Sophos XG - Lets Encrypt broken - Certificate authority: Invalid or not installed

After the latest DST X3 certificate issue. All of my Let's encrypt certificats is not being validated correctly on my Sophos XG. Everything updated to latest version.

I've tried to remove the Let's Encrypt R3 certificates. Re-upload the new ones. Followed all guides available. But still my issue persists.

All my iOS devices accessing WAF sites from the outside, still pukes saying the certificate is expired on 29th september. Even though I've reissued completely new certificates and removed everything i could finde delated to DST...

What on earth is going on?



Added TAGs
[edited by: emmosophos at 10:27 PM (GMT -7) on 12 Oct 2021]
Parents Reply
  • Here are my screenshots. The certificate is here being served directly from my website on IIS - no problems. As soon as I enter from the outside where it has to pass through WAF in XG. It breaks.

    The last screenshot is from my Certificate authorities in XG. The last of the R3 certificates holds the correct path.

    Everything seems okay to me.

Children