Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
clanmills.com
I would like to use the subdomain familytree.clanmills.com
I ran this command:
503 rmills@rmillsm4:~/clanmills $ curl --verbose https://familytree.clanmills.com
* Host familytree.clanmills.com:443 was resolved.
* IPv6: (none)
* IPv4: 147.93.86.33
* Trying 147.93.86.33:443...
* Connected to familytree.clanmills.com (147.93.86.33) port 443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/ssl/cert.pem
* CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* (304) (IN), TLS handshake, Unknown (8):
* (304) (IN), TLS handshake, Certificate (11):
* (304) (IN), TLS handshake, CERT verify (15):
* (304) (IN), TLS handshake, Finished (20):
* (304) (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
* subject: CN=clanmills.com
* start date: Oct 5 12:06:51 2025 GMT
* expire date: Jan 3 12:06:50 2026 GMT
* subjectAltName does not match host name familytree.clanmills.com
* SSL: no alternative certificate subject name matches target host name 'familytree.clanmills.com'
* Closing connection
curl: (60) SSL: no alternative certificate subject name matches target host name 'familytree.clanmills.com'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
My certificates are:
504 rmills@rmillsm4:~/clanmills $ ssh root@clanmills.com 'certbot certificates'
Found the following certs:
Certificate Name: clanmills.co.uk-0001
Serial Number: 619bc4c9ab66e0794674a96dcdd55146df1
Key Type: ECDSA
Domains: clanmills.co.uk
Expiry Date: 2025-11-23 11:03:36+00:00 (VALID: 48 days)
Certificate Path: /etc/letsencrypt/live/clanmills.co.uk-0001/fullchain.pem
Private Key Path: /etc/letsencrypt/live/clanmills.co.uk-0001/privkey.pem
Certificate Name: clanmills.co.uk-0002
Serial Number: 619bc4c9ab66e0794674a96dcdd55146df1
Key Type: ECDSA
Domains: clanmills.co.uk
Expiry Date: 2025-11-23 11:03:36+00:00 (VALID: 48 days)
Certificate Path: /etc/letsencrypt/live/clanmills.co.uk-0002/fullchain.pem
Private Key Path: /etc/letsencrypt/live/clanmills.co.uk-0002/privkey.pem
Certificate Name: clanmills.com
Serial Number: 53d160eb657cd3f7fe9470bdc74b104672a
Key Type: ECDSA
Domains: clanmills.com clanmills.co.uk www.clanmills.co.uk www.clanmills.com
Expiry Date: 2026-01-03 12:06:50+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/clanmills.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/clanmills.com/privkey.pem
Certificate Name: familytree.clanmills.co.uk
Serial Number: 6856644980a44b9b34790c464dd70068b85
Key Type: ECDSA
Domains: familytree.clanmills.co.uk
Expiry Date: 2026-01-03 13:30:26+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/familytree.clanmills.co.uk/fullchain.pem
Private Key Path: /etc/letsencrypt/live/familytree.clanmills.co.uk/privkey.pem
Certificate Name: familytree.clanmills.com-0001
Serial Number: 6703624f97eef184df013a4032dd58f2cf8
Key Type: ECDSA
Domains: familytree.clanmills.com
Expiry Date: 2026-01-03 13:32:25+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/familytree.clanmills.com-0001/fullchain.pem
Private Key Path: /etc/letsencrypt/live/familytree.clanmills.com-0001/privkey.pem
Certificate Name: familytree.clanmills.com
Serial Number: 669fd0afaffcb0a11344f15407089bdd1d5
Key Type: ECDSA
Domains: familytree.clanmills.com familytree.clanmills.co.uk
Expiry Date: 2026-01-03 13:28:56+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/familytree.clanmills.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/familytree.clanmills.com/privkey.pem
505 rmills@rmillsm4:~/clanmills $
My web server is (include version):
506 rmills@rmillsm4:~/clanmills $ ssh root@clanmills.com 'apachectl status'
Apache Server Status for localhost (via ::1)
Server Version: Apache/2.4.58 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.13
Server MPM: event
Server Built: 2025-08-11T11:10:09
__________________________________________________________________
Current Time: Sunday, 05-Oct-2025 16:38:12 BST
Restart Time: Sunday, 05-Oct-2025 16:00:40 BST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 37 minutes 31 seconds
Server load: 0.02 0.02 0.00
Total accesses: 653 - Total Traffic: 228.3 MB - Total Duration: 5010
CPU Usage: u.82 s.75 cu0 cs0 - .0697% CPU load
.29 requests/sec - 103.9 kB/second - 358.0 kB/request - 7.67228
ms/request
1 requests currently being processed, 0 workers gracefully restarting,
49 idle workers
Slot PID Stopping Connections Threads Async connections
total accepting busy graceful idle writing keep-alive closing
0 1640 no 0 yes 1 0 24 0 0 0
1 1641 no 0 yes 0 0 25 0 0 0
Sum 2 0 0 1 0 49 0 0 0
W_________________..............
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process
'www-browser -dump http://localhost:80/server-status' failed.
Maybe you need to install a package providing www-browser or you
need to adjust the APACHE_LYNX variable in /etc/apache2/envvars
The operating system my web server runs on is (include version):
505 rmills@rmillsm4:~/clanmills $ ssh root@clanmills.com 'uname -a'
Linux clanmills.co.uk 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
My hosting provider, if applicable, is:
It's a VPS hosted by hostinger.com
I can login to a root shell on my machine (yes or no, or I don't know):
Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No. I use the terminal via ssh.
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):
507 rmills@rmillsm4:~/clanmills $ ssh root@clanmills.com 'certbot --version'
certbot 2.9.0
508 rmills@rmillsm4:~/clanmills $
You have a number of overlapping certificates. We should delete the ones you don't use.
