# ELK Heartbeat x509: certificate signed by unknown authority for Sectigo CA **URL:** \ **Category:** Beats\ **Tags:** heartbeat\ **Created:** [June 24, 2021, 5:23am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871 "2021-06-24T05:23:32Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ezramiller](https://avatars.discourse-cdn.com/v4/letter/e/5e9695/32.png) [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Post date:** [June 24, 2021, 5:23am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/1 "2021-06-24T05:23:32Z")
Hello everyone. I am monitoring some websites and a lot of these websites using Sectigo SSL Certificates. Heartbeat showing these websites with Sectigo certificates as **x509: certificate signed by unknown authority**. Why is this happening and how can I fix it. I am using debian machine. Thanks for your answers! ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 24, 2021, 5:25am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/2 "2021-06-24T05:25:07Z")
Welcome to our community! 😃 It's probable that that certificate is not in your OSs store. What OS are you on? ---
**Author:** ![ezramiller](https://avatars.discourse-cdn.com/v4/letter/e/5e9695/32.png) [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Post date:** [June 24, 2021, 5:28am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/3 "2021-06-24T05:28:45Z")
I am using Debian ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 24, 2021, 5:32am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/4 "2021-06-24T05:32:08Z")
I can't promise this will work, but maybe look at something like [Adding trusted root certificates to the server](https://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html) ---
**Author:** ![ezramiller](https://avatars.discourse-cdn.com/v4/letter/e/5e9695/32.png) [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Post date:** [June 24, 2021, 6:03am UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/5 "2021-06-24T06:03:12Z")
I tried this method and it didnt help. So I checked the certificates, I monitor like almost 200 websites and most of them (60%) have Sectigo certificates working just fine with no errors, but like 30 websites with the same Sectigo certificates showing me **x509: certificate signed by unknown authority**. Really dont understand why ---
**Author:** ![ezramiller](https://avatars.discourse-cdn.com/v4/letter/e/5e9695/32.png) [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Post date:** [June 24, 2021, 12:36pm UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/6 "2021-06-24T12:36:46Z")
So I downloaded bunch of certificates from [here](https://sectigo.com/cps-repository) and [Adding certificates to host machine](https://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html) added them by this method and restarted machine, and that worked. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 22, 2021, 2:37pm UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871/7 "2021-07-22T14:37:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.