1 Like
Welcome to the Let's Encrypt Community 
DST Root CA X3 is expired, so that result is fully expected. It looks like you're serving the "long chain", so you should have no reason to worry unless it's specifically causing an issue.
3 Likes
Yes it is causing bouncing of mails...getting error "poor reputation of domain used in mail transfer"
I installed Zero ssl but today it's invalid again
Can you show more detail on that message?
I can't find much wrong with your domain or IP:
MultiRBL.valli.org - Results of the query jiranibusiness.co.ke
MultiRBL.valli.org - Results of the query 51.75.130.83
2 Likes
yesterday i issued again the zero ssl in order to send a message, today the DV cert is invalid again! so tiresome
I will PM you with an address you can test to.
I would like to see this more closely.
2 Likes
And how can i solve that issue of DV?
The simplest test for that is to change the CA.
But that might not be so simple within cPanel...
What ACME client do you use?
Do you have admin rights on the server?
2 Likes
I have only cpanel.
My host is truehost
I only see an LE cert:
echo | openssl s_client -connect 51.75.130.83:443 -servername jiranibusiness.co.ke | head
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = jiranibusiness.co.ke
verify return:1
DONE
CONNECTED(00000005)
---
Certificate chain
0 s:CN = jiranibusiness.co.ke
i:C = US, O = Let's Encrypt, CN = R3
1 s:C = US, O = Let's Encrypt, CN = R3
i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
2 Likes
I don't know what usually happens, after i install takes one day and it disappears
Maybe due to the new cert NOT covering all the required names (so cPanel replaces it):
Notice how the LE certs have three names (including "mail") and the others have only two names.
2 Likes
How can i go about it...have severally contacted the host but the same issue happens; they sort the issue but after a while it becomes invalid
Try using another ZeroSSL cert but with all three names on it.
2 Likes
Thank you i will try
1 Like
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.