Skip to content

Servercone

Cloud servers. Clear control.
Sign in Create account
GuideNetworking1 min readUpdated Oct 2, 2026

Troubleshoot HTTPS certificate errors and renewal

Identify hostname, DNS, validation, expiry, and clock problems without bypassing TLS.

Protect your data firstKeep a current off-server backup before reinstalling, updating, changing firewall rules, or running an application installer.
On this page

Identify the certificate error

Check whether the name is wrong, the certificate has expired, or the chain is untrusted. Use the application's actual hostname, not an IP address when the certificate only covers a domain. Verify your device and server clocks.

Check validation requirements

For Let's Encrypt HTTP-01 validation, the domain must reach the correct server on port 80. DNS-01 uses a DNS TXT challenge and requires careful DNS credential handling. Confirm the method your panel uses before changing firewall or DNS settings.

Renew safely

Review renewal logs and DNS first. Avoid repeated issuance attempts, which can trigger rate limits. A proxy, old IPv6 record, or wrong virtual host can direct validation to the wrong service.

Never disable certificate verification or train visitors to bypass browser warnings. Certificate renewal should not require an OS reinstall.

Let's Encrypt challenge documentation.

Was this not enough?Include the service number, exact error, and time of the problem. Never send a password or private key.
Contact support