# ERR\_SSL\_PROTOCOL\_ERROR : Website sent an invalid response

**URL:** <https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118>\
**Category:** Help\
**Created:** [June 7, 2020, 6:42pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118 "2020-06-07T18:42:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsharma](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jsharma/32/28907_2.png) [@jsharma](https://community.letsencrypt.org/u/jsharma)\
**Post date:** [June 7, 2020, 6:42pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118/1 "2020-06-07T18:42:33Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=tipsring.com](https://crt.sh/?q=tipsring.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [tipsring.com](http://tipsring.com)

I ran this command:

**I have installed certbot and successfully activated SSL certificate generation and manually placed the .pem files path in the apache’s .conf file. But SSL is not working.**

Tried running command:  
**echo | openssl s\_client -connect [tipsring.com:443](http://tipsring.com:443) -servername [tipsring.com](http://tipsring.com) -verify\_hostname [tipsring.com](http://tipsring.com) 2\>&1 | openssl x509 -noout -text | grep -E '(CN|DNS)'**

It produced this output:

**unable to load certificate**  
**139970731263296:error:0909006C:PEM routines:get\_name:no start line:…/crypto/pem/pem\_lib.c:745:Expecting: TRUSTED CERTIFICATE**

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): **Yes**

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):  
**I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no, I am using my own file manager**

The version of my client is (e.g. output of `certbot --version` if you’re using Certbot):  
**certbot 0.40.0**

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [June 7, 2020, 7:00pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118/2 "2020-06-07T19:00:57Z")

</div>

You’re serving HTTP content on port 443. Not HTTP **S**. You can verify this by surfing to [http://tipsring.com:443/](http://tipsring.com:443/) (notice the protocol and port). Your Apache configuration is erroneous.

---

<div class="post-metadata">

**Author:** ![jsharma](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jsharma/32/28907_2.png) [@jsharma](https://community.letsencrypt.org/u/jsharma)\
**Post date:** [June 7, 2020, 7:35pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118/3 "2020-06-07T19:35:28Z")

</div>

Unable to find a solution for this. Any suggestions for debugging how should I proceed to resolve this apache configuration error?

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [June 7, 2020, 7:47pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118/4 "2020-06-07T19:47:44Z")

</div>

Read for example the offical [Apache SSL/TLS how-to](https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html).

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [July 7, 2020, 7:47pm UTC](https://community.letsencrypt.org/t/err-ssl-protocol-error-website-sent-an-invalid-response/125118/5 "2020-07-07T19:47:57Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.