Same certificate name different expiry dates

[okello23]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: https://ughim.cphluganda.org

I ran this command: openssl s_client -connect ughim.cphluganda.org:8080 -status

It produced this output: Expired certificate

My web server is (include version): nginx

The operating system my web server runs on is (include version): ubuntu 16.04LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

[JuergenAuer]

Hi @okello23

@okello23

My domain is: https://ughim.cphluganda.org

that's only a problem of your port 8080.

See your connections ( https://check-your-website.server-daten.de/?q=ughim.cphluganda.org ):

What's running on port 8080? It's not an Ookla speedtest.

Your port 443 has the new certificate:

CN=ughim.cphluganda.org
	26.08.2019
	24.11.2019
expires in 56 days	ughim.cphluganda.org - 1 entry

Looks like you have to install the certificate on your port 8080 with additional steps.

[okello23]

Thank you @JuergenAuer for the quick reply.

@JuergenAuer

What’s running on port 8080? It’s not an Ookla speedtest.

I'm using this port for sending some data through an API to a mediator. It was all working fine until the certificate expired. and I started receiving this error ERROR - UgandaHimHttpURLConnection.sendPostByWithBasicAuth(163) |2019-09-29 11:55:59,347| javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed

@JuergenAuer

Looks like you have to install the certificate on your port 8080 with additional steps.

How do I go about this?

[JuergenAuer]

@okello23

How do I go about this?

How did you installed the existing, expired certificate?

Do that again.