Skip to main content
We are aware of an issue with a recent Apache update that causes proxied sites to return a "421 Misdirected Request" error. Please see the following article for more information and updates:
Websites show 421 Misdirected Request error while using EA Nginx

service generated warnings while checking SSL certificates

rolinger
Starting a week ago on Dec 7th I have been two types of emails every morning at 4am EST related to SSL certs failing checks or updates. Are these due to more Sectigo outages? 1. The first more specific SSL cert checks/renewals emails I am getting are all for SERVICE SSLs (ie: ftp, exim, dovecot,cpanel), this doesn't appear to be impacting my public facing domains. Subject: The SSL (Secure Sockets Layer) certificate for "exim" on "x.x.x.x.host.secureserver.net Messaage:
The SSL certificate for "exim" on "x.x.x.x.host.secureserver.net" will expire in less than 30 days.
The certificate has the following properties:
Domains: x.x.x.x.host.secureserver.net
Issuer: cPanel, Inc.
Key Size: 4096
Expires: Saturday, December 31, 2022 at 11:59:59 PM UTC
You need to install a new certificate as soon as possible. You can do this with WHM"s "Manage Service SSL Certificates" interface at
This notice is the result of a request from "/usr/local/cpanel/bin/checkallsslcerts". The system generated this notice on Wednesday, December 14, 2022 at 7:19:26 AM UTC. "cPanel service SSL certificate warnings" notifications are currently configured to have an importance of "Medium". You can change the importance or disable this type of notification in WHM"s Contact Manager at:

Comments

4 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! The first notification about Exim is just letting you know the hostname certificate will expire. It will be automatically renewed as the expiration date gets closer. The second notification, also about the hostname certificate, is the classic Sectigo error, but that should also resolve itself. If the expiration gets too close for comfort, please submit a ticket to our team.
    0
  • rolinger
    When is the expectation of "should resolve itself"? Because I continue to get emails every day that the renewal services are failing.
    0
  • mmaciel
    Hey there! The first notification about Exim is just letting you know the hostname certificate will expire. It will be automatically renewed as the expiration date gets closer. The second notification, also about the hostname certificate, is the classic Sectigo error, but that should also resolve itself. If the expiration gets too close for comfort, please submit a ticket to our team.

    Hello, i'm having the exact same problem with my hostname cert if i run the checkallsslcerts command, i get this: [QUOTE] The system will attempt to install a certificate for the "exim/dovecot" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "exim/dovecot" service. The cPanel Store is processing the hostname certificate request. The system will check the cPanel Store again the next time that "/usr/local/cpanel/bin/checkallsslcerts" runs.
    if i try to run the command again, i get the same message we have less than 15 days til the cert expires and we've been getting these alerts for over two weeks now worth noting that only the hostname cert is presenting this problem, the individual accounts certs are (apparently) fine
    0
  • cPRex Jurassic Moderator
    @mmaciel - 15 days is still plenty. If it gets to 3 days and still doesn't renew, let us know, but that message indicates the order has been sent and Sectigo is processing it. @rolinger - submit a ticket and we can check it out.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post