# Let's Encrypt: "unable to get issuer certificate" (erro 2), reemissão forçada e limites de taxa

**URL:** <https://meta.discourse.org/t/lets-encrypt-unable-to-get-issuer-certificate-error-2-forced-reissuance-and-rate-limits/414167>\
**Category:** Bug\
**Tags:** letsencrypt\
**Created:** [Outubro 7, 2026, 5:05pm UTC](https://meta.discourse.org/t/lets-encrypt-unable-to-get-issuer-certificate-error-2-forced-reissuance-and-rate-limits/414167 "2026-10-07T17:05:24Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![jmx](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jmx/32/579660_2.png) [@jmx](https://meta.discourse.org/u/jmx)\
**Post date:** [Outubro 13, 2026, 1:27pm UTC](https://meta.discourse.org/t/lets-encrypt-unable-to-get-issuer-certificate-error-2-forced-reissuance-and-rate-limits/414167/5 "2026-10-13T13:27:14Z")

</div>

Obrigado @supermathie por investigar isso. Anexei os arquivos `fullchain.cer` e `ca.cer` da instância afetada.  
[fullchain.cer.txt](https://meta.discourse.org/uploads/short-url/zgdZFC02cWloVLwZjlL0LrRTs0y.txt) (5,9 KB)  
[ca.cer.txt](https://meta.discourse.org/uploads/short-url/kUwwg8IxP9kgYRfekopLtgBKMAO.txt) (3,8 KB)

A saída do OpenSSL abaixo mostra que o comando de verificação original falha com o erro 2, enquanto o uso de `-untrusted` tem sucesso com o mesmo certificado e cadeia.

```plaintext
openssl version
openssl verify -CAfile <(openssl x509 -in ca.cer) fullchain.cer
openssl verify -show_chain -untrusted ca.cer fullchain.cer

OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)
C=US, O=Let's Encrypt, CN=YR2
error 2 at 1 depth lookup: unable to get issuer certificate
error fullchain.cer: verification failed
fullchain.cer: OK
Chain:
depth=0: CN=hubprod.surikai.fr (untrusted)
depth=1: C=US, O=Let's Encrypt, CN=YR2 (untrusted)
depth=2: C=US, O=ISRG, CN=Root YR (untrusted)
depth=3: C=US, O=Internet Security Research Group, CN=ISRG Root X1

```

Encontrei esse problema em dois ambientes distintos. Tenho aplicado a correção na minha instância de desenvolvimento desde a abertura da PR, e ela tem funcionado como esperado.

---

_[View the full topic](https://meta.discourse.org/t/lets-encrypt-unable-to-get-issuer-certificate-error-2-forced-reissuance-and-rate-limits/414167)._