I'm using the cPanel Let's Encrypt plugin. Recently, renewed certificates started failing to be installed. From a bit of searching I gather this is related to the R3 certificate expiration. So I tried to reinstall using the alternate chains, but I get either the same error
Error re-installing ssl certificate on domain wordforge.net Certificate 2 is expired
(for default or DST Root CA X3)
There was a problem processing your request Error re-installing ssl certificate on domain wordforge.net The certificate could not be installed on the domain “wordforge.net”. Certificate bundle verification failed! Verification Result [ stdin: C = US, O = Let's Encrypt, CN = R3 error 20 at 0 depth lookup:unable to get local issuer certificate ]
for ISRG Root X1.
Attempting to install the certificates manually (cPanel>SSL/TLS>Generate, view, upload, or delete SSL certificates) results in the second error again. Appreciate the help here, I'm rather in over my head on this.
I ran this command: see above
It produced this output: see above
My web server is (include version): Apache/2.2.32 (Unix)
The operating system my web server runs on is (include version): CentOS 6.10 i686 virtuozzo
My hosting provider, if applicable, is: I don't know who the VPS provider is, but I have WHM access.
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): cPanel 56.0.52
The version of my client is (e.g. output of
certbot --version or
certbot-auto --version if you're using Certbot): Let's Encrypt Plugin version: 0.19.1