Chrome & Firefox (failed)net::ERR_CERT_AUTHORITY_INVALID

Hey guys, new to certificates and let’s encrypt. Trying to get a side project to work over https. Not sure what is going wrong. I am able to ping https://api.lomanginotechnology.com/health and get a successful response from postman when certificate validation is off. But when making a back channel call from my website www.lomanginotechnology.com chrome displays an error:
" (failed) net::ERR_CERT_AUTHORITY_INVALID". Ill try to provide as many details as I can.
Firefox provides this error:
api.lomanginotechnology.com uses an invalid security certificate.The certificate is not trusted because the issuer certificate is unknown.The server might not be sending the appropriate intermediate certificates.An additional root certificate may need to be imported.Error code: SEC_ERROR_UNKNOWN_ISSUER”

My domain is: api.lomanginotechnology.com

I ran this command:
displays errors: https://check-your-website.server-daten.de/?q=api.lomanginotechnology.com#certificates
says everything this is fine: https://letsdebug.net/api.lomanginotechnology.com/225708
It produced this output:

My web server is (include version):
nginx ingress controller deployed with latest helm chart on aks using cert-manager and let’s encrypt

The operating system my web server runs on is (include version): kubernetes

My hosting provider, if applicable, is: Azure kubernetes service

I can login to a root shell on my machine (yes or no, or I don’t know): unsure

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is:
Using cert manager latest stable helm chart

1 Like

image
You’re using a cert issued by the staging/test environment.

Thank you for testing this out before using the real/production environment.
Now that is does “work”, you can switch to the real/production environment.

3 Likes

@rg305 Thank you very much! It was a late night, unsurprised i didnt catch that.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.