Can't validate on domain name the CSR code (ERROR: The CSR does not appear to be valid)

Help
42

Mar 1, what do you think please ?

43

It does seem that you got a certificate issued that covers both names, but the certificate is currently not set up on your server. I suspect that conflicts between Webmin and Certbot might be involved in this, but I donā€™t know much about how to manage these.

I would suggest making a definitive decision about whether you want to obtain your certificates with Webmin or with Certbot. After this, I would suggest

  • if you want to use Webmin, find someone on this forum or on another forum who is very familiar with it who can guide you with ensuring that Webmin succeeds in configuring your server correctly
  • if you want to use Certbot, please post your entire Apache configuration (at least, all of the files within /etc/httpd that define virtual hosts), and also the current output of certbot certificates

Iā€™m really sorry for making you go in circles and potentially do the same things over and over again. I know a lot about how Certbot works, but very little about Webmin, and so I donā€™t understand very much about what to expect in the case where youā€™ve used both of them to configure your certificates.

44

Thank you for your response, i will reinstall my server so i would start from the beginning, please do you have any docs or guide so iā€™ll follow it to reinstall Certbot correctly ?

45

You can find instructions at https://certbot.eff.org/. (In this case, please donā€™t also use Webmin to request certificates or change HTTPS settings.)

46

Iā€™ve reinstalled my server, and i didnā€™t use Webmin, juste following the instructions but i still have the same error of the navigator that the certificat not valid ā€˜Your SSL certificate does not match your domain name!ā€™
Here is the result of ā€˜cerbot certicatesā€™ :
certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Found the following certs:
Certificate Name: coques-telephone.com
Domains: coques-telephone.com www.coques-telephone.com
Expiry Date: 2019-06-08 18:47:41+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/coques-telephone.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/coques-telephone.com/privkey.pem

47

Same as earlier.

Find these lines

and replace with the paths / files of your certbot certificates output.

Your website uses a self signed certificate:

E=root@vmi238974.contaboserver.net, 
CN=vmi238974.contaboserver.net, 
OU=SomeOrganizationalUnit, O=SomeOrganization, L=SomeCity, S=SomeState, C=--
	10.03.2019
	09.03.2020
expires in 365 days
1 Like
48

Now it seems to be working correctly!

49

Yes thank you so much @schoen and @JuergenAuer

3 Likes
50

Yep, now there is a new Letsencrypt certificate:

CN=coques-telephone.com
	10.03.2019
	08.06.2019
expires in 90 days	coques-telephone.com, 
www.coques-telephone.com - 2 entries
2 Likes
51

Great! Sorry it took so longā€”I think things can get really complicated when you use both Certbot and Webmin to configure the same server!

3 Likes
52

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.