https://crt.sh/?q=48504E974C0DAC5B5CD476C8202274B24C8C7172 The R3 Let's Encrypt intermediate CA expired today Sep 29 19:21:40 2021 GMT. The R3 intermediate CA was issuing certs past the expiration date, so some browsers may report NET::ERR_CERT_DATE_INVALID for the websites now. I was able to for…

I'm having the same issue. my server is a Go REST api that uses the fullchain.pem file. I used the current certbot snap on ubuntu 18.04 to force-renew a new cert today. How do I get certbot to use the R3-new and not the R3-old? is this something that I need to do in certbot, or the cert listings…

I saw this exact problem on my Mac. Whatever the cause (and I can't pinpoint it) the solution was to modify my server to use 'fullchain.pem' instead of 'cert.pem' for dovecot imap. That solved the problem for all my personal email domains on my server.

Hi @aparduhn , welcome to the LE community forum :slight_smile: [image] aparduhn: How do I get certbot to use the R3-new and not the R3-old? certbot gets what LE provides. [which has been the new R3 for quite some time now] [image] aparduhn: is this something that I need to do in certbo…

Hi all - I'm a new user and had an AWS expert set up my certs. Today, both of my websites, with current, valid certs, are showing as expired, and users are getting the "This connection is not private" warning message on Safari in iOS. Can anyone guide me here? @BrianCanFixIT - how did you "force …

[image] craigheitkamp: Can anyone guide me here? What ACME client are you using? Which of those cert renewal files are being used by your service?

Certs are managed on AWS Certificate Manager. I'm not sure how to answer your 2nd question. (novice here)

[image] craigheitkamp: Can anyone guide me here? Check to see that you're using 'fullchain.pem' - that solved all my Mac OS and IOS problems with no change on the client side.

Based on what you said, that sounds like my problem (issues are isolated to Mac OS and iOS users. Now, novice user here, where would I check for that and/or update to "fullchain.pem?"

If you can, test to see what is being served by your service. Try something like: openssl s_client -connect EXAMPLE.APP:443 -servername EXAMPLE.APP

R3 Intermediate certificate has expired

Help

aparduhn September 29, 2021, 10:59pm 16

Thank you so much for the quick response. I'm using OpenSSL 1.1.1 11 Sep 2018. and the version of certbot is installed: 1.19.0 (1434) 44MB classic

Topic		Replies	Views
Help thread for DST Root CA X3 expiration (September 2021) Help	665	170624	December 26, 2021
Questions re: Beginning Issuance from R3 Issuance Tech	59	10038	December 22, 2020
Potential problem with R3 intermediates on Windows servers Client dev	19	6484	August 10, 2021
Why is letsencrypt not fixing DST Root CA X3 issue Help	20	6241	November 3, 2021
Can some one explain how renewal expiration of R3 works? Help	25	3377	October 1, 2021

R3 Intermediate certificate has expired

Related topics