Unable to install SSL certificate. Please help

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
www.storyalerts.com

I ran this command:
$ openssl s_client -connect www.storyalerts.com:443 -showcerts 2>/dev/null | openssl x509 -noout -subject -issuer -dates

It produced this output:
unable to load certificate
140622014058944:error:0909006C:PEM routines:get_name:no start line:…/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

My web server is (include version):
openlitespeed (1.6.12)

The operating system my web server runs on is (include version):
Ubuntu 18.04.4

My hosting provider, if applicable, is:
Google Cloud

I can login to a root shell on my machine (yes or no, or I don’t know):
Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.31.0

2

The cert being used is NOT from LE:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

image
image419×522 11.4 KB

3

Your command yields this from my system:

openssl s_client -connect www.storyalerts.com:443 -showcerts 2>/dev/null | openssl x509 -noout -subject -issuer -dates
subject=OU = Domain Control Validated, CN = www.storyalerts.com
issuer=C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2
notBefore=May 10 06:34:42 2020 GMT
notAfter=May  9 08:28:25 2021 GMT

Not sure of the relevancy…

Topic says you are unable to install SSL cert - but you already have a valid cert installed.

4

A few hours earlier there was a timeout checking the https version. But I don't know how openlitespeed works.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.