This should have been CD's issue, but I'm looking at it now root@helos ~ # grep ssl_ /etc/nginx/sites-available/collec.repec.org ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_certificate /etc/letsencrypt/opt/live/repec.org/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/opt/live/repec.org/privkey.pem; # managed by Certbot root@helos ~ # ls -l /etc/letsencrypt/opt/live/repec.org/fullchain.pem lrwxrwxrwx 1 root root 38 Jul 13 02:58 /etc/letsencrypt/opt/live/repec.org/fullchain.pem -> ../../archive/repec.org/fullchain6.pem root@helos ~ # ls -l /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem -rw-r--r-- 1 root root 2.8K Jul 13 02:58 /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem This is the same as we use for NEP root@siche ~ # ls -l /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem -rw-r--r-- 1 root root 2.8K Jul 13 02:58 /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem So it is referenced in the ngix configuration and it is the correct one. But maybe he used a different config. -- Written by Thomas Krichel http://openlib.org/home/krichel on his 21643rd day.