Invalid SSL Certificate error

If you are using Let’s Encrypt certificates, and you get Invalid Certificate error there are some troubleshooting steps you could follow to make sure everything is in order.

Example error could be

Your connection is not private
Attackers might be trying to steal your information from example.com (for example, passwords, messages, or credit cards). Learn more NET::ERR_CERT_COMMON_NAME_INVALID

1. Make sure tls-acme is set to true
2. Make sure you have not created CAA records to block issuance of Let’s Encrypt certs (you can use a diagnostic tool to check that
3. Make sure DNS is pointing to the correct destination for both IPv4 and IPv6 (if you configured it)

If you follow those steps, and you are still seeing an error, please contact support.