Plex Certificate "404" -- Unable to obtain Certificate from cloud

@ChuckPa towersrv pls, thx

Thanks a bunch, works now.

@martyzeq

Done. Please restart .

@ChuckPa it should be bevo2. thanks!

@ChuckPa

I’m having the same issue as well.

@cr4mb0 – Done

@b_ongena – which server ?

@ChuckPa thx man, back in the game :+1::stuck_out_tongue_winking_eye:

@ChuckPa - How would I find out? :sweat_smile:

Settings - Authorized Devices

In most cases, it’s the hostname.

You appear to have one server active and other 7+ year old server which appears (???) inactive

@ChuckPa If I look there, I get the following:

Plex

5 hours ago
1.20.1.3252-a78fef9a9
Plex Media Server
PC
FreeBSD 11.3-RELEASE-p14

And as a second question, how would I remove that server as I can’t find it under settings.

@b_ongena

  1. Reset (please restart it)
  2. Removed

It’s working great now. Thank you sir!

@ChuckPa Perfect, that’s working again. Thanks for the quick response! :slight_smile:

@ChuckPa
I assume that reply about server logs was directed at me? The first code chunk is from the server. if you want a full dump, let me know where to send them. otherwise, here is everything with word CERT from the logs during the first several minutes.

  C:\Users\BSOD2600\AppData\Local\Plex Media Server\Logs\Plex Media Server.1.log  (138 hits)
	Line 16: Oct 02, 2020 08:15:35.908 [9900] DEBUG - [CERT] Installed certificate with fingerprint 48:a2:fd:f1:40:ac:5f:5f:e3:d1:c0:7f:de:bb:14:9b:b0:06:e2:0a.
	Line 16: Oct 02, 2020 08:15:35.908 [9900] DEBUG - [CERT] Installed certificate with fingerprint 48:a2:fd:f1:40:ac:5f:5f:e3:d1:c0:7f:de:bb:14:9b:b0:06:e2:0a.
	Line 17: Oct 02, 2020 08:15:35.908 [9900] DEBUG - [CERT] Installed new private key.
	Line 18: Oct 02, 2020 08:15:35.908 [9900] DEBUG - [CERT] Subject name is /C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.38bfb1a9fafc4cfea1600edb79b43c89.plex.direct
	Line 19: Oct 02, 2020 08:15:35.916 [9900] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://ocspx.digicert.com/'.
	Line 19: Oct 02, 2020 08:15:35.916 [9900] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://ocspx.digicert.com/'.
	Line 20: Oct 02, 2020 08:15:35.917 [9900] INFO - [CERT/OCSP] Successfully retrieved response from cache.
	Line 21: Oct 02, 2020 08:15:35.917 [9900] DEBUG - [CERT] Installed intermediate certificate.
	Line 21: Oct 02, 2020 08:15:35.917 [9900] DEBUG - [CERT] Installed intermediate certificate.
	Line 267: Oct 02, 2020 08:15:39.315 [13828] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 267: Oct 02, 2020 08:15:39.315 [13828] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 420: Oct 02, 2020 08:15:42.784 [10228] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 420: Oct 02, 2020 08:15:42.784 [10228] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 519: Oct 02, 2020 08:15:44.468 [7152] DEBUG - CERT: Existing certificate doesn't have expected certificate identifier, fetching a new one.
	Line 519: Oct 02, 2020 08:15:44.468 [7152] DEBUG - CERT: Existing certificate doesn't have expected certificate identifier, fetching a new one.
	Line 519: Oct 02, 2020 08:15:44.468 [7152] DEBUG - CERT: Existing certificate doesn't have expected certificate identifier, fetching a new one.
	Line 520: Oct 02, 2020 08:15:44.469 [7152] DEBUG - HTTP requesting POST https://plex.tv/devices/34e11b3f3780037b75eaa9b9e55dcf601ecf8329/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
	Line 538: Oct 02, 2020 08:15:45.294 [7152] DEBUG - HTTP 404 response from POST https://plex.tv/devices/34e11b3f3780037b75eaa9b9e55dcf601ecf8329/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
	Line 539: Oct 02, 2020 08:15:45.295 [7152] ERROR - CERT: Could not fetch certificate from the cloud: 404
	Line 539: Oct 02, 2020 08:15:45.295 [7152] ERROR - CERT: Could not fetch certificate from the cloud: 404
	Line 671: Oct 02, 2020 08:15:47.762 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 671: Oct 02, 2020 08:15:47.762 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 677: Oct 02, 2020 08:15:47.806 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 677: Oct 02, 2020 08:15:47.806 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 758: Oct 02, 2020 08:15:49.276 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 758: Oct 02, 2020 08:15:49.276 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown
	Line 921: Oct 02, 2020 08:15:51.501 [9808] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 921: Oct 02, 2020 08:15:51.501 [9808] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 994: Oct 02, 2020 08:16:00.590 [14320] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 994: Oct 02, 2020 08:16:00.590 [14320] WARN - HTTP error requesting GET https://66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct:32400/identity (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '66-235-xxx-xxx.7ef07baa052c418eb26c0d51aa5a27a3.plex.direct')
	Line 1161: Oct 02, 2020 08:18:55.518 [3236] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown

These are the ones I’m looking for.

	Line 539: Oct 02, 2020 08:15:45.295 [7152] ERROR - CERT: Could not fetch certificate from the cloud: 404
	Line 539: Oct 02, 2020 08:15:45.295 [7152] ERROR - CERT: Could not fetch certificate from the cloud: 404

I differentiate because there are a few hosts out there who’ve put themselves into a throttled (429) state.

I will revoke the existing cert if you say YES.
If you do say YES, please stop the server until the forum updates and you see my reply that it’s done.

@ChuckPa
yes, please. Server stopped.

@BSOD2600

Certificate revoked

Start the server.

Yes, found the 404 error in server logs, shutting down server

@PeterBenson

Which server please ? I see two listed

v1.20.2.3370-b1b651549
PETERHQ-PC