Certificate issue

[juvebogdan]

Hello,

I ran letsecnrypt setup following this: https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. All went fine but then i had to change the server where my app is so on the new server I ran same thing again and now it does not work. I get the following after wget:

ERROR: cannot verify flixon.app’s certificate, issued by ‘/C=–/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=flixon.app/emailAddress=root@flixon.app’:

My domain is: flixon.app

I ran this command: certob setup on this link https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7

It produced this output: setup was successful but i get errors on wget

My web server is (include version): Apache 2.4.6

The operating system my web server runs on is (include version): centos 7

I can login to a root shell on my machine (yes or no, or I don’t know): yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.31.0

[JuergenAuer]

Hi @juvebogdan

@juvebogdan

My domain is: flixon.app

looks like you have resolved some problems.

There is a new certificate ( https://check-your-website.server-daten.de/?q=flixon.app ):

CN=flixon.app
	29.04.2019
	28.07.2019
expires in 90 days	flixon.app, www.flixon.app - 2 entries

Non-www and www are secure.

Domainname	Http-Status	redirect	Sec.	G
• http://flixon.app/
165.227.78.243	403		0.206	M
Forbidden
• http://www.flixon.app/
165.227.78.243	403		0.210	M
Forbidden
• https://flixon.app/
165.227.78.243	403		1.287	M
Forbidden
• https://www.flixon.app/
165.227.78.243	403		1.044	M
Forbidden

But there is one error you should fix:

You send the certificate two times, so your chain is wrong:

Chain - duplicate certificates	
	1	CN=flixon.app
	
	2	CN=flixon.app
	
	3	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

Perhaps you use cert.pem and fullchain.pem. Use only fullchain.pem, cert.pem is included.

[juvebogdan]

Thank you very much for the fast response.

Yes i did solve it temporarily. It seems that my SSL.conf was overriding virtualhost conf.

Regards