I made too many certificates on google lb

My domain is:
www.akiraleoshoots.com
I ran this command:
Load balancer generated cert
It produced this output:
Ssl invalid.
My web server is (include version):
Idk
The operating system my web server runs on is (include version):idk

My hosting provider, if applicable, is:
Google domains

I can login to a root shell on my machine (yes or no, or I don't know):
Idk
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Google cloud console
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Another note my https ip goes to a 404.page for Google.

2 Likes

Welcome to the Let's Encrypt Community, Jeremiah :slightly_smiling_face:

You seem to have generated seven certificates. The problem is that the one you have installed only covers akiraleoshoots.com and thus does not cover www.akiraleoshoots.com.

https://akiraleoshoots.com has a covering certificate installed:

https://www.akiraleoshoots.com does not have a covering certificate installed:

Certificate history of akiraleoshoots.com:
https://crt.sh/?q=akiraleoshoots.com

2 Likes

How can I get one . Because my www is directed to my cname www.akiraleoshoots.com. to my c.storage.googleapis.com. I generated one through my load balancer but it can't get directed to the www because of the cname

2 Likes

Why do akiraleoshoots.com (35.190.117.101) and www.akiraleoshoots.com (108.177.122.128) point to two different webservers? Aren't they supposed to both point to the same website?

2 Likes

Ones using the cname www akiraleoshoots.com which is the c.storage.googleapis.com and the other one points to load balancer

1 Like

Reverse IP lookup is odd. For the IP for akiraleoshoots.com it comes back to Google (Cloud services).

Reverse IP Lookup

Reverse IP Lookup tools resolve a given IP to Host. When you enter an IP address, the tool attempts to locate a DNS PTR record for that IP address.

IP: 35.190.117.101

Hostname: 101.117.190.35.bc.googleusercontent.com.

But for the IP that's shown above for www.akiraleoshoots.com, there appears there is no actual Hostname for it.

Reverse IP Lookup

IP: 108.177.122.128

Hostname: 108.177.122.128

3 Likes

This whole question is entirely unrelated to Let's Encrypt. That said, I think you need to specify multiple domains when configuring your Frontend Configuration https settings (Google Managed Certificate) e.g. www.akiraleoshoots.com akiraleoshoots.com. For the purposes of a certificate, www.domain.com and domain.com are very different things, so you have to specify them both.

3 Likes

Yeah I understand. The thing is that the load balancer cant see the new cert I created for www.akiraleoshoots.com therefore it says FAILED_NOT_VISIBLE. I know its not related but thats the reason why if you type www.akiraleoshoots.com youre not getting a HTTPS or a redirect to HTTPS because the CNAME is www is being used by c.storage.googleapis.com. Also I'm using those settings I know that this question is now not viable to what my original question was.

UPDATE:
I don't know what I did. But I deleted the CNAME, directed it to the same A ip address as the load balancer and used www as the prefix. And then made another load balancer to redirect it to HTTPS with prefix redirect. Now the website is working. I assume the load balancer had the as the front end c.storage.googleapis.com so it didn't need to use it. But the website seems to have all the certs even typing www or naked domain.

2 Likes

I'm still very confused as to why you would want the apex (naked) domain name and the www subdomain name to point to two different websites (like they do now). Is this desired?

2 Likes

I honestly don't know. I followed the load balancer tutorial google had .

2 Likes

That still doesn't explain why the content of the two websites are different though.

Coming soon?

Now here?

2 Likes

For me its working. Did you clear your cache or flush your dns? I've tried my phone and my pc.

1 Like

You saw the differences in the two screenshots I posted, right? Are you saying that you don't see those differences in your browser?

2 Likes

Nope. I refreshed my PC and flushed the dns. and even looked on LTE on my phone looks fine to me.

2 Likes

Just checked again. They're definitely different.

Normally, www.akiraleoshoots.com should just be a CNAME to akiraleoshoots.com. Since they're both pointing to the same IP address now, I'm wondering if there are different Virtual Hosts on the back end serving different content.

2 Likes

I just checked a few different ways. I'm rather baffled by why it's different in my Samsung Internet browser. :thinking: Seems to be the same in other browsers. Possibly my cache didn't fully clear. Not sure. :man_shrugging:

3 Likes

Weird. I removed the original cname. And it fixed it self. Have you tried a different internet provider? This problem is probably beyond certs now xD. The naked or root domain both point to the sls website

2 Likes

I wouldn't worry too much here. Probably just me. I would, however, change the A record for www.akiraleoshoots.com to a CNAME record pointing to akiraleoshoots.com. This just ensures that the address for www.akiraleoshoots.com stays in lockstep with any address changes for akiraleoshoots.com. Also, you want to 301 redirect akiraleoshoots.com to www.akiraleoshoots.com (or vice versa) for SEO purposes (canonical URL). Otherwise, search engines will split your traffic between the "two" websites.

2 Likes

Understood. Let me try that. Thanks btw. So I should change cname back to c.storage.googleapis.com ? because thats where im hosting my website.

2 Likes

You're quite welcome! :blush:

Best of luck, my friend.

2 Likes