thanks. I had finally spotted the bit at the bottom being a duplicate; removed it and ssl works now. I will look into the advice given here on how to fix the redirect errors. Lastly, however, and one really important to me is... the http connection is not automatically being directed to https -- I really need to figure this bit out.