# SSL Certificate Error **URL:** \ **Category:** Help\ **Created:** [October 4, 2021, 2:34pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967 "2021-10-04T14:34:10Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![siddhifinity](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@siddhifinity](https://community.letsencrypt.org/u/siddhifinity)\ **Post date:** [October 4, 2021, 2:34pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/1 "2021-10-04T14:34:10Z")
We are receiving the following error: “**HandshakeException: Handshake error in client (OS Error: CERTIFICATE\_VERIFY\_FAILED: certificate has expired(handshake.cc:359))**”. after september 30 our apis are not working on the lower versions of android devices. that's why we are facing issue. We need help related to this. Our website is hosted on pythonanywhere and our app is developed on flutter platform. ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 4, 2021, 3:02pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/2 "2021-10-04T15:02:49Z")
@siddhifinity Welcome to the forum. I think you may be better off getting help at pythonanywhere: [https://www.pythonanywhere.com/forums/](https://www.pythonanywhere.com/forums/) They are more familiar with how to setup apps in their environment. I see they just helped someone with a similar problem: [https://www.pythonanywhere.com/forums/topic/30391/](https://www.pythonanywhere.com/forums/topic/30391/) If you want someone here to help we will need more info. Please fill out the questions you were shown when posting. Thanks ============================================ Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don't know): I'm using a control panel to manage my site (no, or provide the name and version of the control panel): The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 4, 2021, 6:40pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/3 "2021-10-04T18:40:46Z")
@siddhifinity Also have a look at: [Ubuntu Android problem - #565 by sornrak-kp](https://community.letsencrypt.org/t/ubuntu-android-problem/161674/565) ---
**Author:** ![siddhifinity](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@siddhifinity](https://community.letsencrypt.org/u/siddhifinity)\ **Post date:** [October 5, 2021, 12:38pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/4 "2021-10-05T12:38:27Z")
I already mail to pythonanywhere's support but they told that our code is using OpenSSL \< 1.1.0 in older versions of Android, that could potentially cause problems. How can I resolved this issue? Is anything needs to install from server side? please help us in that. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 2:00pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/5 "2021-10-05T14:00:53Z")
@siddhifinity On the server side: - if using OpenSSL, see: [Old Let’s Encrypt Root Certificate Expiration and OpenSSL 1.0.2 - OpenSSL Blog](https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/) - if requiring support for older android devices, use the longer/default trust path cert that ends with "DST Root CA X3 (expired)" - if NOT requiring support for older android devices, then use the shorter trust path cert that ends with "ISRG Root X1" There are two ways to do that: 1. automated: add _`--preferred-chain "ISRG Root X1"`_ to the renewal request and reissue your cert(s) 2. manual: remove the last cert from the `fullchain.pem` (or `chain.pem`) file - if having to use either path limits the number of supported clients, then: you many have to switch to another (free) CA that support ACME protocol. Like: `BuyPass.com & ZeroSSL.com` ---
**Author:** ![siddhifinity](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@siddhifinity](https://community.letsencrypt.org/u/siddhifinity)\ **Post date:** [October 5, 2021, 2:43pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/6 "2021-10-05T14:43:38Z")
Thank you for the solution. please give any reference related add _`--preferred-chain "ISRG Root X1"`_ to the renewal request and reissue your cert(s) on pythonanywhere's server. I never faced issue related to ssl certificate before this. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 3:02pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/7 "2021-10-05T15:02:10Z")
@siddhifinity I'm not familiar with "pythonanywhere". Is that an ACME client or a web server or what? Did you read?: [Changing your system image | PythonAnywhere help](https://help.pythonanywhere.com/pages/ChangingSystemImage/) ---
**Author:** ![siddhifinity](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@siddhifinity](https://community.letsencrypt.org/u/siddhifinity)\ **Post date:** [October 5, 2021, 3:50pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/8 "2021-10-05T15:50:02Z")
"pythonanywhere" is a web server. my site is hosted on pythonanywhere. I used Django framework to develop this site, and used Rest framework to make apis which are currently used on the android and IOS apps. now from Sep 30 that apis are not supports for older android devices. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 4:28pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/9 "2021-10-05T16:28:13Z")
> [@siddhifinity](#): > > pythonanywhere" is a web server. Do you manage the server you use, or is it via a managed service? Can you control the ACME client there? > [@siddhifinity](#): > > I used Django framework to develop this site Do you specify which cert files are being used? ---
**Author:** ![siddhifinity](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@siddhifinity](https://community.letsencrypt.org/u/siddhifinity)\ **Post date:** [October 5, 2021, 5:29pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/10 "2021-10-05T17:29:14Z")
I used the default certificate (ie. Let's Encrypt) provided by pythonanywhere so I just by selecting that.. No need to do anything with files. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 6:04pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/11 "2021-10-05T18:04:25Z")
So, is there still a problem? ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 4, 2021, 6:04pm UTC](https://community.letsencrypt.org/t/ssl-certificate-error/161967/12 "2021-11-04T18:04:48Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.