Final test: Web stack

Question 10 of 18

Read the output

You wrote the new certificate into the `ssl_certificate` file, yet the server serves the old one. What will you do?

$ openssl x509 -in /etc/nginx/tls/secure.crt -noout -enddate
notAfter=Jan 18 10:04:41 2027 GMT
$ openssl s_client -connect secure.lab.test:443 </dev/null 2>/dev/null | openssl x509 -noout -enddate
notAfter=Oct 17 10:04:19 2026 GMT

sudo update-ca-certificates.
sudo nginx -t, then sudo systemctl reload nginx.
Issue the certificate again.
Wait — nginx will notice the new file on its own.

Back A–D or ↵ Sign in to answer