# Outdated self-signed cerificate keeps coming back

**URL:** <https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424>\
**Category:** ℹ️ Support\
**Tags:** tls\
**Created:** [September 16, 2020, 12:02pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424 "2020-09-16T12:02:43Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef](https://help.nextcloud.com/letter_avatar/detlef/32/5_5575768a8748004e209b776fc1b2916d.png) [@Detlef](https://help.nextcloud.com/u/Detlef)\
**Post date:** [September 16, 2020, 12:02pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/1 "2020-09-16T12:02:43Z")

</div>

Installation: RPI4, ubuntu 20.94, latest NGINX, MariaDB, NC 19.0.3. letsencrypt & SCME. All works fine, just: users (on the same LAN) with Thunderbird/Windows, IOS and Android keep betting warnings about an invalid self-signed certificate, which expired in 2017. SSL Checker reports valid cert from Ler’s encrypt, only.

I can’t find the source of the ss-certificate and stop it.

Please provide a hint.

In order to help you as quickly as possible, before clicking **Create Topic** please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

```
example

```

Or for longer, use three backticks above and below the code snippet:

```auto
longer
example
here

```

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can ❤

[/details]

Nextcloud version _(eg, 18.0.2)_:  
Operating system and version _(eg, Ubuntu 20.04)_:  
Apache or nginx version _(eg, Apache 2.4.25)_:  
PHP version _(eg, 7.1)_:

The issue you are facing:

Is this the first time you’ve seen this error? _(Y/N)_:

Steps to replicate it:

1. 
2. 
3. 

The output of your Nextcloud log in **Admin \> Logging** :

```auto
PASTE HERE

```

The output of your config.php file in `/path/to/nextcloud` (make sure you remove any identifiable information!):

```auto
PASTE HERE

```

The output of your Apache/nginx/system log in `/var/log/ ____ `:

```auto
PASTE HERE

```

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [September 20, 2020, 10:06am UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/2 "2020-09-20T10:06:35Z")

</div>

How do you access nextcloud on your local network? The same URL like outside?

The problem is probably your webserver configuration, that with local access, you use a different vhost configuration which has still the old self-signed certificate and not the letsencrypt one.

---

<div class="post-metadata">

**Author:** ![Detlef](https://help.nextcloud.com/letter_avatar/detlef/32/5_5575768a8748004e209b776fc1b2916d.png) [@Detlef](https://help.nextcloud.com/u/Detlef)\
**Post date:** [September 21, 2020, 12:36pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/3 "2020-09-21T12:36:49Z")

</div>

Hi tflidd, thx for advise. Yes, I am using the same URL and it works fine with the new cert from let’s encrypt. Thing I noted meanwhile: the old ss-cert did show on Thunderbird and Iphone and not on Honor6x. The H6s has been run empty and fully restarted meanwhile. Therefore I have erased the cache of TB and Iphone. Now I keep fingers crossed.

---

<div class="post-metadata">

**Author:** ![Detlef](https://help.nextcloud.com/letter_avatar/detlef/32/5_5575768a8748004e209b776fc1b2916d.png) [@Detlef](https://help.nextcloud.com/u/Detlef)\
**Post date:** [January 11, 2021, 2:34pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/4 "2021-01-11T14:34:08Z")

</div>

@tflidd: sorry to come back. Outdated cert keeps coming back on Thunderbird via network. Tried to ignore it for a while - running out of patience now. Please drop a hint on where and how to look in vhost configuration.  
Thx in advance.

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [January 11, 2021, 4:10pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/5 "2021-01-11T16:10:22Z")

</div>

Check the vhosts for ssl configuration, there could be several ones. In case you certificated was already renewed, perhaps it just needs to restart nginx. If the certificate wasn’t renewed, renew the certificate (check for new folders in /etc/letsencrypt/live/youdomain/\*) and check the date.

---

<div class="post-metadata">

**Author:** ![Detlef](https://help.nextcloud.com/letter_avatar/detlef/32/5_5575768a8748004e209b776fc1b2916d.png) [@Detlef](https://help.nextcloud.com/u/Detlef)\
**Post date:** [January 11, 2021, 6:40pm UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/6 "2021-01-11T18:40:56Z")

</div>

Thanks a lot,tflidd. I had already restarted nginx several times.

On the user side I am receiving a nice, clean certificate, which is good for a quarter and renews. In addition only Thunderbird in the same network receives an old certificate which expired in 2017 and never renews.

Have gone down and up the vhost configuration and found only one ssl-conf. The list of ecc-certs looks clean and up to date.

![clfmaapmdddciodd.png](https://help.nextcloud.com/uploads/default/original/3X/5/c/5c364af51aca3dbd07ff884ad388bd00751bc4c6.png)

Looks like I have somewhere a ghost. Looking now for some sw to control the traffic to find our where the outdated one comes from. Only other solution would be a fresh installation.

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [January 12, 2021, 8:16am UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/7 "2021-01-12T08:16:45Z")

</div>

then check all the ssl vhosts of nginx. `egrep ssl *` in the nginx config-folder. Perhaps there is a configs-enable or some similar folder you might want to check as well.

---

<div class="post-metadata">

**Author:** ![Detlef](https://help.nextcloud.com/letter_avatar/detlef/32/5_5575768a8748004e209b776fc1b2916d.png) [@Detlef](https://help.nextcloud.com/u/Detlef)\
**Post date:** [January 18, 2021, 10:35am UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/8 "2021-01-18T10:35:23Z")

</div>

Funny outcome in the end: there is some strange behaviour with Ubuntu and NGINX, where I had to stop NGINX and then also kill the the processes.

Here is my source with details:

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 12, 2024, 8:28am UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/9 "2024-12-12T08:28:41Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 12, 2024, 8:28am UTC](https://help.nextcloud.com/t/outdated-self-signed-cerificate-keeps-coming-back/92424/10 "2024-12-12T08:28:43Z")

</div>


