Cert renew didn't seem to work

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kobotoolbox.fhi360.org

I ran this command: docker-compose stop nginx
Sudo certbot renew,
Sudo cp /etc/letsencrypt/live/kobotoolbox.fhi360.org/fullchain.pem /usr/kobo/kobo-docker/secrets/ssl.crt
Sudo cp /etc/letsencrypt/live/ kobotoolbox.fhi360.org/privkey.pem / usr/kobo/kobo-docker/secrets/ssl.key
docker-compose up -d

It produced this output: It seemed to run successfully
My web server is (include version): nginx

The operating system my web server runs on is (include version):ubuntu
My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

I renewed certs before expiration date successfully, but when I go to the site, I receive “NET::ERR_CERT_DATE_INVALID”

2

Hi @shamonbent

checking your domain there is no new certificate ( https://check-your-website.server-daten.de/?q=kobotoolbox.fhi360.org#ct-logs ):

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-05-30 2019-08-28 en.kobotoolbox.fhi360.org, kc.kobotoolbox.fhi360.org, kf.kobotoolbox.fhi360.org, kobotoolbox.eastus.cloudapp.azure.com, kobotoolbox.fhi360.org, kpi.kobotoolbox.fhi360.org
6 entries
Let's Encrypt Authority X3 2019-05-30 2019-08-28 en.kobotoolbox.fhi360.org, kc.kobotoolbox.fhi360.org, kf.kobotoolbox.fhi360.org, kobotoolbox.eastus.cloudapp.azure.com, kobotoolbox.fhi360.org, kpi.kobotoolbox.fhi360.org
6 entries
Let's Encrypt Authority X3 2019-03-07 2019-06-05 en.kobotoolbox.fhi360.org, kc.kobotoolbox.fhi360.org, kf.kobotoolbox.fhi360.org, kobotoolbox.eastus.cloudapp.azure.com, kobotoolbox.fhi360.org, kpi.kobotoolbox.fhi360.org
6 entries
Let's Encrypt Authority X3 2019-03-03 2019-06-01 en.kobotoolbox.fhi360.org, kc.kobotoolbox.fhi360.org, kf.kobotoolbox.fhi360.org, kobotoolbox.eastus.cloudapp.azure.com, kobotoolbox.fhi360.org, kpi.kobotoolbox.fhi360.org
6 entries

So you have two active certificates. But you use an expired certificate:

CN=kobotoolbox.fhi360.org
	07.03.2019
	05.06.2019
53 days expired	
en.kobotoolbox.fhi360.org, kc.kobotoolbox.fhi360.org, 
kf.kobotoolbox.fhi360.org, kobotoolbox.eastus.cloudapp.azure.com, 
kobotoolbox.fhi360.org, kpi.kobotoolbox.fhi360.org - 6 entries

Are all 6 domain names active?

PS: So the renew command doesn't work.

3

Hi, yes all 6 are active.

4

Then try to find your certbot output / log to see, why the renew command doesn’t work.

Without the log it’s only speculative.

5

Please see below…

letsencrypt.log.8.txt (707.8 KB)

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.