Cert is suddenly different as seen in browser from remote


#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: renkaba.selfhost.domains

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Linux

I can login to a root shell on my machine (yes or no, or I don’t know): yes, but not now, because I’m not at home

Yesterday I received a new certificate from LetsEncrypt succesfully, because I convinced my provider to give me an new domain name (before it was renkaba.selhost.eu and I run always into rate-limit). I changed my apache config files to your certificate and tested it with my browser. Everything seems to be ok : safe cert, my domain name, LetsEncrypt as issuer. So looked good.

But suddenly this morning it was unsafe with my domain name still, but different issuer : Cisco Umbrella Secondary SubCA fra-SG. I have a screenshot, but dont know how to upload it. Later on I could not look at it anymore, everything seemed to empty now.

What went wrong? I can not look at my server directly, because I’m not at home now.
Please help, I can not reach my server anymore from remote.


#2

Hi @moon56

your non-www version has the correct certificate:

CN=renkaba.selfhost.domains
	26.02.2019
	27.05.2019
expires in 89 days	renkaba.selfhost.domains - 1 entry

that’s a Letsencrypt certificate.

Your www-version has

CN=Pita, L=Bovenden, C=DE
	01.11.2012
	01.11.2015
1214 days expired	

a self signed certificate.

https://renkaba.selfhost.domains/ has a 401 - Authorization Required - so that should work as expected.


#3

Cisco Umbrella is a DNS resolver that provides filtering, related to OpenDNS. It sounds like your DNS resolver is intercepting or blocking your website.


https://umbrella.cisco.com/
https://www.opendns.com/


#4

Thx, meanwhile I’m convinced, that this is the case, Ciso Umbrella steped in and blocked my webside.


closed #5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.