# Error on Medic Web Certificate Renewal **URL:** \ **Category:** Technical Support\ **Tags:** configuration\ **Created:** [March 14, 2023, 11:08am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560 "2023-03-14T11:08:28Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Marcelo\_De\_Guzman](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/marcelo_de_guzman/32/1620_2.png) [@Marcelo\_De\_Guzman](https://forum.communityhealthtoolkit.org/u/Marcelo_De_Guzman)\ **Post date:** [March 14, 2023, 11:08am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/1 "2023-03-14T11:08:28Z")
Is this part of the medic also? I am struggling with medic web certification renewal. I am renewing the certificate to access the web medic, I do some steps like - accessing the ssh - login the ubuntu account - login as super user - docker stop medic-os - renew certificate via git bash - replace certificate via git bash - docker start medic-os But still, there was some error like this one: ![image](https://communityhealthtoolkit.b-cdn.net/uploads/default/original/2X/e/e0c916f343066b955adf6a9b4a09aadcb7356df5.png) I tried on other laptop, even cellphone but still cannot access. Is someone can help me on this thing. Thank you very much. ---
**Author:** ![henok](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/henok/32/576_2.png) [@henok](https://forum.communityhealthtoolkit.org/u/henok)\ **Post date:** [March 14, 2023, 5:21pm UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/2 "2023-03-14T17:21:19Z")
Hey @Marcelo_De_Guzman, it sounds like you’re using CHT 3.x. Have you had a look at [this](https://docs.communityhealthtoolkit.org/apps/guides/hosting/3.x/ssl-cert-install/) link? ---
**Author:** ![henok](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/henok/32/576_2.png) [@henok](https://forum.communityhealthtoolkit.org/u/henok)\ **Post date:** [March 14, 2023, 5:25pm UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/3 "2023-03-14T17:25:07Z")
What you see in that link should be enough for taking care of the cert upgrades. i.e. you don’t need to stop the containers. You just need to copy the certs over to the container via `docker cp` and restart nginx via the command specified [here](https://docs.communityhealthtoolkit.org/apps/guides/hosting/3.x/ssl-cert-install/#restart-services). ---
**Author:** ![Marcelo\_De\_Guzman](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/marcelo_de_guzman/32/1620_2.png) [@Marcelo\_De\_Guzman](https://forum.communityhealthtoolkit.org/u/Marcelo_De_Guzman)\ **Post date:** [March 15, 2023, 1:29pm UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/4 "2023-03-15T13:29:43Z")
@henok, Thank you for the information. I have ssl.crt, but I don’t know where to find the ssl.key. ---
**Author:** ![henok](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/henok/32/576_2.png) [@henok](https://forum.communityhealthtoolkit.org/u/henok)\ **Post date:** [March 16, 2023, 7:21am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/5 "2023-03-16T07:21:00Z")
@Marcelo_De_Guzman the key file is what you received when you were generating the certificate signing request (csr). That file is supposed to only be with you and installed on your server and it’s not to be shared with others. ---
**Author:** ![henok](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/henok/32/576_2.png) [@henok](https://forum.communityhealthtoolkit.org/u/henok)\ **Post date:** [March 16, 2023, 7:24am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/6 "2023-03-16T07:24:56Z")
If you are using Letsencrypt for example, the private key could be located under `/etc/letsencrypt/live/example.com/privkey.pem`, where “[example.com](http://example.com)” is your domain name. ---
**Author:** ![mrjones](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/mrjones/32/681_2.png) [@mrjones](https://forum.communityhealthtoolkit.org/u/mrjones)\ **Post date:** [March 22, 2023, 12:26am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/7 "2023-03-22T00:26:28Z")
@Marcelo_De_Guzman - checking the domain in your screenshot (`chc.caremin.com`), it looks like you maybe were able to resolve the issue? Just checking back with you in case you need any more help! ---
**Author:** ![sanjay](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/sanjay/32/1409_2.png) [@sanjay](https://forum.communityhealthtoolkit.org/u/sanjay)\ **Post date:** [August 5, 2024, 9:05am UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/8 "2024-08-05T09:05:24Z")
hi @henok followed the steps and restarted the services and web request are being refused, need further support on this. @gaarimasharma ---
**Author:** ![henok](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/henok/32/576_2.png) [@henok](https://forum.communityhealthtoolkit.org/u/henok)\ **Post date:** [August 5, 2024, 1:34pm UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/9 "2024-08-05T13:34:28Z")
@sanjay could you provide some more detail? Assuming you’re using docker-compose, could you also provide some logs of the error? ---
**Author:** ![sanjay](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/sanjay/32/1409_2.png) [@sanjay](https://forum.communityhealthtoolkit.org/u/sanjay)\ **Post date:** [August 5, 2024, 2:41pm UTC](https://forum.communityhealthtoolkit.org/t/error-on-medic-web-certificate-renewal/2560/10 "2024-08-05T14:41:28Z")
we followed this thread [Nginx not running after SSL certificate update - #7 by sanjay](https://forum.communityhealthtoolkit.org/t/nginx-not-running-after-ssl-certificate-update/2454/7) we have been able to turn on the server back. The issue was with the SSL some how we missed the default configuration overridden. Thank you for your support.