Apache: [ssl:warn] AH01909: example.com:443:0 server certificate does NOT include an ID which matches the server name

Certificate pinning failure! Android/OkHttp: javax.net.ssl.SSLPeerUnverifiedException: Certificate pinning failure! Peer certificate chain: sha256/... Pinned certificates for api.example.com Cloudflare Origin CA not trusted NET::ERR_CERT_AUTHORITY_INVALID with a Cloudflare Origin Certificate (record not proxied) Could not establish trust relationship for the SSL/TLS secure channel .NET: System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel curl: (60) SSL certificate problem curl: (60) SSL certificate problem: unable to get local issuer certificate DEPTH_ZERO_SELF_SIGNED_CERT Node/OpenSSL: Error: self signed certificate (code: DEPTH_ZERO_SELF_SIGNED_CERT) DNS problem: NXDOMAIN looking up A Certbot: Detail: DNS problem: NXDOMAIN looking up A for www.example.com - check that a DNS record exists for this domain ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY Chrome: ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY — HTTP/2 requires a modern TLS cipher ERR_SSL_KEY_USAGE_INCOMPATIBLE Chrome: ERR_SSL_KEY_USAGE_INCOMPATIBLE — the certificate's key usage doesn't allow the negotiated cipher ERR_SSL_VERSION_OR_CIPHER_MISMATCH (Cloudflare) ERR_SSL_VERSION_OR_CIPHER_MISMATCH on a Cloudflare site (certificate not issued / multi-level subdomain) ERR_TOO_MANY_REDIRECTS (Cloudflare) ERR_TOO_MANY_REDIRECTS with Cloudflare (Flexible SSL redirect loop) error setting certificate verify locations curl: (77) error setting certificate verify locations: CAfile: /etc/ssl/certs/ca-certificates.crt CApath: none HTTPSConnectionPool: Max retries exceeded (SSLError) Python requests: HTTPSConnectionPool(host='api.example.com', port=443): Max retries exceeded with url: /v1 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] ...'))) incomplete certificate chain SSL Labs: Chain issues: Incomplete — Extra download (intermediate certificate missing) Invalid response from .well-known/acme-challenge: 404 Certbot: Detail: Invalid response from http://example.com/.well-known/acme-challenge/abc: 404 Keystore was tampered with, or password was incorrect Java keytool: java.io.IOException: Keystore was tampered with, or password was incorrect MySQL: SSL connection error: SSL is required but the server doesn't support it MySQL: ERROR 2026 (HY000): SSL connection error: SSL is required but the server doesn't support it no alternative certificate subject name matches target host name curl: (51) SSL: no alternative certificate subject name matches target host name 'example.com' No subject alternative names present Java: javax.net.ssl.SSLHandshakeException: No subject alternative names matching IP address 10.0.0.5 found NSURLErrorServerCertificateUntrusted (-1202) iOS: Error Domain=NSURLErrorDomain Code=-1202 "The certificate for this server is invalid. You might be connecting to a server that is pretending to be 'example.com'" Problem binding to port 80: Could not bind to IPv4 or IPv6 Certbot: Problem binding to port 80: Could not bind to IPv4 or IPv6 (standalone authenticator) root certificate file "root.crt" does not exist PostgreSQL: root certificate file "/home/user/.postgresql/root.crt" does not exist. Either provide the file or change sslmode SEC_ERROR_EXPIRED_CERTIFICATE Firefox: Peer's Certificate has expired. Error code: SEC_ERROR_EXPIRED_CERTIFICATE SSL_CTX_set_tmp_dh failed: dh key too small Nginx: [emerg] SSL_CTX_set_tmp_dh("/etc/ssl/dhparam.pem") failed (SSL: error:1401E0A8:SSL routines:... dh key too small) SSL_ERROR_BAD_CERT_DOMAIN Firefox: Websites prove their identity via certificates — the certificate is only valid for other names. Error code: SSL_ERROR_BAD_CERT_DOMAIN SSLCertificateFile: file does not exist Apache: AH02240: Server should be SSL-aware but has no certificate configured / SSLCertificateFile: file '/etc/ssl/x.crt' does not exist or is empty Timeout during connect (likely firewall problem) Let's Encrypt: Fetching http://example.com/.well-known/acme-challenge/token: Timeout during connect (likely firewall problem) too many certificates already issued Let's Encrypt: urn:ietf:params:acme:error:rateLimited :: too many certificates (5) already issued for this exact set of identifiers in the last 168 hours UNABLE_TO_VERIFY_LEAF_SIGNATURE Node.js: Error: unable to verify the first certificate (code: UNABLE_TO_VERIFY_LEAF_SIGNATURE) wildcard certificate does not cover a.b.example.com Browser: *.example.com certificate does not match a.b.example.com (ERR_CERT_COMMON_NAME_INVALID)