• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Question SSL Problem - Server Certificate

TobiasGo

New Pleskian
Hi,

on ssl labs, certificates are degraded to B in case of a problem with the server certificate:

The Certificate in #2 is outdated since 2 yeas and 3 months.

How to update this certificate?



Certificate #2: RSA 2048 bits (SHA256withRSA) No SNI
collapse.png

icon-certificate.png

Server Key and Certificate #1
https://www.ssllabs.com/ssltest/get...222b58a366a60a7c4c05d1e86e&time=1593586813181
SubjectPlesk
Fingerprint SHA256: 8b2df1e92705d653b0757c7b9bb4a680c6341d21b84c90353056be20c4b8ef32
Pin SHA256: 5Aof20Yqfs5o3LmX1ZiSeuVqoWsdyFkR+N0lY+Uf6mY=
Common namesPlesk
Alternative names- INVALID
Serial Number58b87a94
Valid fromThu, 02 Mar 2017 20:03:32 UTC
Valid untilFri, 02 Mar 2018 20:03:32 UTC (expired 2 years and 3 months ago) EXPIRED
KeyRSA 2048 bits (e 65537)
Weak key (Debian)No
IssuerPlesk Self-signed
Signature algorithmSHA256withRSA
Extended ValidationNo
Certificate TransparencyNo
OCSP Must StapleNo
Revocation informationNone
TrustedNo NOT TRUSTED
Mozilla Apple Android Java Windows

icon-certificates.png

Additional Certificates (if supplied)
https://www.ssllabs.com/ssltest/get...222b58a366a60a7c4c05d1e86e&time=1593586813181
Certificates provided1 (833 bytes)
Chain issuesNone

icon-chain.png

collapse.png
Certification Paths
MozillaAppleAndroidJavaWindows
Path #1: Not trusted (path does not chain to a trusted anchor)
https://www.ssllabs.com/ssltest/get...05d1e86e&time=1593586813181&id=1&trustStore=5
1Sent by server
Not in trust store
Plesk Self-signed
Fingerprint SHA256: 8b2df1e92705d653b0757c7b9bb4a680c6341d21b84c90353056be20c4b8ef32
Pin SHA256: 5Aof20Yqfs5o3LmX1ZiSeuVqoWsdyFkR+N0lY+Uf6mY=
RSA 2048 bits (e 65537) / SHA256withRSA
Valid until: Fri, 02 Mar 2018 20:03:32 UTC
EXPIRED
 
Or is it possible to deactivate this Server Certificate?
On SSLLabs it is a problem, with the second certificate, in case of missmatch in servername.
 
Back
Top