I done nothing and I got this Incorrect validation certificate for tls-sni-01

Hello I got mail that these certificate expired, I have done nothing
changes so what is this?

Your certificate (or certificates) for the names listed below will expire in
9 days (on 11 Jul 17 14:28 +0000). Please make sure to renew
your certificate before then, or visitors to your website will encounter errors.

list of 15 web address. But when I run /root/certbot-auto renew
I got these information. I think the all 15 websites expires
is wrong information only expires website is kasskaappi.net
So what should I do?
I think the problem might be only this kassakaappi.net
certificate. So what should I do ?

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: template.kassakaappi.net
    Type: unauthorized
    Detail: Incorrect validation certificate for tls-sni-01 challenge.
    Requested
    b7e6b8d9c0277fce72a8c3b84581f201.37da990a836d654af7c42bb7cf74927b.acme.invalid
    from 178.63.3.78:443. Received 1 certificate(s), first certificate
    had names “dummy,
    e238032ae4e9ce14d8ffdad3157843d1.b863de3f08166ae82f3d56a218f488e0.acme.invalid”

    Domain: static.kassakaappi.net
    Type: unauthorized
    Detail: Incorrect validation certificate for tls-sni-01 challenge.
    Requested
    ab0e191e7bade73b45252cfa83915630.ac91cc1fb4228cb2271596f1dac208f1.acme.invalid
    from 178.63.3.78:443. Received 1 certificate(s), first certificate
    had names "dummy,

    Domain: www.kassakaappi.net
    Type: unauthorized
    Detail: Incorrect validation certificate for tls-sni-01 challenge.
    Requested
    7a4b2900b8685757e00dfefccf68c08a.c0bb47b671037e5a65bb2357ffd58013.acme.invalid
    from 178.63.3.78:443. Received 1 certificate(s), first certificate
    had names “dummy,
    e238032ae4e9ce14d8ffdad3157843d1.b863de3f08166ae82f3d56a218f488e0.acme.invalid”

Domain: vanha.kassakaappi.net
Type: unauthorized
Detail: Incorrect validation certificate for tls-sni-01 challenge.
Requested
f9864816cbfa3c1beb7da93d66f7a43e.65490c2e985e892a0e72a35300784ab0.acme.invalid
from 178.63.3.78:443. Received 1 certificate(s), first certificate
had names “dummy,
e238032ae4e9ce14d8ffdad3157843d1.b863de3f08166ae82f3d56a218f488e0.acme.invalid”

Domain: kassakaappi.net
Type: unauthorized
Detail: Incorrect validation certificate for tls-sni-01 challenge.
Requested
bc1baad292edd083b67252fb95b90daa.60a480f1d7c461a3c0000393d3cc2185.acme.invalid
from 178.63.3.78:443. Received 1 certificate(s), first certificate
had names “dummy,
e238032ae4e9ce14d8ffdad3157843d1.b863de3f08166ae82f3d56a218f488e0.acme.invalid”

Domain: hiekkalaatikko.kassakaappi.net
Type: unauthorized
Detail: Incorrect validation certificate for tls-sni-01 challenge.
Requested
1f29e1e5c7a1085471cb7e950e085c04.e569ef25f2cf62adb7d67750428e54c1.acme.invalid
from 178.63.3.78:443. Received 1 certificate(s), first certificate
had names “dummy,
e238032ae4e9ce14d8ffdad3157843d1.b863de3f08166ae82f3d56a218f488e0.acme.invalid”

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.

Hello,

Your certificate (or certificates) for the names listed below will expire in
9 days (on 11 Jul 17 14:28 +0000). Please make sure to renew
your certificate before then, or visitors to your website will encounter errors.

These address so what I do to make thing work?

hi @timo

It looks like you obtained a new certificate

https://crt.sh/?id=169995531

Andrei

Yes, I solve this.

Run command /root/certbot-auto --force-renewal
pick the sites which had problem and make/update new certificates

hiekkalaatikko.kassakaappi-le-ssl.conf
kassakaappi-le-ssl.conf
static.kassakaappi-le-ssl.conf
template.kassakaappi-le-ssl.conf

All these files tehse SSLCertificateFileand SSLCertificateKeyFile
points out same directory www.kassakaappi.net.

SSLCertificateFile /etc/letsencrypt/live/www.kassakaappi.net/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.kassakaappi.net/privkey.pem

After new certficates I run certbot delete
and delete this www.kassakaappi.net

Now every certificates are ok.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.