Website mail SSL certificate expired

Hi,
I’m running Cyberpanel on a vps with few website. One of the website mail SSL certificate expired. I tried to fix it using mailserver SSL. It says SSL installed but still getting certificate error on outlook. Here is checktls error

[000.591] ‑‑> STARTTLS
[000.672] <‑‑ 220 2.0.0 Ready to start TLS
[000.673] STARTTLS command works on this server
[000.853] Connection converted to SSL
SSLVersion in use: TLSv1_3
Cipher in use: TLS_AES_256_GCM_SHA384
Perfect Forward Secrecy: yes
Session Algorithm in use: Curve X25519 DHE(253 bits)
Certificate #1 of 4 (sent by MX): EXPIRED
Cert VALIDATION ERROR(S): certificate has expired
So email is encrypted but the recipient domain is not verified
Cert Hostname VERIFIED (mail.renn.com.bd = mail.renn.com.bd | DNS:mail.renn.com.bd | DNS:www.mail.renn.com.bd)
Not Valid Before: Dec 4 22:07:15 2022 GMT
Not Valid After: Mar 4 22:07:14 2023 GMT
subject: /CN=mail.renn.com.bd
issuer: /C=US/O=Let’s Encrypt/CN=R3
Certificate #2 of 4 (sent by MX):
Cert VALIDATED: ok
Not Valid Before: Sep 4 00:00:00 2020 GMT
Not Valid After: Sep 15 16:00:00 2025 GMT
subject: /C=US/O=Let’s Encrypt/CN=R3
issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
Certificate #3 of 4 (added from CA Root Store):
Cert VALIDATED: ok
Not Valid Before: Jun 4 11:04:38 2015 GMT
Not Valid After: Jun 4 11:04:38 2035 GMT
subject: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
Certificate #4 of 4 (sent by MX):
Cert VALIDATED:
Not Valid Before: Jan 20 19:14:03 2021 GMT
Not Valid After: Sep 30 18:14:03 2024 GMT
subject: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
issuer: /O=Digital Signature Trust Co./CN=DST Root CA X3

I found a temporary solution, please run the command shown below. It will fix the problem. But it will not renew the certificate when expires. You need to run the command again.

postmap -F hash:/etc/postfix/vmail_ssl.map
systemctl restart postfix
systemctl restart dovecot```
1 Like

This topic was automatically closed 3 hours after the last reply. New replies are no longer allowed.