R3 Intermediate certificate has expired - How to fix this on Debian using Certbot? Thank you

[image] rtulke: it seems i have to change the root ca manually Preferably all certificates including intermediates do not require manual intervention, but are handled by the ACME client. For mail clients usually just a single manual intervention is required: at the installation of the certifi…

If you haven't already done so... Try: sudo atp update sudo apt install libgnutls-openssl27 libgnutls30 sudo apt install ca-certificates

I guess I should add that this only works for Stretch or newer. When I tried it on Jessie, it couldn't find libgnutls30.

Tried 25-30 or without a number? [yes I'm that guy - there is always a bigger hammer!]

Has anyone been able to get this fixed? I'm having similar SSL issues with STunnel.

Please be more specific. STunnel and which O/S & version & anything else relevant.

So I ran the same check as I'm encountering similar problems (in my case I'm using letsencrypt to signa cert used by a StrongSWAN VPN server), the Client app says the server is returning a cert that expired Sep 29 2021 20:21:40 (oddly specific and doesn't perfectly match root expiry, might be tz di…

Oh I see. I just need to add --preferred-chain "ISRG Root X1" to the certbot command Except that the version shipped with Debian Stretch is waaay to old to feature that switch, so my options seem to be to grab certbot from snap (which plops a load of canonical/ubuntu stuff into the Debian box, whic…

Hi @PhilV welcome to the LE community forum :slight_smile: To add to your choices... OR Use an alternate ACME client. Like: acme.sh OR Use alternate (free) CAs. Like: ZeroSSL.com / BuyPass.com

Hi all, if it helps, this article https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ talks about the root CA X3 expiration. With all Browsers, it worked fine but with (java) tools working on the url, I had the issue of expired part. I'm maybe not using the same way as you all, …

R3 Intermediate certificate has expired - How to fix this on Debian with Certbot? - #12 by rg305 - Help

Topic		Replies	Views	Activity
R3 intermediate certificate has expired, how to renew it with cert-bot renew Help	9	7442	October 3, 2021
R3 Intermediate certificate has expired Help	130	39779	October 2, 2021
R3 issue on Ubuntu 16 Help	14	2907	October 16, 2021
R3 certificate expired — macOS Help	7	9389	September 30, 2021
Can some one explain how renewal expiration of R3 works? Help	25	3442	October 1, 2021