Hi Guys, On Production Environment we are getting this error: Can not find issuer 'C=US,O=Internet Security Research Group,CN=ISRG Root X1' for certificate 'C=US,O=Let's Encrypt,CN=R3'. This started happen from 9th November. Is this related to some change on lets Encrypt side? Thanks in Advance

Are you by chance also using Azure App Services as in this post? [image] Can not find issuer 'C=US,O=Internet Security Research Group,CN=ISRG Root X1' for certificate 'C=US,O=Let's Encrypt,CN=R3' Help A…

I am indeed sir. Just started 3 days ago.

How are you doing the certificate renewal?

Multiple distinct people reporting the same issue that all happen to be using Azure App Service suggests the change that is causing the problem was made on the Azure side of things. Folks here might be able to help try diagnosing some things. But it would probably also be wise to open a support tic…

I made a change to production 4 days ago on the 9th that changed the ordering of part of a configuration, which led to this. It just rolled back in Staging. My apologies.

Did it inadvertently start serving the short chain as the default? Because that's what it looks like based on a cert I just grabbed from Prod.

Yes, that chain got sorted first.

sounds like this could explain LE Staging primary and alternate chains (for RSA keys) seemingly being swapped for the past few days? primary chain returned for LE Staging certificate renewed on 04 November (and previous): Certificate: subject: {b'CN': b'www.appoptimization.com'} issuer:…

Right, this change spent some days in staging (where it swapped it until this morning) before it went to production.

Hi, can I ask when production will be fixed so I can re-run the renewal on affected sites? Many thanks, Rob

Production environment we are getting exception when processing Orders

Issuance Tech

rmbolger November 13, 2023, 5:29pm 2

Are you by chance also using Azure App Services as in this post?

Topic		Replies	Views
Can not find issuer 'C=US,O=Internet Security Research Group,CN=ISRG Root X1' for certificate 'C=US,O=Let's Encrypt,CN=R3' Help	16	6182	December 15, 2023
Error when trying to renew my certificate (with an unchanged operation since years) Help	4	757	March 16, 2024
Getting Error when trying to get a new certificate Help	32	5397	March 17, 2024
After my latest renewal with certbot the SSL connection broke as Issuer changed from R3 to R11 Help	16	7302	July 24, 2024
SSL Certificate Chain Issues Azure Application GatewayV2 Help	7	4852	July 2, 2021

Production environment we are getting exception when processing Orders

Related topics