Certbot stop sending renewal notification emails

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:it.thinkcloud.us

I ran this command: Auto renewal mail has stopped letsencrypt logs indicate renewal is taking place

It produced this output:

My web server is (include version):Apache

The operating system my web server runs on is (include version): Amazon Linux

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 1.29.0

1 Like

Hi @Kloud,

The renewal notifications are never sent by Certbot (which is software that runs on your server), but by the Let's Encrypt CA. They are only sent if renewal fails to happen within an expected period. If renewal is happening successfully, and the domain name coverage of your certificate hasn't changed, you should never have to get any renewal reminder e-mails at all.

2 Likes

Thank you for your prompt response. We have a crontab for letsencrypt renewal script and backup which run every 3am and 3pm and the cron daemon will sent output of all the sites that be been renewed successfully, skipped those that are not due for renewal and also notify when a renewal failed. I received this mail twice a day but for a week now I have not seen any emails.

1 Like

That sounds like something changed in your crontab or local "mail" config.

You can view what Certbot does from its logs in /var/log/letsencrypt

Is it running like you expect?

Let's Encrypt only sends an email, if needed, when a cert has not been renewed and has just 20 days left before expiration. And also with 7 days remaining. See Expiration Emails - Let's Encrypt

As noted by @schoen, Certbot itself does not send any emails. You may have setup some email using redirection or perhaps rely on default crontab emails.

I don't see any certs ever issued for that domain name. So, I couldn't check the public CT logs to see whether you are getting certs regularly. There is a cert for thinkcloud.us issued May15 this year and the prior to that was Jul12 2023. There are also a couple of active certs from GoDaddy.

3 Likes

Yeah, this sounds like a script that someone created specifically for your site, not any functionality that's built into Certbot. Do you know who created that script? Can you take a look at its contents?

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.