# CERT Downlaod unsuccessful

**URL:** <https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591>\
**Category:** Help\
**Created:** [October 22, 2020, 11:50am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591 "2020-10-22T11:50:40Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![vishnu\_k](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vishnu\_k](https://community.letsencrypt.org/u/vishnu_k)\
**Post date:** [October 22, 2020, 11:50am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/1 "2020-10-22T11:50:40Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com)

I ran this command:./getssl --debug "[bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com)"

It produced this output:  
running reload command service httpd restart  
Stopping httpd: [OK]  
Starting httpd: [OK]

Checking /root/.getssl/bctebspayroll.bahwancybertek.com/bctebspayroll.bahwancybertek.com.crt

CERT\_LOCAL=SHA1 Fingerprint=8F:E5:67:66:5E:7A:7F:02:77:8F:A6:9C:6A:C1:A6:4C:72:17:69:8D

CERT\_REMOTE=  
/root/.getssl/bctebspayroll.bahwancybertek.com/bctebspayroll.bahwancybertek.com.crt not returned by server  
getssl: [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - rsa certificate obtained but not installed on server

My web server is (include version): Oracle EBS R12.1.3

The operating system my web server runs on is (include version): RHEL 6.5

My hosting provider, if applicable, is: Let's encrypt

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no  
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): NA

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 22, 2020, 1:13pm UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/2 "2020-10-22T13:13:48Z")

</div>

Hi @vishnu_k

> [@vishnu\_k](#):
>
> getssl: [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - rsa certificate obtained but not installed on server

checking your domain you have created some certificates - [bctebspayroll.bahwancybertek.com - Make your website better - DNS, redirects, mixed content, certificates](https://check-your-website.server-daten.de/?q=bctebspayroll.bahwancybertek.com#ct-logs)

| Issuer | not before | not after | Domain names | LE-Duplicate | next LE |
| --- | --- | --- | --- | --- | --- |
| Let's Encrypt Authority X3 | 2020-10-22 | 2021-01-20 | [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - 1 entries | duplicate nr. 5 | next Letsencrypt certificate: 2020-10-26 06:52:49 |
| Let's Encrypt Authority X3 | 2020-10-22 | 2021-01-20 | [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - 1 entries | duplicate nr. 4 | |
| Let's Encrypt Authority X3 | 2020-10-22 | 2021-01-20 | [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - 1 entries | duplicate nr. 3 | |
| Let's Encrypt Authority X3 | 2020-10-22 | 2021-01-20 | [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - 1 entries | duplicate nr. 2 | |
| Let's Encrypt Authority X3 | 2020-10-19 | 2021-01-17 | [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - 1 entries | duplicate nr. 1 | |

Oh, five, so you have already hitted the limit.

But your port 443 doesn't answer.

So the certificate installation didn't work.

May be

- your getssl is too old, check, if there is an update
- your getssl doesn't understand your configuration

I don't know how that client works.

So

- check the documentation of that client to find your 5 certificates
- install the newest certificate manual.

Next renew: May be switch to another client.

---

<div class="post-metadata">

**Author:** ![vishnu\_k](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vishnu\_k](https://community.letsencrypt.org/u/vishnu_k)\
**Post date:** [October 23, 2020, 6:25am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/3 "2020-10-23T06:25:09Z")

</div>

Hi,

we have downloaded the getssl utility through below command.

curl --silent [https://raw.githubusercontent.com/srvrco/getssl/master/getssl](https://raw.githubusercontent.com/srvrco/getssl/master/getssl) \> getssl ; chmod 700 getssl

Is there any step or document to update the existing getssl?

Or is there any possible solution resolve this issue?

It is a complete loss of service and we are facing in production

Thanks

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 23, 2020, 10:33am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/4 "2020-10-23T10:33:23Z")

</div>

> [@vishnu\_k](#):
>
> Is there any step or document to update the existing getssl?

Check the documentation of that tool, I don't use it.

> [@vishnu\_k](#):
>
> Or is there any possible solution resolve this issue?

There are a lot of other clients.

> **[ACME Client Implementations - Let's Encrypt](https://letsencrypt.org/docs/client-options/)**
>
> Last updated: Jul 22, 2023 | See all Documentation Let’s Encrypt uses the ACME protocol to verify that you control a given domain name and to issue you a certificate. To get a Let’s Encrypt certificate, you’ll need to choose a piece...

> [@vishnu\_k](#):
>
> It is a complete loss of service and we are facing in production

That's always the problem using third-party-tools. It's your decision if you use a (may be not longer supported) tool or a tool that doesn't work with your configuration. Happens.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [October 27, 2020, 6:59am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/5 "2020-10-27T06:59:14Z")

</div>

> [@vishnu\_k](#):
>
> getssl: [bctebspayroll.bahwancybertek.com](http://bctebspayroll.bahwancybertek.com) - rsa certificate obtained but not installed on server
> 
> My web server is (include version): Oracle EBS R12.1.3

Is it possible that you have to take an additional step to install the new certificate into your Oracle server? Presumably `getssl` doesn't know how to do this and is telling you that it doesn't know via the message "rsa certificate obtained but not installed on server".

You may have a valid certificate saved somewhere on your machine, but you may have to repeat whatever process was used to import that into the Oracle EBS application before. If you don't know how to do this, you can look for documentation about that application or look for a forum related to it. (It's not a common choice here, so I'm not sure if people on this forum will know how to advise you to configure it.)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 26, 2020, 6:59am UTC](https://community.letsencrypt.org/t/cert-downlaod-unsuccessful/136591/6 "2020-11-26T06:59:19Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
