But how should I renew my certificates?

[alebal]

My domain is:
https://alebalweb-blog.com

I ran this command:
sudo certbot renew --dry-run
sudo certbot renew

It produced this output:
/etc/letsencrypt/live/alebalweb-blog.com/fullchain.pem expires on 2019-07-01 (skipped)

My web server is (include version):
ubuntu 18.04 apache

The operating system my web server runs on is (include version):
ubuntu 18.04 apache

My hosting provider, if applicable, is:
vultr

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.31.0

I keep getting emails saying my certificate expires in 10 days.

Your certificate (or certificates) for the names listed below will expire in 10 days (on 18 Apr 19 21:27 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.

When I launch the commands: sudo certbot renew–dry-run, sudo certbot renew the output says that certificates do not need to be renewed. In my cronjob there is the command “certbot renew” which is launched once a month.

Can you tell me how to be sure that the certificates have been renewed, those mails bring me much anxiety, we can not understand why they continue to arrive if the deadline has been postponed.

[JuergenAuer]

Hi @alebal

@alebal

My domain is:
https://alebalweb-blog.com

your both connections (non-www and www) use the following Letsencrypt certificate ( https://check-your-website.server-daten.de/?q=alebalweb-blog.com ):

CN=alebalweb-blog.com
	03.04.2019
	02.07.2019
expires in 84 days	alebalweb-blog.com, www.alebalweb-blog.com - 2 entries

So it's a new certificate, 6 days old.

But there is an older - active - certificate with a lot of domain names:

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
1349225570	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-04-02 20:34:37	2019-07-01 20:34:37	alebalweb-blog.com, www.alebalweb-blog.com
1165314957	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-02-01 18:24:41	2019-05-02 17:24:41	alebalweb-blog.com, www.alebalweb-blog.com
1123089813	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-01-18 20:27:51	2019-04-18 19:27:51	adulthashtag.com, ...

with a very long list of domain names.

Letsencrypt doesn't know which certificate is used -> and sends the mail.

So if you don't use that certificate, you can ignore the mail.