certificate has expired or is not yet valid

+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABfEpFDPcAAAQDAEYwRAIgErQP LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AEalVet1 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov元IzLmkubGVuY3Iuī3JnLzAcBgNVHREEFTATghFtZWRpYS5sdW1pLmNvbS52bjBMBgNVHSAERTBDMAgGīmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz Y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GĪ1UdDgQWBBQ2XVQO2KN5HDBdhauIqMg2ffYQ6zAfBgNVHSMEGDAWgBQULrMXt1hW P67fWWO8ym/soqSwZ29To6MNCwIDAQABo4ICTDCCAkgwDgYDVR0PAQH/BAQDAgWg ZHyi8+xzKIQoQUn0WVi+oZScKPmDVQo0/PcwqqLUSIAXzfBYvD2qM8elA/u8SyRN R5KiglDmyIPgEBrja6AI1T5leU62iHH5wFFxS1lL+DecQXGAtoExg6pwZG4iWUFl L8vauz2XWlDL9CBjxKrkZu0hJshs22co4DwuoM2R2BqztNlMT+6fvAjTSEpMpihIįtm/vo2nmlJ3O/CyAaAkreV+ngvwuoz45rgvvpG8TIx/T/oZmYFAynbnQEEF0QLx MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDĮwJSMzAeFw0yMTEwMDQwNjQ2NTFaFw0yMjAxMDIwNjQ2NTBaMBwxGjAYBgNVBAMTĮW1lZGlhLmx1bWkuY29tLnZuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCĪQEA622bTUw+Jo+KHtL5FK8iQ4ktlKqBA/AJR/wVkE1ZE6iklRJkLnWja4MsLXYt MIIFKDCCBBCgAwIBAgISBDFLWhP7wN8VRsrfPT6ERVq9MA0GCSqGSIb3DQEBCwUA I'm new changed file fullchain.pem and restarted nginx Certificate chain He8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3t圎+FiYruq9RUWhiF1myv4Q6W+CyBFCĭfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5Ĭan you check again. WCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9O MA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDCĥWxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSWĩMUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuG U1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26Ztu +tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEBĪTAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQuī3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9E SwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1Ĭ3QuY29t元Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx TwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw PRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TND SLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2ql Xmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4įQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBc SR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZ LtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntKĤEwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5īHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5y WYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+D TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhĬmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEBĪQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XC MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTĭkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1ow

MIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/ The last cert is still being served: 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1 certbot certonly -apache -d $ -dry-run -preferred-chain='ISRG Root X1' You can make the change permanently by editing the configuration of your ACME client to request the alternate chain. You can make that change manually by editing the chain file used by your webserver. just remove the cross-signed ISRG Root X1 from the chain), I suspect that your client(s) will begin to trust your server again. I:/C=US/O=Internet Security Research Group/CN=ISRG Root X1

I:O = Digital Signature Trust Co., CN = DST Root CA X3 I:C = US, O = Internet Security Research Group, CN = ISRG Root X1Ģ s:C = US, O = Internet Security Research Group, CN = ISRG Root X1 $ openssl s_client -connect :443 -servername ĭepth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1ĭepth=1 C = US, O = Let's Encrypt, CN = R3 Hi the certificate chain you're serving which needs to change.

Certificate has expired or is not yet valid