Error message "Your connection to this site is not secure"

Help
1

Hello everyone.

I have a server Centos7 Apache2.4 in GCP, deploying several web applications, mostly creating the SSL certificate works correctly, however, a single site does not work.

The creation of the certificate for this site and the redirection http to https works correctly, as well as in the other sites, but at the moment of us validating with a navigator the message “NET :: ERR_CERT_AUTHORITY_INVALID” or "Your connection with this site does not appear it is safe "; Validating the certificate of this site shows the name of the machine and not the domain.

I have reviewed the configuration, comparing it with the other sites where it works correctly, and these are the same.

I have made many requests to Letsencrypt, which generates the error “Error when creating a new order: too many certificates already issued for the exact set of domains.”

What could be the problem?

2

Hi @gabriel.aguilera

please answer the following questions. That’s the standard template of #help

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

A check of your domain is required to find problems.

1 Like
3

Hi Dear JuergenAuer

My domain is: eventos-ccs.com.co
I ran this command: /usr/local/bin/certbot-auto --apache -d eventos-ccs.com.co -d www.eventos-ccs.com.co
It produced this output: web Error message “Your connection to this site is not secure”
My web server is (include version): Apache 2.4
The operating system my web server runs on is (include version): CentOS 7
My hosting provider, if applicable, is: Google Cloud Platform
I can login to a root shell on my machine: Yes CLI Shell
The version of my client is: certbot 0.35.0

4

You have created a lot of certificates.

12 in the last 7 days, a lot of duplicates ( https://check-your-website.server-daten.de/?q=eventos-ccs.com.co#ct-logs ):

CRT-Id Issuer not before not after Domain names LE-Duplicate next LE
1564282325 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 21:05:23 2019-09-08 21:05:23 www.eventos-ccs.com.co
1 entries duplicate nr. 2
1564216583 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 20:41:28 2019-09-08 20:41:28 www.eventos-ccs.com.co
1 entries duplicate nr. 1
1563994311 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 19:22:59 2019-09-08 19:22:59 prueba.eventos-ccs.com.co
1 entries duplicate nr. 1
1563849005 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 18:32:22 2019-09-08 18:32:22 eventos-ccs.com.co
1 entries duplicate nr. 4
1563793320 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 18:14:19 2019-09-08 18:14:19 eventos-ccs.com.co
1 entries duplicate nr. 3
1563766388 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 18:05:39 2019-09-08 18:05:39 eventos-ccs.com.co, www.eventos-ccs.com.co
2 entries duplicate nr. 5 next Letsencrypt certificate: 2019-06-17 14:59:59
1563667696 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 17:30:38 2019-09-08 17:30:38 eventos-ccs.com.co, www.eventos-ccs.com.co
2 entries duplicate nr. 4
1563359284 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 15:45:44 2019-09-08 15:45:44 eventos-ccs.com.co, www.eventos-ccs.com.co
2 entries duplicate nr. 3
1563488414 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 15:45:09 2019-09-08 15:45:09 eventos-ccs.com.co
1 entries duplicate nr. 2
1563267351 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 15:12:58 2019-09-08 15:12:58 eventos-ccs.com.co, www.eventos-ccs.com.co
2 entries duplicate nr. 2
1563236876 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 14:59:59 2019-09-08 14:59:59 eventos-ccs.com.co, www.eventos-ccs.com.co
2 entries duplicate nr. 1
1563234971 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-10 14:59:22 2019-09-08 14:59:22 eventos-ccs.com.co
1 entries duplicate nr. 1

But I don't see your https, there is a blocking firewall.

Domainname Http-Status redirect Sec. G
• http://eventos-ccs.com.co/
34.73.37.126 301 https://eventos-ccs.com.co/ 0.220 A
• http://www.eventos-ccs.com.co/
34.73.37.126 301 https://www.eventos-ccs.com.co/ 0.220 A
• https://eventos-ccs.com.co/
34.73.37.126 -2 1.340 V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 34.73.37.126:443
• https://www.eventos-ccs.com.co/
34.73.37.126 -2 1.337 V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 34.73.37.126:443

So I don't see which certificate is installed.

Install the certificate with both domain names, but use one of the existing certificates.

No, that's not the output of the certbot command. That's the output from your browser.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.