After renew, cert fails in some os/browsers

nielsrobin · September 30, 2021, 12:47pm

I'm using CertBot (1.9.0) to auto-renew my certificates.

It seems to work fine and from my Win10 I get a valid certificate in Chrome.

However, from a MAC in Chrome is shows:
NET::ERR_CERT_DATE_INVALID

The really weird thing is the error says: ERR_CERT_DATE_INVALID, but in the screenshot you can see it doesn't expire until 22 Dec 2021, so it should be valid.

Any Idea what might be causing this? Iphone Safari seems to have issues aswell.

webprofusion · September 30, 2021, 12:57pm

Scan result: https://decoder.link/sslchecker/www.trollbeadspartner.com/443

Your SSL configuration is not using the full chain and is only sending your certificate, with no intermediates. Update your webserver config to point to fullchain.pem instead. So if it was Apache then something like

SSLCertificateFile /etc/letsencrypt/live/www.trollbeadspartner.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.trollbeadspartner.com/privkey.pem

nielsrobin · September 30, 2021, 1:01pm

Dude, you're awesome! Thanks!

system · October 30, 2021, 1:01pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.