wget is not able to get the correct ssl certifiicate expiration date

Question

When I execute this

wget -O /root/installer.php https://www.grscripts.com/install/installer.deluxe

I receive this error

ERROR: cannot verify https://www.grscripts.com's/ certificate, issued by â€˜/C=US/O=Let's Encrypt/CN=R3â€™:   Issued certificate has expired.

but it's not true , indeed http://www.grscripts.com's/ certificate is ok and will expire on Feb 2022. Why wget is failing to get the correct certificate and how to fix it ?

Note that I know that I can skip the problem with --no-check-certificate , I would know why wget is reporting that the certificate is expired while it's not expired.

Are you checking this on the same machine you ran wget on? If not, did you check the date on the machine? — Gerald Schneider, Jan 03 '22 at 13:44
In the error message, why there is no "S" on the URL, only http ? — Dom, Jan 03 '22 at 14:21
checked , this is error returned "cannot verify https://www.grscripts.com's/ certificate" — gr68, Jan 03 '22 at 14:27

score 1 · Accepted Answer · answered Jan 03 '22 at 14:18

1

If you didn't update your system and root certificates then it is possible that your system won't be able to recognize Let's Encrypt certificates. See list Let's Encrypt compatibility list

answered Jan 03 '22 at 14:18

AlexD

8,747
2
29
38

it's a fresh Centos 7 installation. BTW how to update "root certificates" ? – gr68 Jan 03 '22 at 14:51
2

You need to have the latest `ca-certificates` package. – AlexD Jan 03 '22 at 14:57
yum reinstall ca-certificates , fixed the problem thank you are a genius – gr68 Jan 03 '22 at 19:29

wget is not able to get the correct ssl certifiicate expiration date

1 Answers1