphiwiz)
#### Post date: [18 Dezembro , 2018 02:25 UTC](https://meta.discourse.org/t/why-is-the-apple-touch-icon-loaded-via-http-instead-of-https/104501/10 "2018-12-18T02:25:26Z")

</div>

> [@simon](#):
>
> Yes, you can disable the ‘force https’ setting by unchecking the setting. If for some reason enabling the setting locks you out of your site, you can disable it through the rails console with:

After forcing https, it seems to be working now, I get no errors but there seems to be an issue for the security certificate though.

I get this in Firefox only when accessing [https://WWW.community.mysite.com](https://WWW.community.mysite.com):

`The certificate is only valid for community.mysite.com. Error code: SSL_ERROR_BAD_CERT_DOMAIN`

Note that the following work perfectly (ALL redirect to [https://community.mysite.com](https://community.mysite.com), except [https://www](https://www) in FF):

- [https://community.mysite.com](https://community.mysite.com)
- [www.community.mysite.com](http://www.community.mysite.com)
- [community.mysite.com](http://community.mysite.com)
- [http://community.mysite.com](http://community.mysite.com)
- [http://www.community.mysite.com](http://www.community.mysite.com)

Although [https://WWW.community.mysite.com](https://WWW.community.mysite.com) also redirects to [https://community.mysite.com](https://community.mysite.com) in Chrome and it works as expected, Firefox does **not** redirect and instead shows that error and blocks the site.

I configured my `app.yml` file using this guide: [Set up Let’s Encrypt with multiple domains / redirects](https://meta.discourse.org/t/setting-up-let-s-encrypt-with-multiple-domains/56685) and added a redirect from www to the non-www version following this guide: [(Superseded) Redirect additional domain(s) to your Discourse instance](https://meta.discourse.org/t/redirect-single-multiple-domain-s-to-your-discourse-instance/18492)

---

_[View the full topic](https://meta.discourse.org/t/why-is-the-apple-touch-icon-loaded-via-http-instead-of-https/104501)._