# Action required: Let's Encrypt certificate renewals

**URL:** <https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445>\
**Category:** Help\
**Created:** [January 21, 2019, 7:43am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445 "2019-01-21T07:43:01Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [January 21, 2019, 7:43am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/1 "2019-01-21T07:43:01Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:archarena.com

I ran this command:

It produced this output:

My web server is (include version):IIS

The operating system my web server runs on is (include version):Windows server 2012

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): i don’t know

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):Using IIS

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):let’s encrypt

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [January 21, 2019, 8:46am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/2 "2019-01-21T08:46:17Z")

</div>

Hi @Arunkumar

> [@Arunkumar](#):
>
> My domain is:archarena.com

your server is completely offline, I see only timeouts ( [https://check-your-website.server-daten.de/?q=archarena.com](https://check-your-website.server-daten.de/?q=archarena.com) ):

| Domainname | Http-Status | redirect | Sec. | G |
| --- | --- | --- | --- | --- |
| • [http://archarena.com/](http://archarena.com/) | | | | |
| 173.220.109.12 | -14 | | 10.027 | T |
| Timeout - The operation has timed out | | | | |
| | | | | |
| • [http://www.archarena.com/](http://www.archarena.com/) | | | | |
| 173.220.109.12 | -14 | | 10.027 | T |
| Timeout - The operation has timed out | | | | |
| | | | | |
| • [https://archarena.com/](https://archarena.com/) | | | | |
| 173.220.109.12 | -14 | | 10.027 | T |
| Timeout - The operation has timed out | | | | |
| | | | | |
| • [https://www.archarena.com/](https://www.archarena.com/) | | | | |
| 173.220.109.12 | -14 | | 10.027 | T |
| Timeout - The operation has timed out | | | | |
| | | | | |
| • [http://archarena.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://archarena.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 173.220.109.12 | -14 | | 10.027 | T |
| Timeout - The operation has timed out | | | | |
| | | | | |
| • [http://www.archarena.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://www.archarena.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 173.220.109.12 | -14 | | 10.026 | T |
| Timeout - The operation has timed out | | | | |

You have one certificate, but this has another domain name:

[https://transparencyreport.google.com/https/certificates?cert\_search\_auth=&cert\_search\_cert=p:YXJjaGFyZW5hLmNvbTp0cnVlOnRydWU6OkVBRT0&cert\_search=include\_expired:true;include\_subdomains:true;domain:archarena.com&lu=cert\_search\_cert](https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=p:YXJjaGFyZW5hLmNvbTp0cnVlOnRydWU6OkVBRT0&cert_search=include_expired:true;include_subdomains:true;domain:archarena.com&lu=cert_search_cert)

How did you create that certificate? There ( [https://check-your-website.server-daten.de/?q=apps.archarena.com](https://check-your-website.server-daten.de/?q=apps.archarena.com) ) the

```nohighlight
/.well-known/acme-challenge/ 

```

works, sends a correct 404 (file not found).

---

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [January 21, 2019, 9:02am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/3 "2019-01-21T09:02:31Z")

</div>

Hi,

i got this email"Action required: Let’s Encrypt certificate renewals", i would like to know how to check my let’s encrypt software using TLS-SNI-01 validation? Please let me know.

Thanks,  
Arunkumar A

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [January 21, 2019, 9:33am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/4 "2019-01-21T09:33:00Z")

</div>

> [@Arunkumar](#):
>
> i would like to know how to check my let’s encrypt software using TLS-SNI-01 validation?

Then please answer the questions:

Command - output - version.

There are different "Letsencrypt - Clients" named Letsencrypt.

How did you create your certificate?

It's valide 2019-03-06, so it's not critical. Check if the renew the next two times work. If yes, you can ignore the mail.

---

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [January 25, 2019, 7:48am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/5 "2019-01-25T07:48:00Z")

</div>

Hi,

Sorry for the late reply, we are using http-01 validation, I will share my output file ASAP.

Thanks,

Arunkumar A

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [January 25, 2019, 8:55am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/6 "2019-01-25T08:55:09Z")

</div>

> [@Arunkumar](#):
>
> we are using http-01 validation

If you use already http-01 - validation, all should be fine. The problem is the tls-sni-validation, this is deprecated. So people have to switch from tls-sni to http- or dns-validation.

---

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [February 12, 2019, 10:13am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/7 "2019-02-12T10:13:55Z")

</div>

Hi,

In the let’s encrypt we are selecting option 4 for validation that is [http-01] create temporary application in IIS(Recommended),

is this okay?

Thanks,

Arunkumar A

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [February 12, 2019, 10:48am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/8 "2019-02-12T10:48:09Z")

</div>

> [@Arunkumar](#):
>
> In the let’s encrypt we are selecting option 4 for validation that is [http-01] create temporary application in IIS(Recommended),

If you use http-01 validation, then it's ok. http-01 validation is the standard method to validate a domain name.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [February 12, 2019, 10:27pm UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/9 "2019-02-12T22:27:45Z")

</div>

> [@Arunkumar](#):
>
> create temporary application in IIS(Recommended)

I've never seen this option before.  
What is the actual ACME client program name/URL?

---

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [February 13, 2019, 8:47am UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/10 "2019-02-13T08:47:34Z")

</div>

Hi,

FYI

 ![](https://global.discourse-cdn.com/letsencrypt/original/3X/d/1/d12dde591e698a17b56a1a3de4157b605094702d.png)

![](https://global.discourse-cdn.com/letsencrypt/original/3X/d/d/ddbd4396d18dbf67124c79673aa2588755ddeb79.png)

![](https://global.discourse-cdn.com/letsencrypt/original/3X/c/e/ce92e23b7839daed471e9b6aaaf098ac103fd3d5.png)

We are creating the SSL certificate using the option number 4,

please let me know in case of any issues on this renewal.

Thanks,

Arunkumar A

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [February 13, 2019, 4:06pm UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/11 "2019-02-13T16:06:24Z")

</div>

Has option #4 [HTTP-01] worked before?

Have you tried option #1 [TLS-SNI-01]?

Have you tried option #5 [HTTP-01]?

---

<div class="post-metadata">

**Author:** ![Arunkumar](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Arunkumar](https://community.letsencrypt.org/u/Arunkumar)\
**Post date:** [February 13, 2019, 4:18pm UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/12 "2019-02-13T16:18:16Z")

</div>

Yes, we used to create a SSL certificate with option 4, it worked fine.

Is it okay right?

Thanks,

Arunkumar A

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [February 13, 2019, 4:25pm UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/13 "2019-02-13T16:25:29Z")

</div>

> [@Arunkumar](#):
>
> Is it okay right?

Yes, any option with HTTP-01 is ideal.  
Can you try using option #5 (also HTTP-01)?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 15, 2019, 4:25pm UTC](https://community.letsencrypt.org/t/action-required-lets-encrypt-certificate-renewals/83445/14 "2019-03-15T16:25:31Z")

</div>

Closed on March 15, 2019, 4:25pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
