Paid CA-signed SSL certificate issue

[jo_gurt]

Hi!

I had Jellyfin running fine for months with Let's Encrypt SSL certificate on my custom paid domain. The server is exposed under:
https://watch.my.domain:8920

All clients could connect fine, no issues.
However I needed SSL cert for other things as well, so I got a paid wildcard CA-signed certificate from SS2BUY PrimeSSL cert (the cheapest option, nothing fancy required): *.my.domain

Web client works fine, shows website as secure and the cert is correct (attachment).

However, none of the android client work (both phone and tv). When I switch back to Let's Encrypt, it works again.

I tried adding full cert chain to PFX file, but didn't help.

Any suggestions where to go from there?

Server version: 10.10.3, hosted on Proxmox, latest available android apps.

[TheDreadPirate]

Check if the root CA they use is in your phone and TV's trust store. If not, you can try adding their root CA.

FYI, Let's Encrypt does wildcard certs if your DNS provider has a plugin for certbot. My DNS provider is Cloudflare, which has a certbot plugin, and I use wild card certs provided by LE.