Having issue with SSL chain

[Sir Asvald]

Hello everyone. I'm having Issue with my SSL chain. Servers are both 2016 Standard. Freshly installed CA's. I'm testing it with https://www.ssllabs.com/ssltest/. It worked before the when intermediate CA certificate was due for a renewal. Since I've renewed it, nothing is working. CRL and OCSP status says the chain is fine..

 

Please help. I've attached the images

 

 

[beersykins]

What steps did you go to renew it?

 

Did you place the renewed chain on your webserver as well?

[Sir Asvald]

Just now, beersykins said:

What steps did you go to renew it?

 

Did you place the renewed chain on your webserver as well?

I went to the CA console, clicked renew CA certificate..Then I went to the Root CA and updated the CRL and OCSP. As you can see from the pictures above. And I did the same for Sub CA and then reissued the webSSL certificate

Of course. I installed the Root CA certificate as well as the Intermediate.

[Sir Asvald]

@leadeater Can you help? 

[Sir Asvald]

Anyone? :( 

[leadeater]

22 hours ago, Abdul201588 said:

Anyone? :( 

This doesn't resolve to an IP address, crl3.learntotechsolutions.com. crl.learntotechsolutions.com does.

 

If that test is being done over public internet then it'll fail until you get that dns record fixed.

[Sir Asvald]

1 hour ago, leadeater said:

This doesn't resolve to an IP address, crl3.learntotechsolutions.com. crl.learntotechsolutions.com does.

 

If that test is being done over public internet then it'll fail until you get that dns record fixed.

I added the record, I completely forgot. Thanks for that. I'm still having issues. :( 

 

[Sir Asvald]

I got it working. crl was pointing to the wrong IP address