Heroku Custom Domain ACM SSL + GoDaddy - not secure

[thegreekcuban]

Hi,

I am having an issue with my ssl certs. My domain, agavepv.com is on the GoDaddy registrar and my site is hosted on Heroku. I have paid dynos and Automated Certificate Management on Heroku.

My custom domains on heroku are www.agavepv.com and agavepv.com

My DNS setting on GoDaddy is CNAME, WWW and it points to immense-mullberry-lq60rwg6xrhb0odbnaw2idyi.herokudns.com

When I type https://www.agavepv.com OR agavepv.com in the browser I get the lock and the site is secure. However, when I type in www.agavepv.com the site is not secure.

What am I doing wrong?

I also have a more detailed version of this question with pictures at this address: https://serverfault.com/questions/1000006/when-i-type-www-agavepv-com-into-the-browser-why-does-it-s...

Please help!

[Nate · Accepted solution]

The SSL certificate looks good but the server would need to be configured to redirect non-secure traffic to be secure.

https://help.heroku.com/J2R1S4T8/can-heroku-force-an-application-to-use-ssl-tls