Let's encrypt doesn't add www subdomain to certificate

Discussion in 'Installation/Configuration' started by ronaldvanvugt, Dec 19, 2023.

  1. ronaldvanvugt

    ronaldvanvugt New Member

    Hi all,

    I just installed ISPConfig Version: 3.2.11p1. If I add a webserver and configure auto-subdomain to www, Let's encrypt didn't add the www subdomain to the certificate, only the domain in the fields: Common Name and Certificate Subject Alternanative Name
    Because the website is redirected to www.<domainname> I got an error about SSL because thus URL isn't added to the certificate.

    How can I add the subdomain www.<domainname> to the certificate?

    Best regards,
    Ronald
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Set the auto-subdomain field of the website to "www".
     
  3. ronaldvanvugt

    ronaldvanvugt New Member

    Hi Till, I did, but the www.<domain> isn't added to the certificate
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. ronaldvanvugt

    ronaldvanvugt New Member

    Hi Till

    I checked the logfile of ACME, but in the request that is send to Let's Encrypt the www.<domain> is not included. Only the <domain> is added to the request. See the relevant part of the logfile below.
    The subdomain www is working. If I go to www.<domain> I got an certification error because www.<domain> is not included in the SAN key of the certificate, but if I ignore the error, I see the website.

    Do you have any idea why ISPCONFIG will not add the www subdomain to the request? Thank you!

    Code:
    [Thu Dec 21 09:49:02 PM CET 2023] LE_WORKING_DIR='/root/.acme.sh'
    [Thu Dec 21 09:49:02 PM CET 2023] Running cmd: issue
    [Thu Dec 21 09:49:02 PM CET 2023] _main_domain='<domain>'
    [Thu Dec 21 09:49:02 PM CET 2023] _alt_domains='no'
    [Thu Dec 21 09:49:02 PM CET 2023] Using config home:/root/.acme.sh
    [Thu Dec 21 09:49:02 PM CET 2023] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Dec 21 09:49:02 PM CET 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Dec 21 09:49:02 PM CET 2023] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
    [Thu Dec 21 09:49:02 PM CET 2023] _ACME_SERVER_PATH='directory'
    [Thu Dec 21 09:49:02 PM CET 2023] DOMAIN_PATH='/root/.acme.sh/<domain>'
    [Thu Dec 21 09:49:02 PM CET 2023] '/usr/local/ispconfig/interface/acme' does not contain 'dns'
    [Thu Dec 21 09:49:02 PM CET 2023] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
    [Thu Dec 21 09:49:02 PM CET 2023] _init api for server: https://acme-v02.api.letsencrypt.org/directory
    [Thu Dec 21 09:49:02 PM CET 2023] GET
    [Thu Dec 21 09:49:02 PM CET 2023] url='https://acme-v02.api.letsencrypt.org/directory'
    [Thu Dec 21 09:49:02 PM CET 2023] timeout=
    [Thu Dec 21 09:49:02 PM CET 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
    [Thu Dec 21 09:49:02 PM CET 2023] ret='0'
    
    =======Begin Send Signed Request=======
    [Thu Dec 21 09:49:03 PM CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
    [Thu Dec 21 09:49:03 PM CET 2023] payload='{"identifiers": [{"type":"dns","value":"<domain>"}]}'
    [Thu Dec 21 09:49:03 PM CET 2023] EC key
    [Thu Dec 21 09:49:03 PM CET 2023] _URGLY_PRINTF
    [Thu Dec 21 09:49:03 PM CET 2023] xargs
    [Thu Dec 21 09:49:03 PM CET 2023] _URGLY_PRINTF
    [Thu Dec 21 09:49:03 PM CET 2023] xargs
    [Thu Dec 21 09:49:03 PM CET 2023] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-no>[Thu Dec 21 09:49:03 PM CET 2023] HEAD
    [Thu Dec 21 09:49:03 PM CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
    [Thu Dec 21 09:49:03 PM CET 2023] body
    [Thu Dec 21 09:49:03 PM CET 2023] _postContentType='application/jose+json'
    [Thu Dec 21 09:49:03 PM CET 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g  -I  '
    [Thu Dec 21 09:49:04 PM CET 2023] _ret='0'
    [Thu Dec 21 09:49:04 PM CET 2023] _headers='HTTP/2 200
     
    Last edited: Dec 21, 2023
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Please see let's encrypt error FAQ to find out why the www subdomain is not added, follow each step one after another. If you need further help, then you must post the debug output as explained in the FAQ. The acme.log is fine, but does not help in identifying the reason why www subdomain is not added.
     

Share This Page