Ssl not working on www, also can't issue

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: www.vernec.com

I ran this command: Tried issuing certificate from Cyberpanel which uses Lets Encrypt

It produced this output:

Cannot issue SSL. Error message: [Mon Dec 16 07:59:25 UTC 2019] Create new order error. Le_OrderFinalize not found. { “type”: “urn:ietf:params:acme:error:rateLimited”, “detail”: “Error creating new order :: too many certificates already issued for exact set of domains: vernec.com,www.vernec.com: see https://letsencrypt.org/docs/rate-limits/”, “status”: 429 } [Mon Dec 16 07:59:25 UTC 2019] Please add ‘–debug’ or ‘–log’ to check more details. [Mon Dec 16 07:59:25 UTC 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [Mon Dec 16 07:59:26 UTC 2019] Create new order error. Le_OrderFinalize not found. { “type”: “urn:ietf:params:acme:error:rateLimited”, “detail”: “Error creating new order :: too many certificates already issued for exact set of domains: vernec.com: see https://letsencrypt.org/docs/rate-limits/”, “status”: 429 } [Mon Dec 16 07:59:26 UTC 2019] Please add ‘–debug’ or ‘–log’ to check more details. [Mon Dec 16 07:59:26 UTC 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh 0,283 Failed to obtain SSL for domain. [issueSSLForDomain]

When checked for SSL issues, it said: None of the common names in the certificate match the name that was entered (www.vernec.com). You may receive an error when accessing this site in a web browser.

My web server is (include version): Openlitespeed

The operating system my web server runs on is (include version): Ubuntu

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Cyberpanel

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

1 Like
2

Hi @gkartikey

checking your domain you have created 11 certificates in the last 7 days - https://check-your-website.server-daten.de/?q=vernec.com#ct-logs

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com - 1 entries duplicate nr. 5 next Letsencrypt certificate: 2019-12-16 10:04:06
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com - 1 entries duplicate nr. 4
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com - 1 entries duplicate nr. 3
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com, www.vernec.com - 2 entries duplicate nr. 5 next Letsencrypt certificate: 2019-12-16 11:15:13
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com, www.vernec.com - 2 entries duplicate nr. 4
Let's Encrypt Authority X3 2019-12-15 2020-03-14 vernec.com - 1 entries duplicate nr. 2
Let's Encrypt Authority X3 2019-12-13 2020-03-12 www.vernec.com - 1 entries duplicate nr. 1
Let's Encrypt Authority X3 2019-12-10 2020-03-09 vernec.com, www.vernec.com - 2 entries duplicate nr. 3
Let's Encrypt Authority X3 2019-12-09 2020-03-08 vernec.com, www.vernec.com - 2 entries duplicate nr. 2
Let's Encrypt Authority X3 2019-12-09 2020-03-08 vernec.com, www.vernec.com - 2 entries duplicate nr. 1
Let's Encrypt Authority X3 2019-12-09 2020-03-08 vernec.com - 1 entries duplicate nr. 1

Where are these? Why don't you use one of these?

Please read

What tool do you use? Looks like that "Cyperpanel" needs an update, so your acme.sh must be updated.

And you use one of the new certificates:

CN=vernec.com
	15.12.2019
	14.03.2020
expires in 89 days	vernec.com - 1 entry

But that's the non-www version. Your non-www works, your www has the wrong certificate.

So check the documentation of that tool how to install (not create) one of the existing certificates with both domain names.

2 Likes
3

Hi,

How to install (not create ) one of the existing certificates with both domain names on the terminal or directly on Cyberpanel?

4

I don't know. Check the documentation of that Cyperpanel, I have no idea how that works.

1 Like
5

Hi,

How to install (not create) on Ubuntu Terminal? Any specific documentation?

6

You can follow the certbot instructions. You may want to check out the openlightspeed documentation too.

7

Hi,

I got the following error while installing using openlitespeed documentation:
Problem binding to port 80: Could not bind to IPv4 or IPv6.

8

According to your last message, did you try to install a new copy of openlitespeed or use your existing version? If you tried to install a new copy, that's most likely why you're unable to bind to port 80/tcp. You should not have to install a new copy of the webserver.

Check that you already have a webserver bound to port 80.

sudo netstat -plunt
9

Yes, Cyberpanel is bound to port 80, and openlitespeed is running.

10

I again tried using Certbot’s – No, I need to keep my web server running command for vernec.com.
sudo certbot certonly --webroot

After that I got the output that live directory exists for vernec.com. So, should I try for www.vernec.com the same commands?

11

Check out this Cyberpanel documentation.

1 Like
12

Hey, I tried that same documentation in the morning, it didn’t work.

But this time it did. The issue is, it didn’t go exactly as mentioned in the screenshot. The process was complete. After that, I checked using SSL Checker that it was installed correctly or not. But it said the same thing that: None of the common names in the certificate match the name that was entered (www.vernec.com). You may receive an error when accessing this site in a web browser.

And yes the site is still giving an SSL error.

1 Like
13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.