I have a server that hosts a Java backend which has a JavaKeyStore (JKS) that stores a certificate from Lets Encrypt.

The certificate chain looks as follows:

- ISRG Root X1 (valid until 30/09/2024, 20:14:03 CEST)
-- R3 (valid until 15/09/2025, 18:00:00 CEST)
--- api.verumsoftware.com (valid until 31/10/2021, 23:10:36 CET)

When I make a request in Postman I get the following error:

SSL Error: Certificate has expired

I find this odd since each certificate in the chain should still be valid. Does anybody know what could cause this? When I look up the server on various sites that check whether certificates are correctly installed, they all say it's perfectly fine.

CodePudding user response：

This is a LetsEncrypt issue that occurred on Sep 30 2021. You probably need to patch the OS to remove the offending certificate.

For example this in CentOS. https://blog.devgenius.io/rhel-centos-7-fix-for-lets-encrypt-change-8af2de587fe4#:~:text=So, DST Root CA X3 needs to be,The manual steps below are no longer necessary

Or use a non-LetsEncrypt SSL Cert.

CodePudding user response：

Apparently this was an issue with Postman, details can be found here: https://github.com/postmanlabs/postman-app-support/issues/10338

Updating Postman to version 9.0.5 fixed the issue for me!