Cert expired - but won't renew


#1

For a development site I’m using LetsEncrypt and has been for quite some time with no problems, then this morning I can’t access the site - browser tells me site has expired. I log onto the server using ssh and run letsencrypt renew - but get the result “not due for renewal yet”.

Can someone point me in the right direction for a fix ? I haven’t been messing with server setup so I know I didn’t change anything on the server that would result in this.

Best regards,
Mark

My domain is: dev.crewplan.dk

I ran this command: letsencrypt renew

It produced this output:
Processing /etc/letsencrypt/renewal/www.frivilligbornholm.dk.conf
Processing /etc/letsencrypt/renewal/dev.olfs.dk.conf
Processing /etc/letsencrypt/renewal/www.shiftplanpro.com.conf
Processing /etc/letsencrypt/renewal/brk.dev.lokalfrivillig.dk.conf
Processing /etc/letsencrypt/renewal/myadmin.lokalfrivillig.dk.conf
Processing /etc/letsencrypt/renewal/piwik.lokalfrivillig.dk.conf
Processing /etc/letsencrypt/renewal/dev.crewplan.dk.conf

The following certs are not due for renewal yet:
/etc/letsencrypt/live/www.frivilligbornholm.dk/fullchain.pem (skipped)
/etc/letsencrypt/live/dev.olfs.dk/fullchain.pem (skipped)
/etc/letsencrypt/live/www.shiftplanpro.com/fullchain.pem (skipped)
/etc/letsencrypt/live/brk.dev.lokalfrivillig.dk/fullchain.pem (skipped)
/etc/letsencrypt/live/myadmin.lokalfrivillig.dk/fullchain.pem (skipped)
/etc/letsencrypt/live/piwik.lokalfrivillig.dk/fullchain.pem (skipped)
/etc/letsencrypt/live/dev.crewplan.dk/fullchain.pem (skipped)
No renewals were attempted.

My web server is (include version): Apache/NGINX (ServerPilot Free)

The operating system my web server runs on is (include version): Ubuntu 16.04

My hosting provider, if applicable, is: Dedicated server, selfhosted

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): ServerPilot Free


#2
cat /etc/letsencrypt/renewal/dev.crewplan.dk.conf
service nginx-sp reload

#3

Please disregard - suddenly my browser does not think the cert has expired and I’m having normal access to the site. Weird as I tested on 3 browsers (one pc though)

Sorry for the inconvenience!


#4

That’s because each website remains some cache (including certificates) in browser for a certain amount of time.

Next time, just refresh the site with Ctrl+F5 (refresh without cache) or open an incognito page.

Thank you


#5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.