# Certificate Signed but still not secure
**URL:** https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749
**Category:** Help
**Created:** [October 24, 2020, 8:04pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749 "2020-10-24T20:04:29Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 8:04pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/1 "2020-10-24T20:04:29Z")
My domain is: [finrhodweb.com](http://finrhodweb.com)
My web server is (include version): Xampp Windows 3.2.4
The operating system my web server runs on is (include version): Windows 10
I'm using a control panel to manage my site: yes
The version of my client is: 1.9.0
Hi so I'm running Xammp Apache on A Windows machine just for a small project, web server is running on ports 80 and 443 as needed.
To sign it I used cerbot certonly --webroot.
The signage all went fine, however, it still will not let me use [https://finrhodweb.com](https://finrhodweb.com).
I've checked all DNS records and they seem to be inline but I'm not sure as I have the signage files in the normal directory under Certbot/live/{domain name} and the files are all there so it's definitely worked but still nothing...
Any ideas at all would be appreciated as I'm new to this
---
### Author:  [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [October 24, 2020, 8:10pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/2 "2020-10-24T20:10:05Z")
Welcome to the Let's Encrypt Community 🙂
`certonly` acquires a certificate, but does not install it.
Try:
`certbot --apache --keep-until-expiring`
edit: `--keep-until-expiring` and `--reinstall` do the same thing.
---
### Author:  [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)
#### Post date: [October 24, 2020, 8:10pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/3 "2020-10-24T20:10:25Z")
Hi @Finrhodweb
> [@Finrhodweb](#):
>
> To sign it I used cerbot certonly --webroot.
if you use that command, the certificate isn't installed.
Use
```nohighlight
--reinstall
```
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 9:48pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/4 "2020-10-24T21:48:35Z")
Hi, so cerbot certonly --reinstall? Just to confirm as I am a complete newbie.
Thanks for replying so quick!
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 9:51pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/5 "2020-10-24T21:51:29Z")
Hi so it says something about a plugin not being installed? Does that mean I need a plug in to use Apache?
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [October 24, 2020, 9:52pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/6 "2020-10-24T21:52:29Z")
It probably doesn't know which installer to use, since you used `certonly`.
> [@griffin](#):
>
> Try:
> `certbot --apache --keep-until-expiring`
# READERS: Get involved. Be heard. Do your part, it starts with: **If you read something you like; then like it ❤ !**
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 9:53pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/7 "2020-10-24T21:53:59Z")
Ok so certonly only produces the certificate, so how do I go about linking it?
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [October 24, 2020, 9:55pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/8 "2020-10-24T21:55:58Z")
You need to either use:
`-i apache`
To specify that particular installer
OR
> [@griffin](#):
>
> Try:
> `certbot --apache --keep-until-expiring`
Which should prompt you and get you what you need.
Along with setting things up nicely for when it comes times to renew.
# READERS: Get involved. Be heard. Do your part, it starts with: **If you read something you like; then like it ❤ !**
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 9:58pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/9 "2020-10-24T21:58:22Z")
Ok so when I try both of these it says
"Certificate not due for renewal, no action taken"
Do I need to remove the certificates and start fresh?
Sorry, I'm such a newbie to this, I appreciate all your help 🙂
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [October 24, 2020, 10:04pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/10 "2020-10-24T22:04:17Z")
> [@Finrhodweb](#):
>
> Do I need to remove the certificates and start fresh?
No.
You need to INSTALL the certificate you already have.
See for yourself.
Try:
`certbot certificates`
Now you just need to USE that certificate within your XAMPP (Apache).
You can either do that manually - if you know how to setup a new site in Apache.
OR
You can tell `certbot` to reinstall it while using the Apache installer.
Maybe you need to add some `--force` just this one time.
But it should have asked you if you wanted to reinstall the existing cert...
Can you show the whole `certbot` output with all choices you made?
# READERS: Get involved. Be heard. Do your part, it starts with: **If you read something you like; then like it ❤ !**
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 10:05pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/11 "2020-10-24T22:05:43Z")
I can try and show but using a remote connection so may be trickg
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [October 24, 2020, 10:06pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/12 "2020-10-24T22:06:59Z")
If you can't copy/paste the text, just get a screenshot of it.
We are `.well-trained` at reading pixels!
# READERS: Get involved. Be heard. Do your part, it starts with: **If you read something you like; then like it ❤ !**
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 10:11pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/13 "2020-10-24T22:11:13Z")
---
### Author:  [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [October 24, 2020, 10:13pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/14 "2020-10-24T22:13:57Z")
Use the following and let me know:
`certbot --apache --keep`
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 10:14pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/15 "2020-10-24T22:14:47Z")
Says "does not appear to be installed"
---
### Author:  [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [October 24, 2020, 10:16pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/16 "2020-10-24T22:16:27Z")
So it doesn't recognize your apache flavor, which is why you used webroot.
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 10:18pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/17 "2020-10-24T22:18:07Z")
If I was to use option 1 and have it spin a local server, would this be easier? As I can shut down the server to do this
---
### Author:  [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [October 24, 2020, 10:24pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/18 "2020-10-24T22:24:13Z")
No. What you've done is optimal to minimize disruption of webserver operation.
This is the trouble:
> No installers for HTTP servers are supported for now (Certbot for Windows can currently obtain your certificate from Let's Encrypt, but not install it into your web server application).
[https://certbot.eff.org/lets-encrypt/windows-apache.html](https://certbot.eff.org/lets-encrypt/windows-apache.html)
* * *
The following resource is a bit dated, but it might help you modify your apache configuration to use the cert you've acquired. Once it's pointed at the cert and key in the Let's Encrypt `live` folder, when it comes time to renew your certificate you should only need to use `renew` then restart your webserver using a `--deploy-hook`.
Look at the following (starting at step 4):
[https://www.docketrun.com/blog/how-to-setup-lets-encrypt-for-apache-on-xamp-wamp-in-windows-vm/](https://www.docketrun.com/blog/how-to-setup-lets-encrypt-for-apache-on-xamp-wamp-in-windows-vm/)
For the `--deploy-hook`:
[https://certbot.eff.org/docs/using.html#certbot-command-line-options](https://certbot.eff.org/docs/using.html#certbot-command-line-options)
---
### Author:  [@Finrhodweb](https://community.letsencrypt.org/u/Finrhodweb)
#### Post date: [October 24, 2020, 10:25pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/19 "2020-10-24T22:25:42Z")
Ok, Thank you so much for your help! I will try this in the morning as all this is frying my brain by the second! I will be sure to come back if I have any issues but looking at those links looks like I should be fine.
Thanks again!
---
### Author:  [@griffin](https://community.letsencrypt.org/u/griffin)
#### Post date: [October 24, 2020, 10:26pm UTC](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749/20 "2020-10-24T22:26:55Z")
Let us know. 🙂
[Next page](https://community.letsencrypt.org/t/certificate-signed-but-still-not-secure/136749.md?page=2)