The current certificate chain that LetsEncrypt's certbot install, is invalid. This chain creates all sorts of issues with vulnerability scanners that we now have to address. We cannot rely on client-side devices to verify the chain of trust. Please provide a valid chain of trust that will automatic…

Provide a valid certificate chain

francoisj February 28, 2023, 9:44am 5

I disagree that this is an incorrectly reported issue. The certificate chain provided by the server is invalid because the root certificate expired. As simple as that.

Topic		Replies	Views
Why do Letsencrypt still add the expired root cert? Issuance Tech	19	2838	November 30, 2021
Understanding DST Root expiry and the older default cert chain Help	36	3457	December 8, 2021
Cert Chain issue Help	5	484	May 26, 2023
Why is LetsEncrypt issuing certificates with the old root Help	4	654	November 6, 2021
DST Root CA X3 Expiration Help	16	2769	December 12, 2021

Provide a valid certificate chain

Related topics