Cert is suddenly different as seen in browser from remote

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: renkaba.selfhost.domains

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Linux

I can login to a root shell on my machine (yes or no, or I don’t know): yes, but not now, because I’m not at home

Yesterday I received a new certificate from LetsEncrypt succesfully, because I convinced my provider to give me an new domain name (before it was renkaba.selhost.eu and I run always into rate-limit). I changed my apache config files to your certificate and tested it with my browser. Everything seems to be ok : safe cert, my domain name, LetsEncrypt as issuer. So looked good.

But suddenly this morning it was unsafe with my domain name still, but different issuer : Cisco Umbrella Secondary SubCA fra-SG. I have a screenshot, but dont know how to upload it. Later on I could not look at it anymore, everything seemed to empty now.

What went wrong? I can not look at my server directly, because I’m not at home now.
Please help, I can not reach my server anymore from remote.

Hi @moon56

your non-www version has the correct certificate:

CN=renkaba.selfhost.domains
	26.02.2019
	27.05.2019
expires in 89 days	renkaba.selfhost.domains - 1 entry

that's a Letsencrypt certificate.

Your www-version has

CN=Pita, L=Bovenden, C=DE
	01.11.2012
	01.11.2015
1214 days expired	

a self signed certificate.

https://renkaba.selfhost.domains/ has a 401 - Authorization Required - so that should work as expected.

Cisco Umbrella is a DNS resolver that provides filtering, related to OpenDNS. It sounds like your DNS resolver is intercepting or blocking your website.

Thx, meanwhile I’m convinced, that this is the case, Ciso Umbrella steped in and blocked my webside.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.