Finally solved by installing Let's Encrypt R3 cert manually:
sudo wget --no-check-certificate
https://letsencrypt.org/certs/lets-encrypt-r3.pem -O
/usr/local/share/ca-certificates/lets-encrypt-r3.crt
sudo update-ca-certificates
On 02.11.21 20:42, g4-l...@tonarchiv.ch wrote:
> I think the
I think the problem is that the ISRG_Root_X1 is still signed by
DST_Root_CA_X3 and this is outdated:
~$ openssl x509 -text -noout -in
/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
Same issue here with Focal.
I run update-ca-certificates:
0 added, 0 removed; done.
Both certs DST Root X3 and ISG Root X1 are installed:
/etc/ssl/certs/DST_Root_CA_X3.pem ->
/usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt
/etc/ssl/certs/ISRG_Root_X1.pem ->
