{"id":6845,"date":"2021-09-30T09:01:24","date_gmt":"2021-09-30T09:01:24","guid":{"rendered":"https:\/\/truehost.co.ke\/support\/?post_type=ht_kb&p=6845"},"modified":"2024-06-07T13:03:02","modified_gmt":"2024-06-07T13:03:02","password":"","slug":"how-to-fix-lets-encrypts-dst-root-ca-expiry-issue","status":"publish","type":"docs","link":"https:\/\/truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/","title":{"rendered":"How to Fix Lets Encrypt’s DST Root CA Expiry issue"},"content":{"rendered":"\n

On 30th Sept 2021, the DST Root CA X3 certificate used by Let’s Encrypt expired causing clients some clients to experience SSL certificate expiry errors.<\/p>\n\n\n\n

SSL connections fail with the error below<\/p>\n\n\n\n

The certificate issuer's certificate has expired. Check your system date and time.<\/pre>\n\n\n\n
Mail clients will also fail to connect due to invalid SSL chain.<\/p>\n\n\n\n
Details on the issue can be found on the link below<\/p>\n\n\n\n
https:\/\/letsencrypt.org\/docs\/dst-root-ca-x3-expiration-september-2021\/<\/a><\/p>\n\n\n\n
Fixing the error on cPanel<\/h2>\n\n\n\n
In the cPanel hosting, this has already been resolved by our Support Team. In case you still experience any issues, please reach out to our teams via Ticket\/Email, Chat or Call<\/p>\n\n\n\n
Fixing the error in tPanel\/CWP (Uses Centos 7)<\/h2>\n\n\n\n
To fix the error in tPanel or CWP running on our VPS, follow the steps below<\/p>\n\n\n\n
~$ yum -y update ca-certificates<\/pre>\n\n\n\n
Once run, you can confirm the updated CA Bundle with the command below<\/p>\n\n\n\n
~$ rpm -q ca-certificates\nca-certificates-2021.2.50-72.el7_9.noarch<\/pre>\n\n\n\n
The update ca-certificates-2021.2.50-72.el7_9.noarch replenished the CA Bundles to new ones. This can be confirmed via the command below<\/p>\n\n\n\n
~$ rpm -q ca-certificates --changelog | head\n* Tue Sep 14 2021 Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72\n- Fix expired certificate.<\/span>\n- Removing:\n- # Certificate \"DST Root CA X3\"<\/pre>\n\n\n\n
You can then reissue<\/strong> the SSL to so that a new one with the new chain is generated.<\/p>\n","protected":false},"excerpt":{"rendered":"
On 30th Sept 2021, the DST Root CA X3 certificate used by Let’s Encrypt expired causing clients some clients to experience SSL certificate expiry errors. SSL connections fail with the error below The certificate issuer’s certificate has expired. Check your system date and time. Mail clients will also fail to connect due to invalid SSL […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"doc_category":[],"doc_tag":[],"class_list":["post-6845","docs","type-docs","status-publish","hentry"],"year_month":"2026-06","word_count":223,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"w m","author_nicename":"wm","author_url":"https:\/\/truehost.com\/support\/author\/wm\/"},"doc_category_info":[],"doc_tag_info":[],"yoast_head":"\nHow to Fix Lets Encrypt's DST Root CA Expiry issue -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Fix Lets Encrypt's DST Root CA Expiry issue -\" \/>\n<meta property=\"og:description\" content=\"On 30th Sept 2021, the DST Root CA X3 certificate used by Let’s Encrypt expired causing clients some clients to experience SSL certificate expiry errors. SSL connections fail with the error below The certificate issuer's certificate has expired. Check your system date and time. Mail clients will also fail to connect due to invalid SSL […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-07T13:03:02+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.truehost.com\\\/support\\\/knowledge-base\\\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\\\/\",\"url\":\"https:\\\/\\\/www.truehost.com\\\/support\\\/knowledge-base\\\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\\\/\",\"name\":\"How to Fix Lets Encrypt's DST Root CA Expiry issue -\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#website\"},\"datePublished\":\"2021-09-30T09:01:24+00:00\",\"dateModified\":\"2024-06-07T13:03:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.truehost.com\\\/support\\\/knowledge-base\\\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.truehost.com\\\/support\\\/knowledge-base\\\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.truehost.com\\\/support\\\/knowledge-base\\\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.truehost.com\\\/support\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Fix Lets Encrypt’s DST Root CA Expiry issue\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#website\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/\",\"name\":\"\",\"description\":\"Help In a Click\",\"publisher\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/truehost.com\\\/support\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#organization\",\"name\":\"Truehost Kenya\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/cropped-image_2026-04-16_174808866.png\",\"contentUrl\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/cropped-image_2026-04-16_174808866.png\",\"width\":240,\"height\":48,\"caption\":\"Truehost Kenya\"},\"image\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Fix Lets Encrypt's DST Root CA Expiry issue -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/","og_locale":"en_US","og_type":"article","og_title":"How to Fix Lets Encrypt's DST Root CA Expiry issue -","og_description":"On 30th Sept 2021, the DST Root CA X3 certificate used by Let’s Encrypt expired causing clients some clients to experience SSL certificate expiry errors. SSL connections fail with the error below The certificate issuer's certificate has expired. Check your system date and time. Mail clients will also fail to connect due to invalid SSL […]","og_url":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/","article_modified_time":"2024-06-07T13:03:02+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/","url":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/","name":"How to Fix Lets Encrypt's DST Root CA Expiry issue -","isPartOf":{"@id":"https:\/\/truehost.com\/support\/#website"},"datePublished":"2021-09-30T09:01:24+00:00","dateModified":"2024-06-07T13:03:02+00:00","breadcrumb":{"@id":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.truehost.com\/support\/knowledge-base\/how-to-fix-lets-encrypts-dst-root-ca-expiry-issue\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.truehost.com\/support\/"},{"@type":"ListItem","position":2,"name":"How to Fix Lets Encrypt’s DST Root CA Expiry issue"}]},{"@type":"WebSite","@id":"https:\/\/truehost.com\/support\/#website","url":"https:\/\/truehost.com\/support\/","name":"","description":"Help In a Click","publisher":{"@id":"https:\/\/truehost.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/truehost.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/truehost.com\/support\/#organization","name":"Truehost Kenya","url":"https:\/\/truehost.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/truehost.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2026\/04\/cropped-image_2026-04-16_174808866.png","contentUrl":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2026\/04\/cropped-image_2026-04-16_174808866.png","width":240,"height":48,"caption":"Truehost Kenya"},"image":{"@id":"https:\/\/truehost.com\/support\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/6845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/comments?post=6845"}],"version-history":[{"count":1,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/6845\/revisions"}],"predecessor-version":[{"id":6846,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/6845\/revisions\/6846"}],"wp:attachment":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/media?parent=6845"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/doc_category?post=6845"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/doc_tag?post=6845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}