title: LetsEncrypt SSL Error - SSL routines:ssl3_get_record:wrong version number
body: <p>I've managed to pull down a fresh cert from LetsEncrypt. My VirtualHost config is set up as:</p>
  
  <pre><code>&lt;VirtualHost *:80&gt;
      ServerName example.com
      Redirect 301 / https://example.com/
  &lt;/VirtualHost&gt;
  
  &lt;VirtualHost *:443&gt;
      Servername example.com
      DocumentRoot /var/www/example.com/wav
      ErrorLog /var/log/apache2/example.com/www/error.log
  
      SSLEngine On
      SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
      SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
  &lt;/VirtualHost&gt;
  </code></pre>
  
  <p>When trying to verify this with openssl:</p>
  
  <pre><code>openssl s_client -connect example.com -port 443
  </code></pre>
  
  <p>I get the following:</p>
  
  <pre><code>CONNECTED(00000003)
  140229655213824:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:252:
  ---
  no peer certificate available
  ---
  No client certificate CA names sent
  ---
  SSL handshake has read 5 bytes and written 202 bytes
  Verification: OK
  ---
  New, (NONE), Cipher is (NONE)
  Secure Renegotiation IS NOT supported
  Compression: NONE
  Expansion: NONE
  No ALPN negotiated
      SSL-Session:
      Protocol  : TLSv1.2
      Cipher    : 0000
      Session-ID: 
      Session-ID-ctx: 
      Master-Key: 
      PSK identity: None
      PSK identity hint: None
      SRP username: None
      Start Time: 1541086087
      Timeout   : 7200 (sec)
      Verify return code: 0 (ok)
      Extended master secret: no
  </code></pre>
  
  <hr>
  
  <p>So, looks like the handshake is okay but the cert isn't being sent.</p>
  
  <p>Worth pointing out that the Apache logs don't report any errors - just the usual - "starting up/shutting down" messages. <code>apache2ctl configtest</code> reports no issues.</p>