Skip to main content

SSL certificate can't renew

psytanium
Hello, 1 account on my server is unable to renew expired certificate, when checking the Auto SSL logs, i see this error: 10:26:33 AM Analyzing "domain.com" (website) " 10:26:33 AM ERROR TLS Status: Defective ERROR Certificate expiry: 4/16/23, 12:00 AM UTC (3.35 days ago) ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL"s verification (0:10:CERT_HAS_EXPIRED). Any recommendation ? Thanks

Comments

5 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! It sounds like the system may be trying to replace a certificate that wasn't created by AutoSSL. In WHM >> Manage AutoSSL under the "Options" tab, do you have the last box checked next to "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" ?
    0
  • psytanium
    Hey there! It sounds like the system may be trying to replace a certificate that wasn't created by AutoSSL. In WHM >> Manage AutoSSL under the "Options" tab, do you have the last box checked next to "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" ?

    It's happening everytime an SSL cert expire, it seems the server could not renew the certificates. I have to login to the account's cPanel, uninstall the expired cert and generate / install a new one manually. Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates. is enabled already. Thanks for your support,
    0
  • cPRex Jurassic Moderator
    That's just odd - we'd likely need to see this in action through a ticket to have more details, as it shouldn't be behaving like that.
    0
  • psytanium
    It was an issue on Sectigo's end. They are working to find a solution to the rate-limiting incoming requests from the cPanel store; I switched to the Let's Encrypt AutoSSL provider.
    0
  • cPRex Jurassic Moderator
    It was an issue on Sectigo's end.

    Always is :D - I'm glad you found a good workaround!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post