# NET::ERR\_CERT\_AUTHORITY\_INVALID error

**URL:** <https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805>\
**Category:** Server\
**Created:** [January 31, 2017, 3:15pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805 "2017-01-31T15:15:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Smartglobe](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Smartglobe](https://community.letsencrypt.org/u/Smartglobe)\
**Post date:** [January 31, 2017, 3:15pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805/1 "2017-01-31T15:15:40Z")

</div>

Hi there,

I’m quite new to server setup etc… I tried to enable SSL using letsencrypt (using certbot, certonly as all attempts using --apache were unsuccesfull).  
When surfing to [https://www.smartglobe.be/](https://www.smartglobe.be/) I get the NET::ERR\_CERT\_AUTHORITY\_INVALID error (using chrome).  
I’m running Centos 6.8, no cpanel/plesk and am using apache. and the insecure mark in Chrome.

In ssl.conf I have this:  
DocumentRoot "/var/www/html/smartglobe"  
ServerName [www.smartglobe.be:443](http://www.smartglobe.be:443)

I’m not sure why this isn’t working out… I would be thankful if anyone can help

Frederic

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [January 31, 2017, 7:46pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805/2 "2017-01-31T19:46:13Z")

</div>

You aren't using the Let's Encrypt certificate in the config ( or you haven't reloaded apache since changing the config).

What have you got for;

> SSLCertificateFile /path/to/signed\_certificate  
> SSLCertificateChainFile /path/to/intermediate\_certificate  
> SSLCertificateKeyFile /path/to/private/key

in your config ?

---

<div class="post-metadata">

**Author:** ![Smartglobe](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Smartglobe](https://community.letsencrypt.org/u/Smartglobe)\
**Post date:** [January 31, 2017, 10:50pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805/3 "2017-01-31T22:50:47Z")

</div>

Thank you very much. I didn’t realise I had to point the config to the right cert and keypaths. It looks to be working well now.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [January 31, 2017, 10:53pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805/4 "2017-01-31T22:53:58Z")

</div>

Please be sure that you used `live` and not `archive`, so that you’ll get the updated certificates automatically if you run `certbot renew` for renewing your certificates in the future.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 2, 2017, 10:55pm UTC](https://community.letsencrypt.org/t/net-err-cert-authority-invalid-error/26805/5 "2017-03-02T22:55:05Z")

</div>

Closed on March 2, 2017, 10:55pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.