https://crt.sh/?q=48504E974C0DAC5B5CD476C8202274B24C8C7172 The R3 Let's Encrypt intermediate CA expired today Sep 29 19:21:40 2021 GMT. The R3 intermediate CA was issuing certs past the expiration date, so some browsers may report NET::ERR_CERT_DATE_INVALID for the websites now. I was able to for…

[image] MrWest: The problem is the INTERMEDIATE cert a stated in the subject of this thread. It isn't updated by certbot (…) Certbot just uses the chain provided by the ACME server. If there is any issue with the chain provided, it's probably user error, as currently there is no known issue …

Hello there, For a few hours I have been having the same problem on some random navigators. I have Nginx as an application server. Regenerate the certificate, I am using the fullchain certificate, I check the intermediate chain and it looks good (as in the examples above). Certificate chain 0 s:…

I see only: --- Certificate chain 0 s:/CN=janis.rocketpin.com i:/C=US/O=Let's Encrypt/CN=R3 1 s:/C=US/O=Let's Encrypt/CN=R3 i:/C=US/O=Internet Security Research Group/CN=ISRG Root X1 --- Did you change something after that post?

[image] tk6ix9ine: The same browsers with problems entering my site, have problems entering https://community.letsencrypt.org/ Then the problem may be within those browsers / Operating Systems. So which browser? Which O/S?

Thanks! That seems to be solution in my case. :beers:

[image] Nummer378: [image] MrWest: The problem is the INTERMEDIATE cert a stated in the subject of this thread. It isn't updated by certbot It is. You were probably using an incorrect configuration. Just to be clear about this, Certbot updates the files in /etc/letsencrypt/live at e…

Hi rg305, My ACME client is WIN-ACME ver 2.1.10.896. We are deploying the website on Windows/IIS, how can I remove this certs? Thank you very much for your help. Regards Phung.

On Windows, just reboot your server and the old R3 will disappear from your chain.

[image] schoen: If, however, you copy or migrate these files manually to another location, Certbot will no longer update that copy for you, unless you write a custom script using Certbot's --deploy-hook feature. If Certbot isn't updating it, your copy of the chain may get out of sync with the up…

The problem is that the last certificate in the fullchain generated by certbot shows "version": 3, "serialNumber": "4001772137D4E942B8EE76AA3C640AB7", "notBefore": "Jan 20 19:14:03 2021 GMT", "notAfter": "Sep 30 18:14:03 2024 GMT", "caIssuers": [ "http://apps.identrust.com…

R3 Intermediate certificate has expired

Help

Topic		Replies	Views
Help thread for DST Root CA X3 expiration (September 2021) Help	665	169177	December 26, 2021
Questions re: Beginning Issuance from R3 Issuance Tech	59	9929	December 22, 2020
Potential problem with R3 intermediates on Windows servers Client dev	19	6440	August 10, 2021
Why is letsencrypt not fixing DST Root CA X3 issue Help	20	6206	November 3, 2021
Can some one explain how renewal expiration of R3 works? Help	25	3301	October 1, 2021

R3 Intermediate certificate has expired

Related topics