title: Apache SSL chrome error: NET::ERR_CERT_AUTHORITY_INVALID
body: <p>I am trying to install a letsencrypt ssl certificate on my (wamp) apache server. Running on a Windows Server 2012 x64 machine.</p>
  
  <p>These are the exact steps I did:</p>
  
  <p>Step 1.
  openssl genrsa -out privatekeyfilename.key 2048
  openssl req -new -key privatekeyfilename.key -sha256 -config myconf.cnf -out csrfilename.csr</p>
  
  <p>Step 2. generated letsencrypt certificates on <a href="https://www.sslforfree.com/" rel="nofollow noreferrer">https://www.sslforfree.com/</a> with csrfilename.csr</p>
  
  <p>Step 3:
  Renamed privatekeyfilename.key > my-domain.key and placed in: C:\wamp\bin\apache\apache2.4.9\conf\certificate\<br>
  Letsencrypt Certificate placed in same folder and named: my-domain.crt<br>
  Letsencrypt CA Bundle placed in same folder and named: my-domain.ca-bundle</p>
  
  <p>Step 4:
  Adjusted the httpd-ssl configurations:<br>
  C:\wamp\bin\apache\apache2.4.9\conf\extra\httpd-ssl.conf,
  C:\wamp\bin\apache\apache2.4.9\conf\original\extra\httpd-ssl.conf</p>
  
  <p>Added these lines to the configs and commented out the old ones:</p>
  
  <p>SSLCertificateFile c:/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.crt
  SSLCertificateKeyFile  c:/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.key
  SSLCertificateChainFile c:/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.ca-bundle</p>
  
  <p>(myconf.cnf)</p>
  
  <pre><code>[req]
  distinguished_name = req_distinguished_name
  x509_extensions = v3_req
  prompt = no
  [req_distinguished_name]
  C = NL
  ST = Noord-holland
  L = Amsterdam
  O = JDJ
  OU = IT
  CN = *.my-domain.com
  [v3_req]
  keyUsage = critical, digitalSignature, keyAgreement
  extendedKeyUsage = serverAuth
  subjectAltName = @alt_names
  [alt_names]
  DNS.1 = my-domain.com
  DNS.2 = *.my-domain.com
  </code></pre>
  
  <p>I expected the ssl certficicate to be working but it is giving errors:<br>
  <a href="https://i.imgur.com/syuuVoy.png" rel="nofollow noreferrer">https://i.imgur.com/syuuVoy.png</a><br>
  <a href="https://i.imgur.com/2jA2aTB.png" rel="nofollow noreferrer">https://i.imgur.com/2jA2aTB.png</a><br>
  Does anyone have any idea what is going wrong? Thank you.</p>
  
  <p>Edit: Since apache 2.4.8 SSLCertificateChainFile is obsoleted.<br>
  I added the content of my-domain.ca-bundle to my-domain.crt and commented out the SSLCertificateChainFile in the conf files. Still the same error.   </p>
  
  <p>Also ssl_error.log is showing:   </p>
  
  <pre><code>[Fri Aug 16 11:21:06.642778 2019] [ssl:warn] [pid 5256:tid 364] AH01909: my-domain.com:443:0 server certificate does NOT include an ID which matches the server name    
  [Fri Aug 16 11:21:06.814657 2019] [ssl:warn] [pid 5256:tid 364] AH01909: my-domain.com:443:0 server certificate does NOT include an ID which matches the server name
  </code></pre>