Certbot : All renewal attempts failed. The following certs could not be renewed

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: www.echoraydar.com

I ran this command: certbot renew --preferred-challenge http-01

It produced this output:
All renewal attempts failed. The following certs could not be renewed.

My web server is (include version): tomcat 8.0

The operating system my web server runs on is (include version): CentOS Linux 7 (Core)

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.21.0

We basically run certbot on machine where many domains are configured for certificate. Other domains upgrade succeed but above domain and another domain certificate update fails.
Even if we run dry run for above domain then it doesnt give any issue. with with real cert command it fails.

1 Like

Hi @abdulqayyum998

why is there a mix of cPanel and Certbot? https://check-your-website.server-daten.de/?q=echoraydar.com#ct-logs

Issuer not before not after Domain names LE-Duplicate next LE
cPanel, Inc. Certification Authority 2019-10-14 2020-01-13 cpanel.echoraydar.com, echoraydar.com, echoraydar.raydarresearch.com, mail.echoraydar.com, webdisk.echoraydar.com, webmail.echoraydar.com, www.echoraydar.com, www.echoraydar.raydarresearch.com
8 entries
Let's Encrypt Authority X3 2019-09-28 2019-12-27 www.bi.echoraydar.com
1 entries
Let's Encrypt Authority X3 2019-09-28 2019-12-27 bi.echoraydar.com
1 entries
Let's Encrypt Authority X3 2019-08-22 2019-11-20 echoraydar.com, www.echoraydar.com
2 entries
Let's Encrypt Authority X3 2019-08-22 2019-11-20 www.ppsb.echoraydar.com
1 entries
Let's Encrypt Authority X3 2019-08-22 2019-11-20 ppsb.echoraydar.com
1 entries
cPanel, Inc. Certification Authority 2019-07-31 2019-10-30 autodiscover.echoraydar.com, cpanel.echoraydar.com, echoraydar.com, echoraydar.raydarresearch.com, mail.echoraydar.com, webdisk.echoraydar.com, webmail.echoraydar.com, www.echoraydar.com, www.echoraydar.raydarresearch.com
9 entries

You should never mix control panels with own clients.

The cPanel certificate is valid. Use that with your Tomcat.

1 Like

I will repeat it (and in bold) for any future readers NOT to miss:

if we disable cpanel for echoraydar.com and www.echoraydar.com then cert bot should work? Also while running it through dry run command why it doesnt give error? And last time it got upgraded successfully with mixed configuration?

I don't know. Mixed systems are always terrible, you may have additional bugs -> new problems.

Same with your other questions.

And you have a Tomcat, so additional steps are required, so Tomcat is able to use that certificate.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.