winrris

Certificate seems to be fine also, not sure why I’m getting expired certificate error in MainWP:

# openssl s_client -connect shelby**********templates.com:443 -servername shelby**********templates.com
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = *.shelby**********templates.com
verify return:1
---
Certificate chain
 0 s:/CN=*.shelby**********templates.com
   i:/C=US/O=Let's Encrypt/CN=R3
 1 s:/C=US/O=Let's Encrypt/CN=R3
   i:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
 2 s:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
-----END CERTIFICATE-----
subject=/CN=*.shelby**********templates.com
issuer=/C=US/O=Let's Encrypt/CN=R3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4809 bytes and written 457 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256

Unfortunately, Settings–>Advanced Settings and turning off Verify SSL certificate does not work. My host keeps telling me its website/plugins issue, and they have done everything on their end… I’m confused

I’ve found that deleting DST Root CA X3 certificate from /wp-includes/certificates/ca-bundle.crt file helps on some hostings, but I’m getting another error Installation failed: Not expected HTTP response.

cURL SSL Version: OpenSSL/1.0.2k-fips
Server Software: Apache