How to get new Certificate for a PERSONAL COMPUTER

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: I dont have one, its my Personal PC

I ran this command: I don't even know how to get the new Certificate

It produced this output: N/A

My web server is (include version): N/A

The operating system my web server runs on is (include version): N/A

My hosting provider, if applicable, is: N/A

I can login to a root shell on my machine (yes or no, or I don't know): I havent a clue what that is

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): N/A

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): N/A

There's no real difference between getting a certificate for a personal computer and a server on the internet. But Let's Encrypt certificates can only be associated with an internet domain name that points to your PC or that you control the public DNS records for.

There are a variety of dynamic DNS services that can provide a custom sub-domain for your PC. You can also just purchase a domain from a registrar. Depending on the TLD, the price can be anywhere from free to ridiculously expensive.

2 Likes

Hi @TacticalPC and welcome to the LE community forum :slight_smile:

Why do you think that you need a certificate for your PC?
What would you do with the cert on your PC?

1 Like

If you don't have a domain or web site, then you probably don't need the kind of certificates that Let's Encrypt offers. Perhaps you should start at the beginning, and explain why you think you need a certificate, and what you're actually trying to accomplish, and people here will be more likely to be able to point you in the right direction.

2 Likes

Steam apparently used the Certificate and now I always get "No Internet Connection" when I download things. I in fact do have connection. When I asked them about it they told me it had to do with the Certificate

I'm guessing either whomever you talked to at Steam either misunderstood you, or you misunderstood them. The only certificate you might need to install is the Let's Encrypt root. Usually computers that are getting automatic updates get their root trust store updated automatically, but there are some (especially older) computers that have been having problems with it. So, I think if you can answer these questions people here will be most likely to be able to help you:

  1. What operating system is your computer running?
  2. Do you know if all "security updates" for it have been installed? (Again, most systems will do this automatically, but some have automatic updates turned off.)
  3. Can you get to each of these sites in a web browser? Please test both whatever the "default" web browser for your computer is (like, what ships built-in to the computer) as well as whatever web browser you most commonly use, if different.
    a. https://helloworld.letsencrypt.org
    b. https://valid-isrgrootx1.letsencrypt.org
  4. Can you please say what web browser(s) you used to test in Step 3, and their versions?
  5. Please visit http://test-ipv6.com/helpdesk/ (shouldn't matter in which browser for this step) and provide the information it lists? (If you don't want to give your specific IP address(es), we probably don't really need it, but the "Help desk code" and "AS" may be helpful, if your problem is "No Internet Connection".)
5 Likes

"This issue may be caused by your Operating System not receiving updates on trusted Root Certificate Authority certificates for a long time. You should make sure Operating System's Update is working correctly and that you are fully up-to-date and that you have the latest trusted CA certs. If you aren’t receiving updates your computer is also likely insecure and it’s important to resolve that issue.

You can see these third-party articles for more information on the recent expiration of the DST Root CA X3 certificate:

I have Windows, up to date.
I can get to the websites, I used Google Chrome.
I apparently only use IPv4, yet my internet settings say I do.

1 Like

Does this mean Windows 10 Version 21H1 Build 19043.1348? There are a lot of possible "Windows", and we've had people here using all sorts of things that were still "Windows" but weren't actually getting security updates.

Can you get to the sites using Internet Explorer or Edge? (Chrome I believe still uses the system trust store, so that should be a fine test, but using Microsoft's browsers would ensure that all of Microsoft's updates are in place.)

Using only IPv4 is probably fine (there are very few IPv6-only services out there yet). I mainly wanted you to check it because having only IPv6 access gives you an Internet that mostly works except for a few IPv4-only services. I have no idea offhand whether Steam uses IPv4 or IPv6 (I would naively assume it supports both, but I don't use it myself), but if your only problem is with Steam and the above sites work then there probably isn't a root store certificate issue.

It wouldn't shock me if there have been a lot of older computers where not having an updated root store was the problem, so that's what their support told you, but it may not actually be related to whatever your problem is at all. There probably isn't much people here can do for you if the above test sites all load correctly, since then it sounds like your system is using Let's Encrypt certificates just fine.

3 Likes

@TacticalPC

In addition to the questions by petercooperjr, I have a couple additional.

  1. You said your downloads were a problem. Are these games you downloaded from the Steam website?

  2. Do you have any problems accessing https://store.steampowered.com/

  3. Do you have an example URL or website that is failing?

Thanks

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.