CN=DST Root CA X3, O=Digital Signature Trust Co. and serial number 4001 7721 37D4 E942 B8EE 76AA 3C64 0AB7 is not a trusted certificate

Hello,

Thanks for response. My goal is to build simple integration to the stark-research.net. Anyway when I'm trying to establish secure HTTP connection, it is failing with error:

validating certificate chain
looking in datastore for certificate with DN CN=R3, O=Let's Encrypt, C=US
match found
looking in datastore for certificate with DN CN=ISRG Root X1, O=Internet Security Research Group, C=US
CA certificate with correct DN, but fingerprint '0CD2 F9E0 DA17 73E9 ED86 4DA5 E370 E74E' found. Continuing search.
No match found
CA certificate with issuer CN=DST Root CA X3, O=Digital Signature Trust Co. and serial number 4001 7721 37D4 E942 B8EE 76AA 3C64 0AB7 is not a trusted certificate
server chain validation failed: com.tibco.security.AXSecurityException: CA certificate with issuer CN=DST Root CA X3, O=Digital Signature Trust Co. and serial number 4001 7721 37D4 E942 B8EE 76AA 3C64 0AB7 is not a trusted certificate

Certs in my trust store:
adding as trusted cert:
Subject: CN=www.stark-research.net
Issuer: CN=R3, O=Let's Encrypt, C=US
Algorithm: RSA; Serial number: 0x40ca91462c2ac5be1b127806354c07f4408
Valid from Wed Sep 15 10:21:27 CEST 2021 until Tue Dec 14 09:21:26 CET 2021

adding as trusted cert:
Subject: CN=ISRG Root X1, O=Internet Security Research Group, C=US
Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US
Algorithm: RSA; Serial number: 0x8210cfb0d240e3594463e0bb63828b00
Valid from Thu Jun 04 13:04:38 CEST 2015 until Mon Jun 04 13:04:38 CEST 2035

adding as trusted cert:
Subject: CN=R3, O=Let's Encrypt, C=US
Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US
Algorithm: RSA; Serial number: 0x912b084acf0c18a753f6d62e25a75f5a
Valid from Fri Sep 04 02:00:00 CEST 2020 until Mon Sep 15 18:00:00 CEST 2025

Regards, Krystian

2 Likes