A Let's Encrypt certificate fails to be installed on a subdomain after migration: Install certificate failure: Unable to set certificate name

Symptoms

1. A Let's Encrypt certificate fails to be installed on a subdomain after migration:

   PLESK_ERROR: Install certificate failure: Unable to set certificate name :

2. Subdomain was migrated from another server, where Let's Encrypt certificate was already installed.

3. In the Plesk database, the Let's Encrypt Certificate exists, but it is assigned to the main domain:

   MYSQL_LIN: mysql> select c.id, c.name, r.rep_id, d.name from certificates c left join Repository r on (c.id = r.component_id) left join domains d on (r.rep_id = d.cert_rep_id) where r.rep_id not in (select val from misc where param = 'cert_rep_id') or r.rep_id is null;
   | 1 | Lets Encrypt example.com | 1 | example.com |
   | 2 | Lets Encrypt sub.example.com | 1 | example.com |

Cause

This is a Plesk Migrator bug with ID PMT-3546, which is going to be fixed in future product updates.

Resolution

As a workaround:

1. Connect to a Plesk server via SSH.

2. Create a database dump of a Plesk database:

   # plesk db dump psa > psa_backup.sql

3. Access the Plesk database:

   # plesk db

4. List all installed certificates on the server:

   MYSQL_LIN: mysql> select c.id, c.name, r.rep_id, d.name from certificates c left join Repository r on (c.id = r.component_id) left join domains d on (r.rep_id = d.cert_rep_id) where r.rep_id not in (select val from misc where param = 'cert_rep_id') or r.rep_id is null;
   +----+-------------------------------+--------+-------------+
   | id | name                          | rep_id | name        |
   +----+-------------------------------+--------+-------------+
   | 1  | Lets Encrypt example.com      | 1      | example.com |
   | 2  | Lets Encrypt sub.example.com  | 2      | example.com |
   | 3  | Lets Encrypt sub2.example.com | 3      | example.com |
   +----+-------------------------------+--------+-------------+

5. Delete incorrect certificates replacing sub.example.com with an actual name:

   MYSQL_LIN: mysql> delete r.* from Repository r inner join certificates c on (r.component_id = c.id) where c.name = 'Lets Encrypt sub.example.com';
   mysql> delete from certificates where name = 'Lets Encrypt sub.example.com';

6. Create a new certificate at Domain > sub.example.com > Let's Encrypt.