I've been trying to figure this out for the last 10 days, but I can't fix this for some reason. Traefik correctly generates certificates through let's encrypt but never applies them to the router. I get an output .json file with all the correct certificates inside and I get no errors at all in the…

Okay update on everything: I totally borked Traefik and decided to reverse my ZFS Pool my whole config is saved on. For some reason, Traefik now works flawlessly and serves the correct certificate: [image] What caused the error ? Absolutely no idea. I'm sorry for people looking at this thread fa…

You enable TLS in routers listening to web/http and websecure/https. That’s rather unusual. Check and compare to simple Traefik example . Traefik static config in traefik.yml or command and dynamic config in file or labels is mostly interchangeable.

I enabled web/http for testing purposes, but I did try leaving only websecure/https. The reason for this is because leaving websecure only enabled HSTS so I couldn't test if the routing to the service was correct. Enabling web/http disabled HSTS and I was able to confirm that the routing was correct…

Enable Traefik debug log ( doc ) and check after restart if router with domain is recognized and what happens with the cert.

You redacted whole lines because it included email? How about just replacing the email? Update config like that: http: routers: Router0: entryPoints: - websecure service: archlinuxmirror rule: Host(`dl.ptse.host`) && PathPrefix(`/archlinux`) In routers don’t use en…

Thanks, I'll try this right now

I have switched back to the non-staging env of let's encrypt and reset the certificates. One line caught my attention: time="2024-01-29T07:05:13Z" level=debug msg="No default certificate, fallback to the internal generated certificate" tlsStoreName=default I'm still getting CN=TRAEFIK DEFAULT CERT…

I tried specifying a default certificate using the following config: tls: stores: default: defaultGeneratedCert: resolver: maincert domain: main: "ptse.host" and I get this: time="2024-01-29T07:25:50Z" level=error msg="Error while creating certificate store: …

Share your updated Traefik static and dynamic config, Don't leave out whole lines in the log. Replace domain, email and auth only.

Alright, give me a moment to prepare this.

CN=TRAEFIK DEFAULT CERT despite certificates correctly generating

Traefik Traefik v2

Franscobec January 28, 2024, 10:21pm 5

My loglevel is set to debug. I just uploaded my logfile to my download server:
https://dl.ptse.host/file/log.log

Topic		Replies	Views
HTTPS serving up default traefik certificate instead of ACME Lets-Encrypt Traefik v3 (latest) docker , letsencrypt-acme	3	1802	April 21, 2025
Traefik is not using the default certificates provided by dynamic config Traefik v3 (latest) docker	3	298	July 28, 2025
Traefik occasionally returns the default certificate Traefik v2 kubernetes-crd	0	800	November 12, 2020
Default certificate is not working for our Traefik Traefik v2 ecs	2	115	July 30, 2024
Traefik serving default certificate instead letsencrypt Traefik v2 docker , letsencrypt-acme	5	12172	April 30, 2023

CN=TRAEFIK DEFAULT CERT despite certificates correctly generating

Related topics