New certificate - Cert Fail

[Mauric]

Hello Together
I need to renew me old Certificate from MailServer... now it seem to all ok, but if i Start the check

checktls.com > CRT Failed
Certificate 1 of 1 in chain: Cert VALIDATION ERROR(S): self signed certificate
So email is encrypted but the recipient domain is not verified

OpenSSL 1.1.1g 21 Apr 2020

openssl genrsa -des3 -out mail.domainname.key 2048
openssl req -new -key mail.DomainName.key -out mail.DomainName.csr
openssl x509 -req -days 365 -in mail.DomainName.csr -signkey mail.DomainName.key -out mail.DomainName.crt
openssl req -new -x509 -extensions v3_ca -keyout mail.DomainName.pem -out mail.DomainName.pem -days 365

Thanks for any possible update

[Osiris]

I don’t get it. How is this related to Let’s Encrypt?

[Mauric]

Yes your answer it’s not fals… so i was thinking that are near together.
regards

[ezekiel]

@Mauric

openssl genrsa -des3 -out mail.domainname.key 2048
openssl req -new -key mail.DomainName.key -out mail.DomainName.csr
openssl x509 -req -days 365 -in mail.DomainName.csr -signkey mail.DomainName.key -out mail.DomainName.crt
openssl req -new -x509 -extensions v3_ca -keyout mail.DomainName.pem -out mail.DomainName.pem -days 365

These are steps for creating a self-signed certificate. If you want to issue (or renew) a certificate using Let's Encrypt, you will want to use an ACME client.

Getting Started - Let's Encrypt