# Certbot --apache SSL Cert no longer trusted

**URL:** <https://forums.rockylinux.org/t/certbot-apache-ssl-cert-no-longer-trusted/5884>\
**Category:** Rocky Linux Help & Support\
**Created:** [April 22, 2022, 11:14am UTC](https://forums.rockylinux.org/t/certbot-apache-ssl-cert-no-longer-trusted/5884 "2022-04-22T11:14:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![frankofno](https://avatars.discourse-cdn.com/v4/letter/f/b9bd4f/32.png) [@frankofno](https://forums.rockylinux.org/u/frankofno)\
**Post date:** [April 22, 2022, 11:14am UTC](https://forums.rockylinux.org/t/certbot-apache-ssl-cert-no-longer-trusted/5884/1 "2022-04-22T11:14:43Z")

</div>

[UPDATE]  
Solved the issue. I had to uncomment the ServerName directive in the /ssl.conf

[UPDATE]

I just tried again, with a fresh rocky install, kernel 4.18 something. same issue. So i guess something changed with Let’s encrypt.

–

I recently updated to the latest kernel on a fresh Rocky Linux. After installing httpd and snapd to get certbot --apache to work, i generated a SSL cert like in the past. Although, I no longer get a valid ssl cert for the apache server.

Why?

```auto
Peer’s Certificate issuer is not recognized.

HTTP Strict Transport Security: false

HTTP Public Key Pinning: false

Certificate chain:

-----BEGIN CERTIFICATE-----

```

The cert issuer can not be trusted, therefor I get a security risk warning in firefox, What’s the best way to setup a apache webserver with self signed certbot cert?

The steps I used to install snapd and generate the cert:

```auto
# SSL INSTALL SNAPD

sudo dnf -y install snapd

sudo systemctl start snapd

sudo systemctl enable snapd

sudo init 6

sudo snap install core; sudo snap refresh core

sudo ln -s /var/lib/snapd/snap /snap

sudo snap install --classic certbot

sudo ln -s /snap/bin/certbot /usr/bin/certbot

sudo dnf -y install certbot python3-certbot-apache mod_ssl

sudo systemctl restart httpd

sudo certbot --apache

```

Thanks for any hint, ideas.

---

<div class="post-metadata">

**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\
**Post date:** [August 25, 2023, 3:51am UTC](https://forums.rockylinux.org/t/certbot-apache-ssl-cert-no-longer-trusted/5884/2 "2023-08-25T03:51:10Z")

</div>

Closed on August 25, 2023, 3:51am UTC


