# X509: certificate signed by unknown authority

**URL:** <https://forum.inductiveautomation.com/t/x509-certificate-signed-by-unknown-authority/107007>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [June 4, 2025, 11:01am UTC](https://forum.inductiveautomation.com/t/x509-certificate-signed-by-unknown-authority/107007 "2025-06-04T11:01:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ankush\_Chowdhury](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankush\_Chowdhury](https://forum.inductiveautomation.com/u/Ankush_Chowdhury)\
**Post date:** [June 4, 2025, 11:01am UTC](https://forum.inductiveautomation.com/t/x509-certificate-signed-by-unknown-authority/107007/1 "2025-06-04T11:01:33Z")

</div>

I was trying to send alert from Grafana to ignition using webhook Post method. When I was trying to do test connection then below error coming.  
Failed to send test alert.: Post "[https://ignition](https://ignition)\*\*\*\*\*com:443/system/webdev/Alerts/Grafana/Grafana": tls: failed to verify certificate: x509: certificate signed by unknown authority

Need some support to resolve this issue.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [June 4, 2025, 12:07pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-signed-by-unknown-authority/107007/2 "2025-06-04T12:07:05Z")

</div>

> [@Ankush\_Chowdhury](#):
>
> signed by unknown authority

Where did you get your server's certificate? If self-signed, you will have to get a real one. If already real, you should check for interference from corporate firewalls playing man-in-the-middle.

Getting a real certificate from Let's Encrypt is what I recommend.

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [June 4, 2025, 1:47pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-signed-by-unknown-authority/107007/3 "2025-06-04T13:47:20Z")

</div>

> [@pturmel](#):
>
> Getting a real certificate from Let's Encrypt is what I recommend.

... and leveraging [DNS-01 challenges](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge) for non-public servers is a great way to get it done--as long as you control the domain, you can use TXT records as the validation mechanism.