# Can't validate cert in Zimbra **URL:** \ **Category:** Help\ **Created:** [December 16, 2021, 11:37pm UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847 "2021-12-16T23:37:07Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![jppo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jppo/32/56620_2.png) [@jppo](https://community.letsencrypt.org/u/jppo)\ **Post date:** [December 16, 2021, 11:37pm UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847/1 "2021-12-16T23:37:07Z")
My domain is: [mail.jppozzi.dyndns.org](http://mail.jppozzi.dyndns.org) I ran this command (Zimbra specific) : zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem It produced this output: \*\*\* Verifying 'cert.pem' against 'privkey.pem'\* _Certificate 'cert.pem' and private key 'privkey.pem' match._ \*\*\* Verifying 'cert.pem' against 'chain.pem'\* _ERROR: Unable to validate certificate chain: C = US, O = Internet Security Research Group, CN = ISRG Root X1_ _error 2 at 2 depth lookup: unable to get issuer certificate_ _error cert.pem: verification failed_ My web server is (include version): It is not a single webserver it is a Zimbra installation up to date and the cert is used for many connections. The operating system my web server runs on is : Ubuntu 16.04 I can login to a root shell on my machine (yes or no, or I don't know): YES I'm using a control panel to manage my site (no, or provide the name and version of the control panel): NO The version of my client is : certbot 0.31.0 It is not the first time I renew a certificate, my cert in the number 15 in the /etc/letsencrypt/archive : -rw-r--r-- 1 root root 1704 déc. 12 12:37 privkey15.pem -rw-r--r-- 1 root root 5616 déc. 12 12:37 fullchain15.pem -rw-r--r-- 1 root root 3750 déc. 12 12:37 chain15.pem -rw-r--r-- 1 root root 1866 déc. 12 12:37 cert15.pem I have some other certificates renewed on november 11 with no problem, they are used with an apache server. I try many times with no success .... Regards JPPO ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [December 17, 2021, 3:12am UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847/2 "2021-12-17T03:12:35Z")
Please update `ca-certificates` `apt update && apt install ca-certificates` ---
**Author:** ![jppo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jppo/32/56620_2.png) [@jppo](https://community.letsencrypt.org/u/jppo)\ **Post date:** [December 19, 2021, 11:10am UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847/3 "2021-12-19T11:10:52Z")
Hello, I have done it with no success, I,even, copy all certificates from another machine with no success. Could it be a problem with the SSL libs or something like ? Regards JP Pozzi ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [December 19, 2021, 6:35pm UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847/4 "2021-12-19T18:35:52Z")
Have a look at their recommendation: [Installing a LetsEncrypt SSL Certificate - Zimbra :: Tech Center](https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate) ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [January 18, 2022, 6:36pm UTC](https://community.letsencrypt.org/t/cant-validate-cert-in-zimbra/167847/5 "2022-01-18T18:36:12Z")
Closed on January 18, 2022, 6:36pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.