SSL Cert always gets B grade from SSLLabs

ganteng

Hello,
Does anybody know why SSL generated by aaPanel letsencrypt is always marked B and gets "This server's certificate chain is incomplete. Grade capped to B." message by SSLLabs ?
It would be good if it can be an A or A+ 😄

Please advise how to tune the ssl settings on aaPanel

Thanks

JAY

check which tls is enabled

ganteng

Hi @JAY it is TLSv1.2 and TLSv1.3
any comments?

JAY

if no privacy issues paste your domain names here..and later you can delete

ganteng

JAY https://hearth.id

Dhanamerdeka

ganteng this is out of topic but, how much you pay for the domain? 200k+ IDR?

JAY

can you delete certificate completly and reissue it again i tested 3 time i didnt had this issues which os are you using centos or ubuntu

ganteng

JAY ok, will do. thanks

ganteng

JAY i am running it on CentOS 8. OK. I will try to delete and re-issue it. Thanks

ganteng

JAY it works finally!
by the way, do you have any idea how to change letsencrypt RSA size from 2048 to 4096? and it will automatically generate 4096-bit rsa size for new letsencrypt's ssl request ?
thanks in advance

ganteng

Dhanamerdeka it was around 200k+ IDR