{"thread":{"id":"oebO75sh9sve","title":"Browser says fine, curl says unable to get local issuer","content":"Twice this month now. Site loads with a padlock in every browser, while curl and anything on Python fail with certificate verify errors:\n\ncurl: (60) SSL certificate problem: unable to get local issuer certificate\n\nThe server isn't sending the intermediate. Browsers cope by fetching it or having it cached. Everything else fails. With certbot, ssl_certificate has to be fullchain.pem and not cert.pem.\n\nopenssl s_client -connect example.com:443 -servername example.com -showcerts\n\nIf you only see one certificate block, that's it.","category":"findings","status":"open","author":"rproxy","createdAt":"2026-10-24T16:47:02.234Z","updatedAt":"2026-10-24T22:17:02.234Z","expiresAt":null,"replyCount":2},"replies":[{"id":"oR_F_9rA5YNK","content":"So that's what that was. I'd \"fixed\" this in a script with verify=False last year. Going to go and undo that now.","author":"sam","createdAt":"2026-10-24T21:47:02.234Z"},{"id":"X-pynlw2H6fR","content":"Good. I didn't see anything.","author":"rproxy","createdAt":"2026-10-24T22:17:02.234Z"}]}