[solved] Wrong domain order

[nelchael81]

I have create a certificate for domain01.it.
I have used this order for domains: domain01.it, staff,domain01.it, www,domain01.it.
All domains work fine.
This is /etc/letsencrypt/renewal/www.domain01.it content:

[renewalparams]
authenticator = webroot
installer = None
account = xxxxxxxxxxxxx
webroot_path = /var/www/domain01/public,
rsa_key_size = 2048
[[webroot_map]]
domain01.it = /var/www/domain01/public
staf,domain01.it = /var/www/domain01/public
www,domain01.it = /var/www/domain01/public

I have create a certificate form domain02.it, but i have used this order for domain:
www,domain02.it, domain02.it, staff.domain02.it
staff.domain02.it dont’work.
This is /etc/letsencrypt/renewal/domain02.it content:

cert = /etc/letsencrypt/live/domain02.it/cert.pem
privkey = /etc/letsencrypt/live/domain02.it/privkey.pem
chain = /etc/letsencrypt/live/domain02.it/chain.pem
fullchain = /etc/letsencrypt/live/domain02.it/fullchain.pem

[renewalparams]
account = xxxxxxxxxxxxx
authenticator = webroot
rsa_key_size = 2048
installer = None
webroot_path = /var/www/domain02/public,
[[webroot_map]]
www,domain02.it = /var/www/domain02/public
domain02.it = /var/www/domain02/public
staff,domain02.it = /var/www/domain02/public

what can i do for solving this problem?

[Osiris]

I’m very sorry, but my crystal ball was damaged yesterday, so I’m missing some info… Somewhere in your post, mostly containing two renewal configs, I’m only seeing “dont’work”. But I fail to understand what exactly isn’t working and what the actual problem is? Because just the order of the domains shouldn’t give you any trouble at all.

[nelchael81]

Ok, i’m sorry.
This is the ssllabs results of the second domain:
https://www.ssllabs.com/ssltest/analyze.html?d=staff.materameteo.it&latest

[nelchael81]

Ok, is an error of nginx config!!!
I have not change the certificate.
Sorry