I am having trouble verifying my domain with openssl, when i run: openssl s_client -connect www.griffen.io:443 -CAfile /etc/ssl/certs/ca-certificates.crt I get the following errors: depth=0 CN = www.griffen.io verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 CN =…

You’ll have to refer to fullchain.pem in your webserver configuration, in stead of cert.pem.

Then you should reload your webserver, because it’s not showing: --- Certificate chain 0 s:/CN=www.griffen.io i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X1 --- See also: https://www.ssllabs.com/ssltest/analyze.html?d=griffen.io&hideResults=on&latest (“Chain issues: Incomplete”) Or you…

Odd, It should have the full chain, because I never pointed it towards just cert.pem. I’m running a custom server so I’ll take a look at its documentation to see what it needs.

Cannot verify domain with openssl

Server

Topic		Replies	Views
Curl fails to validate ceriticate presented by openssl server (with fullchain.pem) Help	4	117	April 20, 2025
Unable to verify fullchain.pem Help	11	4818	December 29, 2020
Unable to get local issuer certificate and unable to verify the first certificate Help	11	298	May 16, 2025
"unable to verfify the first certificate" - cert chain broken, but using fullchain.pem Help	3	3664	September 25, 2021
Unable to get local issuer certificate Help	5	3564	February 19, 2020

Cannot verify domain with openssl

Related topics