# Certbot NET::ERR\_CERT\_AUTHORITY\_INVALID error **URL:** \ **Category:** Server\ **Created:** [January 16, 2019, 4:58pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686 "2019-01-16T16:58:45Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 4:58pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/1 "2019-01-16T16:58:46Z")
Hello! All of a sudden I’m receiving this error when browsing my website [teckzite.org](http://teckzite.org) Today I am getting errors with Chrome and iPhone, Firefox is still fine. Does anyone know what might be going on? Any help will be appreciated. Sandeep krishna ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [January 16, 2019, 5:09pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/2 "2019-01-16T17:09:49Z")
Yes, the configuration of your server is wrong: [SSL Server Test: teckzite.org (Powered by Qualys SSL Labs)](https://www.ssllabs.com/ssltest/analyze.html?d=teckzite.org) : > Chain issues **Incomplete** Can you answer these questions ? I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don't know): I'm using a control panel to manage my site (no, or provide the name and version of the control panel): ---
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 5:11pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/3 "2019-01-16T17:11:05Z")
The web serer is Ubuntu 16.04 It’s a vps on Amazon lightsail ---
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 5:15pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/4 "2019-01-16T17:15:12Z")
How can I solve chain issues ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [January 16, 2019, 5:19pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/5 "2019-01-16T17:19:48Z")
By providing the chain file (given by your acme client). So it depends of your web server and acme client. Can you answer these questions ? I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): Ubuntu 16.04 My hosting provider, if applicable, is: vps on Amazon lightsail I can login to a root shell on my machine (yes or no, or I don’t know): I’m using a control panel to manage my site (no, or provide the name and version of the control panel): If you don’t understand these questions, maybe you can answer this one: How did you create the certificate the first time? ---
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 5:25pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/6 "2019-01-16T17:25:49Z")
My web server is apache (2.4.34) Yes, I can login to a root shell on my machine No , I’m not using control to manage my site ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [January 16, 2019, 5:37pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/7 "2019-01-16T17:37:33Z")
Thank you, How did you create/install/renew the certificate? Which acme client did you use? ---
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 5:38pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/8 "2019-01-16T17:38:58Z")
Using the certbot based on a tutorial. I think it’s missing a intermediate certificate How can I get one for us…? ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [January 16, 2019, 5:47pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/9 "2019-01-16T17:47:46Z")
Certbot should have take care of everything, but obviously it was not the case. Do you still have the link to the tutorial? In your apache configuration you should see something like: ```nohighlight SSLCertificateFile /etc/letsencrypt/live//cert.pem SSLCertificateKeyFile /etc/letsencrypt/live//privkey.pem SSLCertificateChainFile /etc/letsencrypt/live//chain.pem ``` If the `SSLCertificateChainFile` directive is missing, you should add it (with the correct file path for chain.pm of course, similar to the other one) Apparently it's because your apache version is \<2.4.8: [Recommended Apache config - #4 by \_az](https://community.letsencrypt.org/t/recommended-apache-config/58294/4) > If you pass fullchain.pem to `SSLCertificateFile` in Apache 2.4.8 or newer, it will automatically deal with chaining the intermediate for you. ---
**Author:** ![sandeep-krishna](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sandeep-krishna](https://community.letsencrypt.org/u/sandeep-krishna)\ **Post date:** [January 16, 2019, 6:01pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/10 "2019-01-16T18:01:06Z")
Yeah, The problem solved…! Actually , ```auto SSLCertificateChainFile /etc/letsencrypt/live//chain.pem ``` This line is missing in my configuration file. I’ve added it and now it works fine. Thank you…!😌 ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [January 16, 2019, 6:02pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/11 "2019-01-16T18:02:28Z")
> [@sandeep-krishna](#): > > Thank you…!😌 You're welcome 😁 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [February 15, 2019, 6:06pm UTC](https://community.letsencrypt.org/t/certbot-net-err-cert-authority-invalid-error/82686/12 "2019-02-15T18:06:29Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.