Where do I get the DST_Root_CA_X3.pem file?

[image] AWS with CentOS - tweaking configs openssl s_client -connect EXAMPLE.org:443 -servername EXAMPLE.org The only trustworthy !

Hi @jsha ! almost a beta tester :sweat_smile: Site: app.gesnex.com OS: Amazon Linux AMI 2018.03 OpenSSL 1.0.2k-fips 26 Jan 2017 The another site www.gesnex.com is working fine, however under Amazon Linux 2 this solution worked fine: RHEL/CentOS 7 Fix for Let’s Encrypt Change | by Dorai Ashok S …

[image] punchi: openssl s_client -connect app.gesnex.com:443 -servername gesnex.com That works for me: [even with the matching servername] openssl version OpenSSL 1.1.1 11 Sep 2018 openssl s_client -connect app.gesnex.com:443 -servername gesnex.com CONNECTED(00000005) depth=2 C = US, O = I…

Yeah, you've got to get rid of your upper-level CA (X3). Here is the relevant info I get when I run: openssl s_client -showcerts -connect app.gesnex.com:443 CONNECTED(00000005) depth=1 O = Digital Signature Trust Co., CN = DST Root CA X3 verify error:num=10:certificate has expired notAfter=Sep 30…

@cremationlab I can't find it online now, but here it is: -----BEGIN CERTIFICATE----- MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow PzEkMCIGA1UEChMbR…

So I copy that into the path above and run that command, and will point me to the new root cert?

Or get it from here: crt.sh | 8395 Which command above?

Where is my chain.pem file in centos and what would I delete?

I'm not sure I understand what you mean or want. Which guide/instruction/post are you trying to follow?

Putting the pem file in the blacklist folder and running the update command

Help thread with cremationlab

Help

punchi October 1, 2021, 2:16am 10

The only trustworthy !

Topic		Replies	Views
AWS with CentOS - tweaking configs Help	15	1401	October 6, 2021
Rate limited: Error creating new order :: too many certificates (5) already issued for this exact set of domains Help	67	5514	October 9, 2021
Certbot fails with SSLError / Max retries exceeded /directory after domain name and host name change Help	42	2247	December 8, 2023
Issue - Unable to verify certificate chain - CentOS7 Help	33	4760	July 7, 2022
Certbot and Letsencrypt on Raspberry Pi 3B with Debian9 stretch generate bogus certificates Help	40	8305	March 6, 2019

Help thread with cremationlab

Related topics