I am getting Your connection is not private ERROR because the certificate is invalid but the expiration on the certificate is November 26th '21 in MAC Chrome Version 93.0.4577.82 and version Version 94.0.4606.71 (latest) on my site iperQ.com from yesterday. Even https://letsencrypt.org/ and Wikipedi…

Hi @poldi171254 , The problem in your case is [image] Osiris: using --preferred-root "ISRG Root X1" [...] (That option requires certbot 1.12.0 or newer.) If you can't upgrade to Certbot 1.12, you could manually edit the chain file in /etc/letsencrypt/live to remove the X3 certificate if user…

Thanks. Installed the latest certbot and was able to set the preferred-chain. That fixed access for the Chrome Browser, but I have users who say they their Safari runs on the latest MacOS version and they still get the security warning. I don't have any apple gear so can't check. Mind you the sit…

[image] poldi171254: the site still fails server tests (ie. SSL Server Test (Powered by Qualys SSL Labs) ) with an invalid license You might be misunderstanding, or over emphasizing, the message shown for Path #2.

Not sure I follow. The screenshot shows that the certificate isn't trusted [L1] Not sure what this looked like before the end of september Sorry, should have mentions this before. The site is running on the latest Ubuntu LTS server and Apache with all up to date. And the certificate is wildca…

[image] poldi171254: Apache I would start to unravel that Apache mess with the output of: sudo apachectl -t -D DUMP_VHOSTS OR are you trying to connect to: https://zudiewiener.com/ ? If so, the wildcard cert doesn't cover that name. It only covers name that end with ".zudiewiener.com" (n…

Apologies. The screenshot was for a different site with the same issue [L2] llist@mail:~$ sudo apachectl -t -D DUMP_VHOSTS VirtualHost configuration: *:80 www.dragonclaw.net (/etc/apache2/sites-enabled/dragonclaw-net.conf:1) *:443 is a NameVirtualHost …

Try (with "www"): SSL Server Test: www.dragonclaw.net (Powered by Qualys SSL Labs) If you want the apex domain, you need to include it in the HTTP vhost config: [image] poldi171254: *:80 www.dragonclaw.net (/etc/apache2/sites-enabled/dragonclaw-net.conf:1) And in the cert…

[image] poldi171254: That fixed access for the Chrome Browser, but I have users who say they their Safari runs on the latest MacOS version and they still get the security warning. I don't have any apple gear so can't check. @rg305 is exactly right here: Safari and Chrome disagree about whethe…

Chrome & Safari - Your connection is not private ERROR

Help

eva2000 October 7, 2021, 2:30pm 35

just be sure Cloudflare SSL cert is provided by Digicert and not Letsencrypt Cloudflare Universal SSL switch Letsencrypt to Digicert CA

Topic		Replies	Views
Connection Errors on Apple Devices Help	35	13219	October 2, 2021
Certificates are not trusted on Chrome and Safari on old iMac with El Capitan Help	52	34728	October 11, 2021
SSL Shows Not Valid In Safari and some version of Chrome on Mac computers Help	23	7099	October 7, 2021
OS X 10.11 - Clients not connecting to site with Let's Encrypt certificates Help	15	32033	October 6, 2021
Letsencrypt.org frontpage "NET::ERR_CERT_INVALID" Help	37	8932	April 8, 2020

Chrome & Safari - Your connection is not private ERROR

Related topics