{"id":56666,"date":"2023-09-11T13:40:47","date_gmt":"2023-09-11T10:40:47","guid":{"rendered":"https:\/\/tuthost.ua\/faq\/why-did-sites-with-free-let-s-encrypt-ssl-certificates-stop-working\/"},"modified":"2024-07-19T19:17:34","modified_gmt":"2024-07-19T16:17:34","slug":"why-did-sites-with-free-let-s-encrypt-ssl-certificates-stop-working","status":"publish","type":"ht_kb","link":"https:\/\/tuthost.ua\/en\/faq\/why-did-sites-with-free-let-s-encrypt-ssl-certificates-stop-working\/","title":{"rendered":"Why did sites with free Let’s Encrypt SSL certificates stop working?"},"content":{"rendered":"\n

If you are using outdated devices or outdated software,<\/p>\n\n

you can observe an error on your site that it’s not secure,<\/p>\n\n

even though the certificate was installed successfully.<\/p>\n\n

This is caused by an expired DST Root CA X3 root certificate<\/p>\n\n

On September 30, the DST Root CA X3 certificate expired,<\/p>\n\n

that verified the security of Let’s Encrypt certificates<\/p>\n\n

A new certificate that validates certificates from Let’s Encrypt<\/p>\n\n

is codenamed ISRG Root X1.<\/p>\n\n

Accordingly, all devices and operating systems that have been released <\/p>\n\n

before the ISRG Root X1 certificate was generated<\/p>\n\n

do not consider Let’s Encrypt certificates to be secure and may generate an error.<\/p>\n\n

Legacy systems that may have access problems:<\/p>\n\n

– Windows XP up to SP3 version<\/p>\n\n

– macOS up to version 10.12<\/p>\n\n

– iOS to version 10<\/p>\n\n

– Android up to version 2.3<\/p>\n\n

– Ubuntu up to version 16<\/p>\n\n

– Debian up to version 8<\/p>\n\n

– Older models of smart TVs and IOT devices.<\/p>\n\n

To fix this situation you can install ISRG Root X1 certificate on your system yourself.<\/p>\n\n

Download it from this link – https:\/\/letsencrypt.org\/certificates<\/a><\/p>\n\n

Select the .der certificate there<\/p>\n\n

Active ISRG Root X1 (RSA 4096, O = Internet Security Research Group, CN = ISRG Root X1)Self-signed: der, pem, txt<\/td><\/tr><\/tbody><\/table><\/figure>\n

When you run this certificate, a certificate installation dialog box should open:<\/p>\n\n

\"\"<\/figure>","protected":false},"excerpt":{"rendered":"

If you are using outdated devices or outdated software, you can observe an error on your site that it’s not secure, even though the certificate was installed successfully. This is caused by an expired DST Root CA X3 root certificate On September 30, the DST Root CA X3 certificate expired, that verified the security of…<\/p>\n","protected":false},"author":13,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"inline_featured_image":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","ghostkit_customizer_options":"","ghostkit_custom_css":"","ghostkit_custom_js_head":"","ghostkit_custom_js_foot":"","ghostkit_typography":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"ht-kb-category":[10696],"ht-kb-tag":[],"class_list":["post-56666","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-ssl-certificates"],"taxonomy_info":{"ht_kb_category":[{"value":10696,"label":"SSL certificates"}]},"featured_image_src_large":[],"author_info":{"display_name":"\u0414\u0430\u0432\u0438\u0434","author_link":"https:\/\/tuthost.ua\/en\/author\/david-tuthost-com\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb\/56666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/comments?post=56666"}],"version-history":[{"count":1,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb\/56666\/revisions"}],"predecessor-version":[{"id":56667,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb\/56666\/revisions\/56667"}],"wp:attachment":[{"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/media?parent=56666"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb-category?post=56666"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/tuthost.ua\/en\/wp-json\/wp\/v2\/ht-kb-tag?post=56666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}