# Unable to get local issuer certificate ISRG Root X1 errno 13, Permission denied

**URL:** <https://community.netdata.cloud/t/unable-to-get-local-issuer-certificate-isrg-root-x1-errno-13-permission-denied/3059>\
**Category:** Help\
**Tags:** cloud, agent\
**Created:** [June 29, 2022, 7:33am UTC](https://community.netdata.cloud/t/unable-to-get-local-issuer-certificate-isrg-root-x1-errno-13-permission-denied/3059 "2022-06-29T07:33:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Linea\_Grafica](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@Linea\_Grafica](https://community.netdata.cloud/u/Linea_Grafica)\
**Post date:** [June 29, 2022, 7:33am UTC](https://community.netdata.cloud/t/unable-to-get-local-issuer-certificate-isrg-root-x1-errno-13-permission-denied/3059/1 "2022-06-29T07:33:44Z")

</div>

## Environment

CloudLinux

## Problem/Question

I have the same problem with two nodes added to Netdata Cloud, both with CloudLinux. At first they were visible and connected but today they appears offline.

In error.log I see these messages:

2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : Cert Chain verify error:num=20:unable to get local issuer certificate:depth=2:/C=US/O=Internet Security Research Group/CN=ISRG Root X1 (errno 13, Permission denied)  
2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : SSL\_write Err: SSL\_ERROR\_SSL  
2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : Couldn’t write HTTP request header into SSL connection (errno 22, Invalid argument)  
2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : Couldn’t process request  
2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : Error trying to contact env endpoint (errno 22, Invalid argument)  
2022-06-29 09:05:26: netdata ERROR : ACLK\_Main : Failed to Get ACLK environment

I already updated ca-certificates.

## What I expected to happen

Get nodes monitored through Netdata Cloud.

---

<div class="post-metadata">

**Author:** ![ralphm](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.netdata.cloud/ralphm/32/1934_2.png) [@ralphm](https://community.netdata.cloud/u/ralphm)\
**Post date:** [June 29, 2022, 9:32am UTC](https://community.netdata.cloud/t/unable-to-get-local-issuer-certificate-isrg-root-x1-errno-13-permission-denied/3059/2 "2022-06-29T09:32:26Z")

</div>

Hi!

It looks like you are affected by the expiration of the [Let’s Encrypt DST Root CA X3 Expiration](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/). You mentioned that you’ve updated the ca-certificates package on your machines. Which version is there now?

---

<div class="post-metadata">

**Author:** ![Linea\_Grafica](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@Linea\_Grafica](https://community.netdata.cloud/u/Linea_Grafica)\
**Post date:** [June 29, 2022, 10:21am UTC](https://community.netdata.cloud/t/unable-to-get-local-issuer-certificate-isrg-root-x1-errno-13-permission-denied/3059/3 "2022-06-29T10:21:58Z")

</div>

Hello ralphm,

The version installed is the latest version:

`ca-certificates-2021.2.50-72.el7_9.noarch`

I tried to update it but this is the message I receive:

```auto
Package ca-certificates-2021.2.50-72.el7_9.noarch already installed and latest version
Nothing to do

```

Thank you.