Error veirification of the certificate chain Invalid SSL certificates

I have generate wild card for domain *.sennaconsole.lantronix.com

using below command

certbot certonly --manual --preferred-challenges=dns --email pdwarampudi@***.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.sennaconsole.lantronix.com -d sennaconsole.lantronix.com

but server is not accepting certificate with below error:

Error veirification of the certificate chain
Invalid SSL certificates.

Suggestions will be much appreciated

Which files specifically are you uploading to the Lantronix console?

2 Likes

cert: cert.pem
CA: chain,pem
Privatekey: privatekey.pem

Try using:

  • fullchain.pem for the certificate.
  • privkey.pem for the private key
  • Nothing for the CA certificate
2 Likes

sure, will get back once trying. thank u

1 Like

Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:68:b7:c1:b0:10:4b:1e:8c:68:37:65:7b:c5:13:c3:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 4 16:06:12 2022 GMT
Not After : Aug 2 16:06:11 2022 GMT
Subject: CN=*.sennaconsole.lantronix.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d9:71:3a:92:b6:05:5f:d0:36:8c:fd:12:69:3d:
95:5c:4f:dc:4b:53:77:b1:31:6d:8c:97:62:38:99:
99:7d:1e:d3:1a:ac:fb:9d:8e:a5:e2:87:d3:e6:b2:
37:e7:51:39:11:2f:5d:59:26:10:e9:e6:df:66:60:
60:bc:ee:86:4c:f1:4b:34:02:a5:5a:0a:dc:1b:f4:
f0:03:8c:b9:57:a5:e5:64:74:6f:a6:30:f2:8f:38:
13:ab:e8:49:15:1f:66:af:ea:28:f2:1b:5c:27:6d:
ce:99:d2:0c:25:18:51:e9:13:7b:9e:d0:60:08:2f:
cc:ea:99:26:d0:9b:68:8a:cc:ee:98:52:01:c8:36:
5b:39:06:b8:52:c9:21:51:18:31:82:30:3d:7a:91:
cd:3c:20:e5:0d:4a:14:78:17:49:4f:9d:74:89:5a:
0f:d4:53:55:31:64:f7:d1:03:c1:00:b6:4d:98:95:
e9:b8:e5:cc:00:f0:fe:6a:c9:37:9d:4d:1c:08:83:
1b:29:39:30:76:66:0f:db:80:c1:95:5a:06:21:2e:
20:2a:3e:3b:9d:c4:10:d5:60:49:b0:1b:53:6e:3e:
65:3f:08:e9:86:98:b0:15:38:7d:60:f3:a5:98:14:
f3:e6:d9:be:53:f7:9e:cc:b5:29:bb:e2:95:e5:d5:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
59:77:D6:B0:D0:E5:22:34:EC:D4:71:6C:FD:E7:2C:C2:27:FF:C7:C5
X509v3 Authority Key Identifier:
keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6

        Authority Information Access:
            OCSP - URI:http://r3.o.lencr.org
            CA Issuers - URI:http://r3.i.lencr.org/

        X509v3 Subject Alternative Name:
            DNS:*.sennaconsole.lantronix.com, DNS:sennaconsole.lantronix.com
        X509v3 Certificate Policies:
            Policy: 2.23.140.1.2.1
            Policy: 1.3.6.1.4.1.44947.1.1.1
              CPS: http://cps.letsencrypt.org

        CT Precertificate SCTs:
            Signed Certificate Timestamp:
                Version   : v1(0)
                Log ID    : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
                            4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
                Timestamp : May  4 17:06:12.591 2022 GMT
                Extensions: none
                Signature : ecdsa-with-SHA256
                            30:44:02:20:55:26:FC:37:C4:6D:6B:F7:1E:35:8C:93:
                            F9:36:C6:10:FD:97:D5:87:D3:9C:23:F4:7C:52:B5:5F:
                            FD:1A:C5:54:02:20:5F:35:8E:49:B6:F0:EA:16:10:2F:
                            5E:2C:B6:94:5E:4B:18:FC:99:BD:00:88:F3:5D:76:E6:
                            C4:F6:12:AE:BB:AD
            Signed Certificate Timestamp:
                Version   : v1(0)
                Log ID    : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
                            11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
                Timestamp : May  4 17:06:12.615 2022 GMT
                Extensions: none
                Signature : ecdsa-with-SHA256
                            30:44:02:20:36:3F:EA:82:D9:F8:C8:7B:71:7D:7D:4B:
                            5B:0A:FD:92:4B:C8:F1:2F:C0:B6:51:2F:8A:79:48:8B:
                            91:50:4F:60:02:20:6C:D2:69:54:3C:DB:7B:2F:38:60:
                            D6:B9:EA:94:DC:2F:44:34:38:74:92:A5:40:BC:0D:E1:
                            99:CE:7B:81:ED:38
Signature Algorithm: sha256WithRSAEncryption
     15:ad:b3:05:d3:07:1b:be:d7:db:4e:ad:5e:de:e0:d8:09:86:
     a8:82:45:32:e2:25:dd:79:bc:da:08:2e:f5:87:e7:32:d1:59:
     dd:9a:db:91:13:57:c2:64:1a:37:16:07:52:ec:f9:12:ea:32:
     15:ea:7e:ab:20:4d:86:4d:b7:af:ae:65:f4:ce:66:e6:c6:20:
     8c:a4:fe:cc:42:51:35:aa:4b:9f:d9:29:66:e8:6b:37:d7:a9:
     49:3c:22:73:73:83:23:ed:62:30:0e:bd:61:5d:77:29:83:a0:
     4f:16:14:70:da:64:67:07:15:fa:2c:2f:8d:50:c5:21:45:ca:
     eb:3a:5f:8a:62:5c:b8:65:ac:39:8f:04:eb:1c:1c:f2:87:f7:
     43:68:36:4c:6f:83:96:aa:d5:a3:19:36:dc:d2:98:19:72:4d:
     ab:a1:2c:cc:dd:9b:87:c1:4c:1d:10:8a:cc:8f:04:fa:63:2b:
     5f:64:48:f0:b9:9d:7e:33:a0:a4:f7:e9:3d:e6:ca:30:5c:29:
     b0:66:d6:66:67:63:3b:d4:eb:da:e9:d9:11:93:b2:52:24:a9:
     0f:f0:e8:ad:09:7a:19:13:be:78:48:11:20:74:1d:7c:d4:4d:
     d1:9f:53:9d:99:83:53:4d:d7:12:14:44:11:0d:2a:86:b7:c9:
     c1:4f:81:37

Error veirification of the certificate
Invalid SSL certificates.

any findings?

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.