# Stuck plex.direct certificate — unknown ca (macOS) — please reset

**URL:** <https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258>\
**Category:** Remote Access\
**Tags:** server-mac\
**Created:** [July 4, 2026, 4:52am UTC](https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258 "2026-07-04T04:52:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![lfreitas](https://avatars.discourse-cdn.com/v4/letter/l/ac8455/32.png) [@lfreitas](https://forums.plex.tv/u/lfreitas)\
**Post date:** [July 4, 2026, 4:52am UTC](https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258/1 "2026-07-04T04:52:29Z")

</div>

Could someone from Plex staff please reset the stuck plex.direct certificate on my server?  
@OttoKerner @ChuckPa

Plex account:  
Server name: Leo M2  
Machine identifier: 3ddf5802496fff387b256c18e013c1cdda37d24a  
Platform: Plex Media Server 1.43.3.10768 on macOS (Apple Silicon)

Symptom: Remote Access is stuck on “Not Reachable”. The reachability prober’s TLS  
handshake is rejected — [PMS logs](https://support.plex.tv/articles/200250417-plex-media-server-log-files/) show:  
CERT: incomplete TLS handshake from 34.202.97.122: tlsv1 alert unknown ca  
The served certificate chains to Let’s Encrypt CN=YR1 → ISRG Root YR (not  
cross-signed to X1).

Already verified on my side: real public IPv4 (no CGNAT), port 32400 forwarded and  
confirmed reachable from an external VPS (returns the MediaContainer XML over HTTP),  
firewall logs show the prober’s connections arriving and being forwarded to the  
server, system clock is correct, Secure Connections = Preferred, multiple server  
restarts, certificate re-provisioned (comes back on the same chain).

Happy to post CERT-filtered logs if needed. Thanks!

---

<div class="post-metadata">

**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\
**Post date:** [July 4, 2026, 9:31am UTC](https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258/2 "2026-07-04T09:31:09Z")

</div>

Please stop and restart your server now.

---

<div class="post-metadata">

**Author:** ![lfreitas](https://avatars.discourse-cdn.com/v4/letter/l/ac8455/32.png) [@lfreitas](https://forums.plex.tv/u/lfreitas)\
**Post date:** [July 4, 2026, 12:10pm UTC](https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258/3 "2026-07-04T12:10:33Z")

</div>

Worked, Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [October 2, 2026, 12:11pm UTC](https://forums.plex.tv/t/stuck-plex-direct-certificate-unknown-ca-macos-please-reset/940258/4 "2026-10-02T12:11:28Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
