Created a certificate through Certbot but Chrome is saying invalid cert


I created a cert using the below command and it ran without error and seemed to produce the files necessary. I’ve updated the vhost file to point at

SSLCertificateFile /etc/letsencrypt/live/
SSLCertificateKeyFile /etc/letsencrypt/live/

And when I load my site on Chrome or Firefox it’s saying the certificate is not valid, but inspecting the cert from the address it appears to show that a certificate if present.

I must be missing something fundemental here, any help is greatly appreciated

My domain is:

I ran this command: sudo certbot certonly --apache

It produced this output:

My web server is (include version): Ubuntu 18.0.4 LTS

The operating system my web server runs on is (include version): Linux 4.4

My hosting provider, if applicable, is: AWS

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

Hi @SteveORH

checking your domain you see the error ( ):

Domainname Http-Status redirect Sec. G 301 0.166 E 301 0.130 A 301 3.417 B 200 3.590 N
Certificate error: RemoteCertificateNameMismatch

Your certificate has only one domain name:
expires in 81 days - 1 entry

So your www version isn't secure.

Solution: Create one certificate with both domain names and use that instead.

sudo certbot certonly --apache -d -d
1 Like

Thanks Juergen!

I believe I have it now,

Thank you very much!

1 Like

Yep, your certificate is now correct. Rechecked your domain
expires in 89 days, - 2 entries

the certificate has both domain names, both connections are secure.

Two other problems: Your 404 - page sends a http status 200 - that's a "softfail" (Google).

And your meta og:image doesn't work:

	NameResolutionFailure - The remote name could not be resolved: ''
	NameResolutionFailure - The remote name could not be resolved: ''

same with your twitter:image.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.