Need some help with My cPanel DV Certificate

Some one help have some problems with my DV Certificate
Photo attached
I will appreciate much

1 Like

Welcome to the Let's Encrypt Community :slightly_smiling_face:

DST Root CA X3 is expired, so that result is fully expected. It looks like you're serving the "long chain", so you should have no reason to worry unless it's specifically causing an issue.


Yes it is causing bouncing of mails...getting error "poor reputation of domain used in mail transfer"

I installed Zero ssl but today it's invalid again

Can you show more detail on that message?
I can't find much wrong with your domain or IP: - Results of the query - Results of the query


When the DV Cert is invalid i get undelivered messages on picture attached above.

yesterday i issued again the zero ssl in order to send a message, today the DV cert is invalid again! so tiresome

I will PM you with an address you can test to.
I would like to see this more closely.


And how can i solve that issue of DV?

The simplest test for that is to change the CA.
But that might not be so simple within cPanel...
What ACME client do you use?
Do you have admin rights on the server?


I have only cpanel.
My host is truehost

I only see an LE cert:

echo | openssl s_client -connect -servername | head
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN =
verify return:1
Certificate chain
 0 s:CN =
   i:C = US, O = Let's Encrypt, CN = R3
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3

I don't know what usually happens, after i install takes one day and it disappears

Maybe due to the new cert NOT covering all the required names (so cPanel replaces it):

Notice how the LE certs have three names (including "mail") and the others have only two names.


How can i go about it...have severally contacted the host but the same issue happens; they sort the issue but after a while it becomes invalid

Try using another ZeroSSL cert but with all three names on it.


Thank you i will try

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.