Problems with certificate

techman141102

• June 13, 2017 16:36

I have a certificate problem on my server. Cpanel & WHM 64.0 (build 24) on Centos 6.9 There appears to be an expired certificate still installed and I get 'confirm security exception' messages when sending email from a mail client. running the standard online SSL tests return a valid certificate but a specific mailserver test returns the expired certificate, so it appears to only affect SMTP. There are no expired certificates visible under the cPanel account login. In WHM the current certificate is showing as installed under 'Manage SSL hosts', and under 'Manage service SSL certificates' the current certificate is showing for the Exim(SMTP) service. Help needed, thanks.

• 

  cPanelMichael

  • June 14, 2017 13:01

  Hello, Could you verify which email client you are using, and if you are using the domain name or the server's host name in the email client's SMTP settings? Thank you.

  0
• 

  techman141102

  • June 14, 2017 21:29

  I am using the domain name - 'example.com.au' in the SMTP settings If I use Thunderbird it asks to confirm the security exception and then stores it. Outlook does not store the security exception but asks every time you send an email. POP and IMAP work ok. The test on ssl-tools.net/mailservers also returns an expired certificate Thanks

  0
• 

  Infopro

  • June 14, 2017 22:30

  The cert for that domain shows me that it expires July 2018.

  0
• 

  techman141102

  • June 15, 2017 02:40

  Yes I know. A SSL server check shows a certificate that expires July 2018 and this is what is listed as installed in cPanel and WHM, but a mailserver check such as the one at ssl-tools.net shows a certificate that expires on July 2014 and this is the certificate that the email clients see. As you can see this problem started in 2014 and I gave up trying to resolve it as most email clients are fine once you confirm the security exception but Outlook won't save the exception and it gets really annoying having to confirm the exception for every email sent. I am using SSL/TLS on port 465. Forgot to include this previously. Below is the information returned from ssl-tools.net - Removed - Please don't post actual domain names IPs or email addresses. Also, wrapping output in code tags makes things easier to read.

  0
• 

  Infopro

  • June 15, 2017 03:00

  Under the Cert chain section is says: Unknown Authority Crazy Domains (DV) Certification Authority I think I might contact them and ask about this, assuming that's where you purchased the cert.

  0
• 

  techman141102

  • June 18, 2017 11:46

  Yes, that's where I purchased the certificate. Could that be the reason why it is still hanging around on my server ?

  0
• 

  cPanelMichael

  • June 19, 2017 16:53

  Hello, Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look at the affected system. You can post the ticket number here so we can update this thread with the outcome. Thank you.

  0

Please sign in to leave a comment.