Multiple certificate folders in live folder but domains not secure

Help
41

Apache is now reporting a problem with because of vhost code:

    <Directory>
        Require all granted
        Options Indexes FollowSymLinks Includes ExecCGI Multiviews
        AllowOverride none
    </Directory>

This previously worked
42

Well, we're straying pretty far from anything to do with Let's Encrypt.

You should probably find an Apache forum to help you. Or some general server admin site like ServerFault

When you do report that be sure to say exactly what problem Apache is reporting. The specific error message is helpful.

Maybe some other volunteer here will offer help but you really need to have a working Apache for us to work with. I can't connect to any of your domains now.

2 Likes
43

My domains are now working with expired certificate from 2023.

44

Test works now.

Test 2
Test 21068×284 45.4 KB

45

You FIXED it, Thank you. I will send money.

46

They work but sudo certbot certificates still shows the 3 folders with certs,

47

ound the following certs:
Certificate Name: aimhighschools.com
Serial Number: 5c8ce38e7cbbdde80c9b82d8e0006f2a504
Key Type: ECDSA
Domains: aimhighschools.com aimhighschools.net aimhighschools.org beyond.cleanair.com d7036.com envirotemps.com hi-tech.rent hi-techrent.com remiwalker.com www.aimhighschools.com www.aimhighschools.net www.aimhighschools.org www.d7036.com www.envirotemps.com www.hi-tech.rent www.hi-techrent.com www.remiwalker.com
Expiry Date: 2025-11-17 18:31:05+00:00 (VALID: 87 days)
Certificate Path: /opt/homebrew/etc/certbot/certs/live/aimhighschools.com/fullchain.pem
Private Key Path: /opt/homebrew/etc/certbot/certs/live/aimhighschools.com/privkey.pem
Certificate Name: walkershire.net-0001
Serial Number: 5c5c6e3cd8e6f7a9b6d69625518909f21e0
Key Type: ECDSA
Domains: walkershire.net
Expiry Date: 2025-10-15 12:33:15+00:00 (VALID: 54 days)
Certificate Path: /opt/homebrew/etc/certbot/certs/live/walkershire.net-0001/fullchain.pem
Private Key Path: /opt/homebrew/etc/certbot/certs/live/walkershire.net-0001/privkey.pem
Certificate Name: walkershire.net
Serial Number: 59fc09dbee3e28c4fee240bcf1ddadea655
Key Type: ECDSA
Domains: walkershire.net aimhighschools.com aimhighschools.net aimhighschools.org beyond.cleanair.com d7036.com envirotemps.com hi-tech.rent hi-techrent.com remiwalker.com www.aimhighschools.com www.aimhighschools.net www.aimhighschools.org www.d7036.com www.envirotemps.com www.hi-tech.rent www.hi-techrent.com www.remiwalker.com www.walkershire.net
Expiry Date: 2025-11-18 18:46:01+00:00 (VALID: 88 days)
Certificate Path: /usr/local/etc/certbot/certs/live/walkershire.net/fullchain.pem
Private Key Path: /usr/local/etc/certbot/certs/live/walkershire.net/privkey.pem

48

Those are valid and current certs but the Apache that replies to HTTPS requests is not using them.

You need to find out why the SSLCertificateFile in that Apache is not using the file shown by sudo certbot certificates

Even try turning off machines that shouldn't be active to help isolate where these requests are getting processed.

You could also make test requests and see which apache access_log shows them.

3 Likes
49

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.