-
PSA: #x3colypse Please check your fullchain.pem that you NOT include ISRG Root X1 which points to expired DST Root CA X3 it's this one -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAg... ...PAQw4dy753ec5 -----END CERTIFICATE----- delete it and restart server to save the internet
❤️ 3 Favorites
Mood +3 🙂
-
Also be aware that Ubuntu 20.04 (and probably many others) ships with a really old certbot which will put back that certificate into fullchain.pem on renewal. Seems my recently new acme.sh does the same. cc: @Scott_HelmePermalink
Mood 0