# Let's Encrypt Certificates - Unknown Authority? **URL:** \ **Category:** PMM 1.x\ **Created:** [November 23, 2018, 4:49pm UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700 "2018-11-23T16:49:00Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![gordan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/gordan/32/3438_2.png) [@gordan](https://forums.percona.com/u/gordan)\ **Post date:** [November 23, 2018, 4:49pm UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/1 "2018-11-23T16:49:00Z")
I’m trying to set up pmm-client to talk to a pmm server that uses a freshly minted cert from letsencrypt, and I am getting this: Unable to connect to PMM server by address: [pmm.shatteredsilicon.net:443](http://pmm.shatteredsilicon.net:443) Get [url][https://pmm.shatteredsilicon.net:443/qan-api/ping:[/url]](https://pmm.shatteredsilicon.net:443/qan-api/ping:%5B/url%5D) x509: certificate signed by unknown authority Browsers have no problem connecting. Not sure of it matters, but the way I have it set up is apache on the docker host is responding on port 443, terminating ssl, and then proxying the request to the pmm docker container. Is this a known issue? Is there a quick and easy workaround, e.g. passing an extra CA certificate via docker -v to the container? ---
**Author:** ![Michael\_Coburn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/michael_coburn/32/18_2.png) [@Michael\_Coburn](https://forums.percona.com/u/Michael_Coburn)\ **Post date:** [December 5, 2018, 4:44pm UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/2 "2018-12-05T16:44:10Z")
Hi [gordan](https://percona.vanillacommunities.com/profile/x/x/42489) Sorry this post didn’t get any attention - I’ve escalated it internally, and you should get some Engineering eyes on it shortly! Thanks, ---
**Author:** ![Michael\_Coburn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/michael_coburn/32/18_2.png) [@Michael\_Coburn](https://forums.percona.com/u/Michael_Coburn)\ **Post date:** [December 5, 2018, 5:27pm UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/3 "2018-12-05T17:27:46Z")
Hi [gordan](https://percona.vanillacommunities.com/profile/x/x/42489) While we haven’t implemented this feature nor is it supported, you might find the following JIRA feature request helpful - let us know your outcome! [url][[PMM-1566] Add LetsEncrypt support to PMM Server - Percona JIRA](https://jira.percona.com/browse/PMM-1566%5B/url%5D) ---
**Author:** ![DBennett](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dbennett/32/17_2.png) [@DBennett](https://forums.percona.com/u/DBennett)\ **Post date:** [December 5, 2018, 6:08pm UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/4 "2018-12-05T18:08:42Z")
Hi Gordan, One thing to check, make sure your Let’s Encrypt Intermediate CA Certificate is included in your trusted CA certificates in [B] [B] ---
**Author:** ![gordan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/gordan/32/3438_2.png) [@gordan](https://forums.percona.com/u/gordan)\ **Post date:** [December 15, 2018, 8:15am UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/5 "2018-12-15T08:15:26Z")
I am not actually using nginx for handling SSL. I am using Apache on the host to terminate SSL and proxy the connection to the docker container. Everything else works just fine with the https endpoint this way, but pmm-admin emits the error saying that it doesn’t recognise the signing authority. It is only pmm-admin that seems to have this problem. ---
**Author:** ![Michael\_Coburn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/michael_coburn/32/18_2.png) [@Michael\_Coburn](https://forums.percona.com/u/Michael_Coburn)\ **Post date:** [January 15, 2019, 11:12am UTC](https://forums.percona.com/t/lets-encrypt-certificates-unknown-authority/6700/6 "2019-01-15T11:12:25Z")
Hi [gordan](https://percona.vanillacommunities.com/profile/x/x/42489) If you have the opportunity we’d value you submitting a feature request in order to address this concern with pmm-admin. Thank you!