Certificates

Practical troubleshooting paths for MSP technicians dealing with real-world support failures.

SAML app metadata imported but app still trusts old signing cert

Field Summary

SAML app metadata imported but app still trusts old signing cert is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Browser trust warning appears only on mobile devices

Field Summary

Browser trust warning appears only on mobile devices is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

ACME renewal works on standby node not active node

Field Summary

ACME renewal works on standby node not active node is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Code signing certificate installed but build agent cannot use it

Field Summary

Code signing certificate installed but build agent cannot use it is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Portal status is not proof of local execution; verify run history, service state, and security blocks.

Certificate chain valid on Windows not on macOS

Field Summary

Certificate chain valid on Windows not on macOS is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Reverse proxy imports PFX but private key unusable

Field Summary

Reverse proxy imports PFX but private key unusable is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Internal CA template changed and autoenrollment stalls

Field Summary

Internal CA template changed and autoenrollment stalls is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Wildcard certificate renewed but old cert still served

Field Summary

Wildcard certificate renewed but old cert still served is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Certificate auto-renewal failed silently on appliance

Field Summary

Certificate auto-renewal failed silently on appliance is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.

Browser shows certificate warning on internal appliance

Field Summary

Browser shows certificate warning on internal appliance is a Certificates ticket where the visible symptom can be misleading. Server and directory tickets need service state, event logs, DNS, authentication, replication, permissions, storage, and backup context before disruptive work. Reboots can hide evidence and create wider impact. Record subject, issuer, SAN, expiration, binding, and trust chain before replacing certificates.