2018 comment: 4037ff027c809 is not an up-to-date certificate name. Check ssl.conf on the older server.
Copy the ssl cert from another bandsY server
$ scp 4037ff027c809.zip root@BANDSX.bombplates.com:~/ $ scp bombplates.com.key root@BANDSX.bombplates.com:~/ $ ssh root@BANDSX.bombplates.com # unzip 4037ff027c809.zip # mv 4037ff027c809.crt /etc/pki/tls/certs/ # mkdir /etc/httpd/ssl # mkdir /etc/httpd/ssl/bombplates.com # mv gd_bundle-g2-g1.crt /etc/httpd/ssl/bombplates.com/ # mv bombplates.com.key /etc/pki/tls/private/bombplates.com.key
Update /etc/httpd/conf.d/ssl.conf
within <VirtualHost _default_:443> add or edit
SSLPRoxyEngine On SSLHonorCipherOrder On SSLProtocol -all +TLSv1 +TLSv1.1 +TLSv1.2 SSLCertificateFile /etc/pki/tls/certs/4037ff027c809.crt SSLCertificateKeyFile /etc/pki/tls/private/bombplates.com.key SSLCertificateChainFile /etc/httpd/ssl/bombplates.com/gd_bundle-g2-g1.crt
Fix SELinux flags
# restorecon -Rv /etc/pki/tls/certs/4037ff027c809.crt
# restorecon -Rv /etc/httpd/ssl/bombplates.com/gd_bundle-g2-g1.crt
# /etc/init.d/httped restart