None of the common names in the certificate match the name that was entered

Trushar10 · February 23, 2023, 4:15pm

I have installed letsencrypt SSL certificate using acme.sh for the subdomain. I got the success message for the installation. Also in cpanel under manage SSL/TLS. The green padlock icon can been seen.

But when I access the site. It is still not secure.

My domain is: project.trushargavit.com

Error: This server could not prove that it is project.trushargavit.com; its security certificate is from *.web-hosting.com. This may be caused by a misconfiguration or an attacker intercepting your connection.

I ran this command: acme.sh --issue -d project.trushargavit.com -d www.project.trushargavit.com -w /home/username/project.trushargavit.com

As I understand, I have used the correct common name for the certificate.

Do help.

Bruce5051 · February 23, 2023, 4:23pm

Hello @Trushar10, welcome to the Let's Encrypt community.

This is the certificate that is presently being served

Have you restarted the web server service?

$ openssl s_client -showcerts -servername project.trushargavit.com -connect project.trushargavit.com:443 < /dev/null CONNECTED(00000003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.web-hosting.com
verify return:1
---
Certificate chain
 0 s:CN = *.web-hosting.com
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Mar  9 00:00:00 2022 GMT; NotAfter: Apr  9 23:59:59 2023 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
   v:NotBefore: Nov  2 00:00:00 2018 GMT; NotAfter: Dec 31 23:59:59 2030 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384
   v:NotBefore: Mar 12 00:00:00 2019 GMT; NotAfter: Dec 31 23:59:59 2028 GMT
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.web-hosting.com
issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5144 bytes and written 406 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE

Bruce5051 · February 23, 2023, 4:26pm

Also here is a list of issued certificates crt.sh | trushargavit.com, the latest being 2023-02-23.

I suggest for testing and debugging are best done using the Staging Environment as the Rate Limits are much higher.

And to assist with debugging there is a great place to start is Let's Debug.

Trushar10 · February 23, 2023, 4:29pm

@Bruce5051 I using a share hosting on namecheap.

As you can see the SSL is installed as shown in SSL/TLS.

How to restart web services on cpanel?

Bruce5051 · February 23, 2023, 4:29pm

Kindly wait to see if there are more knowledgeable Let's Encrypt community volunteers willing to assist.

You also might try https://www.namecheap.com/Support/Knowledgebase/

rg305 · February 23, 2023, 5:57pm

If you operate the server, you can just reboot it.
If you don't, then speak with the server admin about restarting services.

And please stop getting certs:

Trushar10 · February 23, 2023, 6:01pm

@rg305 okay. I was generating certs because it wasn't reflecting on domain.

rg305 · February 23, 2023, 6:06pm

The problem is elsewhere.

Bruce5051 · February 23, 2023, 6:08pm

Well you have hit the Rate Limits
https://letsdebug.net/project.trushargavit.com/1385042

Trushar10 · February 23, 2023, 6:33pm

@Bruce5051 what should i do now?

Bruce5051 · February 23, 2023, 6:41pm

Use one of the already issued Certificates (I am assuming you've kept the Private Keys);
if that is not an option, then you just have wait for the Rate Limits to expire.

rg305 · February 23, 2023, 7:33pm

Who manages the server?
Who manages cPanel?

Trushar10 · February 24, 2023, 3:34am

@rg305 namecheap

Trushar10 · February 24, 2023, 3:40am

@rg305 how can I see the issued certificate that you have shared in screenshot?

rg305 · February 24, 2023, 4:03am

crt.sh | project.trushargavit.com

Trushar10 · February 25, 2023, 4:20am

I contact the customer support about the issue. It was a problem at server side. The issue has been resolved.

Thank @Bruce5051 @rg305 for your help. I learned new things about the SSL from your help.

system · March 27, 2023, 4:21am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.