iPhone Letsncrypt Dovecot Invalid/Expired Certificate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: N/A

I ran this command: Having tried to add my mail server setup on my iPhone, I noticed an error 'Certificate error', this happens only on iPhones. I have setup my dovecot file to point to fullchain.pem and privkey.pem

It produced this output: Invalid/Expired Certificate

My web server is (include version: n/a

The operating system my web server runs on is (include version): n/a

My hosting provider, if applicable, is: n/a

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): n/a

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.22.0

How can this be not applicable?

Same with

and

1 Like
  • If it's an expired certificate you need to renew it
  • Check you are definitely serving a certificate chain that includes the CA intermediates ("full chain"), not just a certificate file.
  • check the name of the service .e.g. mail.something.com you are referring to on the iphone matches a name included on the certificate exactly.
2 Likes