Certificate error: To read x509 certificate from file or string use methods PleskExt\Letsencrypt\OpenSsl\X509Certificate::fromFile() or Ples kExt\Letsencrypt\OpenSsl\X509Certificate::fromString()

Symptoms

• After an attempt to secure a domain or Plesk Panel with a Let's Encrypt Certificate the following error can be found at /var/log/plesk/panel.log:

  CONFIG_TEXT: ERR [extension/sslit] Unable to secure panel hostname.example.com automatically To read x509 certificate from file or string use methods PleskEx
  t\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()
  ...
  ERR [extension/sslit] Failed to fetch domain example.com certificate status data. To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString().
  ..
  ERR [extension/sslit] Unable to get info of certificate with id 534: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()
  ERR [extension/sslit] Unable to get domain aliases: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()
  ...
  ERR [extension/sslit] Unable to get domain aliases: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()

  OR

  CONFIG_TEXT: ERR [extension/letsencrypt] Failed to get panel certificate info: Failed to read X509 certificate from PEM str
  ing: error:0909006C:PEM routines:get_name:no start line

Cause

Plesk bug EXTLETSENC-1182.

Fixed in:

• Let's Encrypt 3.1.4 - 8 February 2023

Resolution

• Update Let's Encrypt extension to 3.1.4 version or later.

Note: If error comes from SSL It!, this extension update should also fix the issue.