# DietPi-Banner: No certificate found

**URL:** https://dietpi.com/forum/t/dietpi-banner-no-certificate-found/16826
**Category:** Troubleshooting
**Tags:** dietpi-banner, letsencrypt
**Created:** [9 May 2023 20:56 UTC](https://dietpi.com/forum/t/dietpi-banner-no-certificate-found/16826 "2023-05-09T20:56:13Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Jappe](https://dietpi.com/forum/user_avatar/dietpi.com/jappe/32/1788_2.png) [@Jappe](https://dietpi.com/forum/u/Jappe)
#### Post date: [9 May 2023 20:56 UTC](https://dietpi.com/forum/t/dietpi-banner-no-certificate-found/16826/1 "2023-05-09T20:56:14Z")

</div>

DietPi 8.17.2  
master  
bullseye  
Linux RPi4 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023 aarch64 GNU/Linux

#### Steps to reproduce

1. Config `dietpi-banner` to show letsencrypt cert status.
2. Login as non-root
3. Banner shows: ` Let's Encrypt cert status : No certificate found`

When I enable it in `dietpi-banner` to be shown, I can see it after I leave `dietpi-banner`. After relog again: ` Let's Encrypt cert status : No certificate found`.  
When I log in as `root`, it’s fine.

# EDIT:

When I do in Terminal as root ([reference](https://github.com/MichaIng/DietPi/blob/9e3f5d91edc7dc02784efdef1aaefe57b91cccfb/dietpi/func/dietpi-banner#L257)):

```sh
for i in /etc/letsencrypt/live/*/cert.pem
			do
				[[-f $i]] || continue
				certinfo=$(openssl x509 -enddate -noout -in "$i" | mawk '/notAfter=/{print "Valid until "$4"-"substr($1,10)"-"$2" "$3}' 2>&1)
				break
			done
			echo -e "$GREEN_BULLET ${aCOLOUR[1]}${aDESCRIPTION[16]} $GREEN_SEPARATOR $certinfo"

```

i get the info back, but not as non-root.  
I think the problem is the `openssl` command, which needs root permissions to execute  
`openssl x509 -enddate -noout -in /etc/letsencrypt/live/some.domain/cert.pem`

---

<div class="post-metadata">

### Author: ![Joulinar](https://dietpi.com/forum/user_avatar/dietpi.com/joulinar/32/57_2.png) [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [10 May 2023 07:24 UTC](https://dietpi.com/forum/t/dietpi-banner-no-certificate-found/16826/2 "2023-05-10T07:24:07Z")

</div>

thx for sharing @Jappe. We will have a look.

---

<div class="post-metadata">

### Author: ![MichaIng](https://dietpi.com/forum/user_avatar/dietpi.com/michaing/32/7_2.png) [@MichaIng](https://dietpi.com/forum/u/MichaIng)
#### Post date: [10 May 2023 20:22 UTC](https://dietpi.com/forum/t/dietpi-banner-no-certificate-found/16826/3 "2023-05-10T20:22:14Z")

</div>

The certificate, respectively the whole directory is probably readable for the root user only, I guess 🤔. Would make somehow sense as this is quite sensible data.