Question

"R3" Certificate has expired

Hello all,

So today some users have said the SSL has failed on our site with the error

“R3” Certificate has expired

Most users seem to be Apple devices - it works okay on Windows/non-Apple.

Having looked into it and done hard renews and such, the SSL seems to be okay. But having read further (links below), I think it may be something bigger?

The site is using Bookstack, and Bookstack itself gives an install script, so this is all a bit beyond my knowledge.

Is this a server mis-configuration? Anyone got any ideas on how to resolve this?


Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

Hello,

Indeed it is a problem with the Root CA rather than the individual certificates. Let’s Encrypt announced the DST Root CA X3 expiration recently.

For more information on the announcement and possible solutions you can visit this page here:

https://community.letsencrypt.org/t/help-thread-for-dst-root-ca-x3-expiration-september-2021/149190

They also announced it on Twitter too:

https://twitter.com/letsencrypt/status/1443621997288767491

Let me know how it goes! Best, Bobby