# Problem with Zimbra

**URL:** <https://community.letsencrypt.org/t/problem-with-zimbra/167451>\
**Category:** Help\
**Created:** [December 10, 2021, 5:54pm UTC](https://community.letsencrypt.org/t/problem-with-zimbra/167451 "2021-12-10T17:54:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jppo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jppo/32/56620_2.png) [@jppo](https://community.letsencrypt.org/u/jppo)\
**Post date:** [December 10, 2021, 5:54pm UTC](https://community.letsencrypt.org/t/problem-with-zimbra/167451/1 "2021-12-10T17:54:13Z")

</div>

## My domain is: [mail.jppozzi.dyndns.org](http://mail.jppozzi.dyndns.org) I get the new certificate (number 14 in etc/letsencrypt/archive/mail.jppozzi.dyndns.org), all went OK. When I want to have Zimbra verify the files I get an error while verifying all the files with the command : zmcertmgr verifycrt comm privkey.pem cert.pem fullchain.pem The result is some weird messages :

## \*\* Verifying 'cert.pem' against 'privkey.pem' Certificate 'cert.pem' and private key 'privkey.pem' match. \*\* Verifying 'cert.pem' against 'fullchain.pem' ERROR: Unable to validate certificate chain: C = US, O = Internet Security Research Group, CN = ISRG Root X1 error 2 at 2 depth lookup: unable to get issuer certificate error cert.pem: verification failed

I test also with chain.pem instead of fullchain.pem with the same results ...  
It is the first time I have a problem with the certificates ...  
What is the solution ...

Regards

---

<div class="post-metadata">

**Author:** ![orangepizza](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/orangepizza/32/19597_2.png) [@orangepizza](https://community.letsencrypt.org/u/orangepizza)\
**Post date:** [December 10, 2021, 6:01pm UTC](https://community.letsencrypt.org/t/problem-with-zimbra/167451/2 "2021-12-10T18:01:57Z")

</div>

zimbra needs nonstandard format for certificate chain:  
certbot chain.pem + whatever root certificate it requests. (not sure it need to be system's trust store into too)

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 10, 2021, 6:24pm UTC](https://community.letsencrypt.org/t/problem-with-zimbra/167451/3 "2021-12-10T18:24:25Z")

</div>

Please review their recommendation:  
[Installing a LetsEncrypt SSL Certificate - Zimbra :: Tech Center](https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [January 9, 2022, 6:25pm UTC](https://community.letsencrypt.org/t/problem-with-zimbra/167451/4 "2022-01-09T18:25:00Z")

</div>

Closed on January 9, 2022, 6:25pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
