Cannot verify server identify error message in MacOS/iphone email app

[microvax]

Hello,
Today several users started to receive this error message on their MacOS and Iphone email applications
and I have the impression that it has to do with an expiring SSL certificate, so I started to check their expiration dates
and they seem to be renewed today.

However their email clients are still showing the error message, so I was wondering if there is a way to force their software
to update the validation information

 

[smurf]

This has just started happening for us on one cPanel server in the last hour. Seems a bigger issue. We've opened a ticket with cPanel support.

 

[coursevector]

This is affecting my servers as well, Thunderbird, Outlooks, mobile device mail apps all seem affected. It's as if the exim/dovecot SNI stopped working. I guess I'll open a support ticket too.

 

[coursevector]

This appears to be related to Let's Encrypt expiration of their root certificate. cPanel have any advice to resolve this error?

Let's Encrypt's Root Certificate is expiring!

On 30th September 2021, the root certificate that Let's Encrypt are currently using, the IdentTrust DST Root CA X3 certificate, will expire. You may or may not need to do anything about this Root CA expiring, but I'm betting a few things will probably break on that day so here's

scotthelme.co.uk

 

[microvax]

Also noticed that some Outlook clients started to report this error message
"Your server does not support the connection encryption type you have specified"

 

[MindServer]

Hi,

I have the same problem, my clients receive this message error and cannot connect to email since her devices. The server have Let's Encrypt in all cPanel accounts and are renewed.

Why happens this problem?, how can we solve him fast?. This is a big issues.

Thank you very much.

 

[MindServer]

This is a very urgent problem, please can you take this with priority? the clients cannot connect to email with remote tools (thunderbird, outlook, phone mail,etc.).

Thank you very much @cPRex

 

[quietFinn]

We had the same problem and here is what I did:

SSL Error

Hi, Since today, I'm getting this error on each cpanel. The certificate has the following errors: Certificate #4 (CN=DST Root CA X3,O=Digital Signature Trust Co.) has 1 validation error: CERT_HAS_EXPIRED. how can I fix this? But when I go to the SSL / TLS Status, its showing very normal and...

forums.cpanel.net

 

[MindServer]

We had the same problem and here is what I did:

SSL Error

Hi, Since today, I'm getting this error on each cpanel. The certificate has the following errors: Certificate #4 (CN=DST Root CA X3,O=Digital Signature Trust Co.) has 1 validation error: CERT_HAS_EXPIRED. how can I fix this? But when I go to the SSL / TLS Status, its showing very normal and...

forums.cpanel.net

But this will remove all the SSL from the servers, we are working with Let's Encrypt since many years correctly, WHM/cPanel need update to latest versions for solve the bug: Let's Encrypt's Root Certificate is expiring!

In WHM -> Manage AutoSSL, I found this option: Select the following option to update your registration. The system will overwrite your existing registration. This is optional and not required to use this provider

Maybe can solve the problem?. Thank you

 

[cPRex]

We have many more details at In Progress - [CPANEL-33077] Letsencrypt transition to ISRG’s Root (Important!!!!!) and I'll be posting there as I get more information.