duckDNS/Letsencrypt certificate seemingly OK, but digicert check says it is not trusted

If you have these three files, then chain may not include the cert.

Open chain in an editor. There should be two blocks

-----BEGIN CERTIFICATE-----



-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----


-----END CERTIFICATE-----

If there is only one block, that's the problem.

Then merge both files (cert + chain) in one file, first cert, then chain, then use that (fullchain).

Then recheck the domain to see if that works.

1 Like