R3 SSL done, but still Not secured

toideal · August 5, 2021, 3:55pm

hello, i'm a very beginner who use a synology server.
at the last year, there was no issue to use Let's encrypt SSL certificate.
but, i don't know when this issue began.

the SSL connection test result :
Test Results: peace3461.synology.me - Why No Padlock?

My domain is: https://peace3461.synology.me

I ran this command: "Not secured" via chrome, edge.

It produced this output:

NET::ERR_CERT_AUTHORITY_INVALID
Subject: peace3461.synology.me

Issuer: R3

Expires on: 2021. 9. 16.

Current date: 2021. 8. 6.

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Certificate Transparency:

SCT DigiCert Yeti2021 Log (Embedded in certificate, Verified)

SCT Google 'Argon2021' log (Embedded in certificate, Verified)

My web server is (include version): Synology

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): maybe yes, but i don't want to do something for the DSM default setting cause i'm very beginner.

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): could do by DSM setting panel.

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Osiris · August 5, 2021, 5:13pm

Your cert and chain seems to be fine when I check it with OpenSSL from here and also my Chromium works nicely: no certificate error, I can see your Synology login screen perfectly?

Perhaps you need to clear the browsers cache?

rg305 · August 5, 2021, 7:49pm

I also can't find any real reason why you would get such a warning.
Even when checking on port 5001, it still looks good

I would try appending this cert to your chain and see if your problems subside:

If so, then your certificate store is likely outdated.

toideal · August 6, 2021, 12:18am

Thanks, already done. but... there is no effect.

toideal · August 6, 2021, 12:31am

thanks, but, still problem.

the message of Edge, Chrome is the certificate is not valid.
(however, the end date of R3 certificate is 2021-Sep-16. )

OS: windows 10 home
ver: 20H2
install date : 2021-mar-15
OS build : 19042.1083

in case of accessing my phone (android 10), there is no problem.

is this problem only for my computer ?

webprofusion · August 6, 2021, 2:19am

Looks good to me on Chrome and Edge (Windows 11). Check your computers date and time is accurate to the minute (let windows set it automatically) and make sure you are accessing your own website through the exact same website address (not a local machine name);

If there is an error in Chrome it will usually show a more specific ERR_ message that describes the problem. I assume you are not using any local proxying tools or http debugging tools.

rg305 · August 6, 2021, 3:15am

I don't see the additional cert that I provided you.

system · September 5, 2021, 3:16am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.