Certificate issue

[Siress]

Had to grant a security exception to get to the site today due to "SEC_ERROR_EXPIRED_CERTIFICATE" yet the Let's Encrypt certificate states that it's valid until tomorrow.

Paging Nish

[scottieb]

Same here.

[AnarchicArctic]

Ditto

[latches109]

certbot renew --force-renewal

expired for me force it

[zinger565]

Definitely still expired. Had to grant exception just now.

[NONOBLITUS]

Yup had the same thing here.

[iamthelazerviking]

Same

[Timber_Ghost]

Same here

[MrBarraclough]

Still expired as of 2:00pm CDT on 2022-06-12.

[Carp]

Big thanks to whomever fixed this issue. I'm able to post again in the forum now...woohoo!

[Siress]

Big thanks to whomever fixed this issue. I'm able to post again in the forum now...woohoo!

The certs automatically renew at the expired time. The oddity here is that it was being reported as expired before its expiry time.

[Carp]

I'm just glad it's over! I was able to visit/see MCB in "Unsafe" mode but, was unable to do anything else besides look.😞

[latches109]

The certs automatically renew at the expired time. The oddity here is that it was being reported as expired before its expiry time.

your server and or user agents have misconfigured time zones. all certs issued with UTC/GMT. You can backdate an hour to help or issue and start using @day N+1. But really check your servers NPT synchronization and timezone.

for example on ubuntu.

$ Date

see the servers date.

$ timedatectl list-timezones

output: list of available timezones
set the desired timezone:

$ sudo timedatectl set-timezone America/New_York

check it was set correctly

$ Date

you can check that the NTP time sync is on

$ timedatectl

if not, and you want it on:

$ sudo timedatectl set-ntp on

[Siress]

your server and or user agents have misconfigured time zones. all certs issued with UTC/GMT. You can backdate an hour to help or issue and start using @day N+1. But really check your servers NPT synchronization and timezone.

Maybe the MCB server time is off, but I think it's just bad practice. My rule is to renew certificates 2-4 weeks before they expire to avoid these service interruptions. Too few commonalities among those of us reporting the issue for it to be a non-standard user agent issue.

[latches109]

Certbot will auto-renew every 90days. I haven’t had any problems with them for a long time

[Siress]

Is this related?

[Carp]

Currently invalid certificate again...😥