# Facebook Dev: SSL and CURL error

**URL:** <https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191>\
**Category:** Help\
**Created:** [March 11, 2021, 1:34pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191 "2021-03-11T13:34:19Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![flizana](https://avatars.discourse-cdn.com/v4/letter/f/7ba0ec/32.png) [@flizana](https://community.letsencrypt.org/u/flizana)\
**Post date:** [March 11, 2021, 1:34pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/1 "2021-03-11T13:34:19Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: tamango.cl

I ran this command:

It produced this output:

My web server is (include version): nginx 1.14

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is: Digital Ocean

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): 0.31.0

When I tested my site with SSLabs I got an A score: [SSL Server Test: tamango.cl (Powered by Qualys SSL Labs)](https://www.ssllabs.com/ssltest/analyze.html?d=tamango.cl&hideResults=on)

However when testing with Facebook Developers I get the following errors:

SSL Error: Can't validate SSL Certificate. Either it is self-signed (which will cause browser warnings) or it is invalid.

Curl error: 60 (SSL\_CACERT)

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [March 11, 2021, 1:48pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/2 "2021-03-11T13:48:33Z")

</div>

Hi @flizana

> [@flizana](#):
>
> However when testing with Facebook Developers I get the following errors:
> 
> SSL Error: Can't validate SSL Certificate. Either it is self-signed (which will cause browser warnings) or it is invalid.

you have a www version, but the certificate of the www version is invalid.

---

<div class="post-metadata">

**Author:** ![flizana](https://avatars.discourse-cdn.com/v4/letter/f/7ba0ec/32.png) [@flizana](https://community.letsencrypt.org/u/flizana)\
**Post date:** [March 11, 2021, 2:03pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/3 "2021-03-11T14:03:44Z")

</div>

I tried reinstalling the certificates, now running the command with both domains:

sudo certbot --nginx -d tamango.cl -d www.tamango.cl

But I'm still seeing the error in Facebook Developers console.

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [March 11, 2021, 2:12pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/4 "2021-03-11T14:12:05Z")

</div>

Reinstalling had worked, that's good. 👍

What's the exact url Facebook uses?

---

<div class="post-metadata">

**Author:** ![flizana](https://avatars.discourse-cdn.com/v4/letter/f/7ba0ec/32.png) [@flizana](https://community.letsencrypt.org/u/flizana)\
**Post date:** [March 11, 2021, 2:30pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/5 "2021-03-11T14:30:05Z")

</div>

Great, I think that was the issue then. The exact URL is [https://tamango.cl](https://tamango.cl)

---

<div class="post-metadata">

**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\
**Post date:** [March 11, 2021, 4:59pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/7 "2021-03-11T16:59:21Z")

</div>

> [@flizana](#):
>
> However when testing with Facebook Developers I get the following errors:

What Facebook tool are you using?

The debug tool shows it as fine: [Sharing Debugger - Meta for Developers](https://developers.facebook.com/tools/debug)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [April 10, 2021, 4:59pm UTC](https://community.letsencrypt.org/t/facebook-dev-ssl-and-curl-error/147191/8 "2021-04-10T16:59:26Z")

</div>

Closed on April 10, 2021, 4:59pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
