The site, https, is showing as insecure, http, OK

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:shop.tv.br

I ran this command:https://shop.tv.br

It produced this output:ERR_CONNECTION_REFUSED

My web server is (include version):Ubuntu 18.04.4 Apache/2.4.29

The operating system my web server runs on is (include version):Ubuntu 18.04.4 Apache/2.4.29

My hosting provider, if applicable, is:kamatera.com

I can login to a root shell on my machine (yes or no, or I don’t know):yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):certbot 0.31.0

2

Hi @Adauto

your certbot command is required. And the output of that command. If there is no certificate created, the result is expected.

3

Hi JuergenAuer, some hours ago, I added Letsencrypt to shop.tv.br, 138.128.241.215, it took just a few minutes, but the site is showing as insecure:

IMPORTANT NOTES: certbot 0.31.0

  • Congratulations! Your certificate and chain have been saved at:
    /etc/letsencrypt/live/shop.tv.br/fullchain.pem
    Your key file has been saved at:
    /etc/letsencrypt/live/shop.tv.br/privkey.pem
    Your cert will expire on 2020-08-24. To obtain a new or tweaked
    version of this certificate in the future, simply run certbot
    again. To non-interactively renew all of your certificates, run
    “certbot renew”
4

Hi JuergenAuer, after I ran the certbot command:
root@mybox:~# certbot
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
No names were found in your configuration files. Please enter in your domain
name(s) (comma and/or space separated) (Enter ‘c’ to cancel): shop.tv.br
Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn’t close to expiry.
(ref: /etc/letsencrypt/renewal/shop.tv.br.conf)
What would you like to do?

1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)

Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): c
Operation canceled.

Thanks, Adauto

5

There

is your job.

A working port 80 vHost is required, so Certbot can use that vHost as template to create a port 443 vHost.

Add one. Your documentation has samples.

6

Thanks JuergenAuer, I did that and reinstalled the domain, it’s working OK now, thanks, Adauto