Certificate Expiration does not match

https://crt.sh/?q=mail.cebucity.gov.ph

My domain is: mydoamin = mail.cebucity.gov.ph

I ran this command:
1.)
echo | openssl s_client -connect mydomain:443 -servername mydomain 2>/dev/null | openssl x509 -noout -dates
result :
notBefore=Aug 7 07:27:58 2019 GMT
notAfter=Nov 5 07:27:58 2019 GMT

2.)
openssl x509 -noout -dates -in /etc/letsencrypt/live/mydomain/cert.pem
notBefore=Nov 4 00:59:17 2019 GMT
notAfter=Feb 2 00:59:17 2020 GMT

My web server is (include version):

The operating system my web server runs on is (include version): centos 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): i don’t know
but im using putty and it redirects me to root after logging in. Im very sorry its my first time using linux.

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
./certbot-auto --version

certbot 0.39.0

Pls. help first time using this and im lost, as you can see im currently using the nov 2019 expiry
and the renewed cert is 2020 but not using it :frowning:

Make sure your web server is using the same file.
Make sure you have restarted the web service since you renewed the cert.

how ? is there a link or guides that i can follow ? mostly the tutorials i have seen is installation only :frowning:

by the way thanks for the reply.

systemctl restart httpd.service

This one right ?

I don’t know which web server you are using nor how you installed the cert.

yes.

im just using centos 7, and installed it locally on /opt/letsencrypt

or is there any guide to remove all and install cert again ?

There is no need to start again from the beginning.

From what I can see, you are running nginx web server.

please show output of:
ls -l /etc/nginx/sites-enabled/

also try:
systemctl restart nginx

[you may have Apache and NGINX running]

[root@mail ~]# ls -l /etc/nginx/sites-enabled/
ls: cannot access /etc/nginx/sites-enabled/: No such file or directory

[root@mail ~]# ls -l /etc/apache/sites-enabled/
ls: cannot access /etc/apache/sites-enabled/: No such file or directory

[root@mail ~]# nginx -v
nginx version: nginx/1.7.1

[root@mail ~]# httpd -v
Server version: Apache/2.4.38 (Unix)
Server built: Feb 11 2019 07:20:15

[root@mail ~]# systemctl restart nginx
Failed to restart nginx.service: Unit not found.

try:
ls -l /etc/apache2/sites-enabled/

what does say?
nginx -t

[root@mail ~]# ls -l /etc/apache2/sites-enabled/
ls: cannot access /etc/apache2/sites-enabled/: No such file or directory

try:
ls -l /etc/httpd/

[root@mail ~]# ls -l /etc/httpd/
total 0
drwxr-xr-x. 2 root root 37 Aug 13 01:00 conf
drwxr-xr-x. 2 root root 98 Aug 13 01:00 conf.d
drwxr-xr-x. 2 root root 165 Aug 13 01:00 conf.modules.d
lrwxrwxrwx. 1 root root 19 Aug 13 01:00 logs -> …/…/var/log/httpd
lrwxrwxrwx. 1 root root 29 Aug 13 01:00 modules -> …/…/usr/lib64/httpd/modules
lrwxrwxrwx. 1 root root 10 Aug 13 01:00 run -> /run/httpd

Lets try:

find / -name apache.conf
find / -name apache2.conf
find / -name httpd.conf
find / -name nginx.conf

[root@mail ~]# find / -name apache.conf

[root@mail ~]# find / -name apache2.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/complex_parsing/ap ache2.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/debian_apache_2_4/ augeas_vhosts/apache2/apache2.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/debian_apache_2_4/ default_vhost/apache2/apache2.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/debian_apache_2_4/ multi_vhosts/apache2/apache2.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/debian_apache_2_4/ multiple_vhosts/apache2/apache2.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/complex_parsing/apache2.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/debian_apache_2_4/augeas_vhosts/apache2/apache2.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/debian_apache_2_4/default_vhost/apache2/apache2.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/debian_apache_2_4/multi_vhosts/apache2/apache2.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/debian_apache_2_4/multiple_vhosts/apache2/apache2.conf

[root@mail ~]# find / -name httpd.conf
/etc/httpd/conf/httpd.conf
/usr/lib/tmpfiles.d/httpd.conf
/opt/zimbra/conf/httpd.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/centos6_apache/apa che/httpd/conf/httpd.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/centos7_apache/apa che/httpd/conf/httpd.conf
/opt/letsencrypt/certbot-apache/certbot_apache/tests/testdata/gentoo_apache/apac he/apache2/httpd.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/centos6_apache/apache/httpd/conf/httpd.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/centos7_apache/apache/httpd/conf/httpd.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_apache/tests/testd ata/gentoo_apache/apache/apache2/httpd.conf

[root@mail ~]# find / -name nginx.conf
/opt/zimbra/conf/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/anoth ermapcase/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/chive /chive-nginx-master/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/cms-m ade-simple/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/codei gniter/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/djang ofastcgi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuw iki/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/drupa l/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dynam ic_ssi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/elgg/ nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/embed dedperlminifyjs/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/embed dedperlsitemapsproxy/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/fastc giexample/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/full- example/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/fulle xample2/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/geoip /nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/guide -to-nginx-ssl-spdy-hsts/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/hardw arelberrors/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/imapa uthenticatewithapacheperlscript/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/imapa uthenticatewithapachephpscript/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/imapp roxyexample/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/iphon e-website-with-nginx/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/iredm ail/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/javas ervers/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/jooml a/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/likea pache/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/loadb alanceexample/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/mailm an/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/media wiki/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/minio /sites-enabled/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/mono/ nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/mybb/ nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/nonro otwebpath/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/omeka /nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/oscom merce/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/ostic ket/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/phpfa stcgionwindows/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/phpfc gi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/phpli st/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/piwik /nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/pmwik i/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/pyroc ms/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/redmi ne/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/rever seproxycachingexample/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/separ ateerrorloggingpervirtualhost/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/silve rstripe/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/simpl ecgi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/simpl epythonfcgi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/simpl erubyfcgi/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/spip/ nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/symfo ny/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/upstr eam-issue-17/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/upstr eam-issue-19/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/wordp ress/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/xenfo ro/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/yii/n ginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/zend/ nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/zenph oto/nginx.conf
/opt/letsencrypt/certbot-compatibility-test/nginx/nginx-roundtrip-testdata/zope/ nginx.conf
/opt/letsencrypt/certbot-nginx/certbot_nginx/tests/testdata/etc_nginx/nginx.conf
/opt/letsencrypt/certbot-nginx/certbot_nginx/tests/testdata/etc_nginx/ubuntu_ngi nx_1_4_6/default_vhost/nginx/nginx.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_nginx/tests/testda ta/etc_nginx/nginx.conf
/opt/eff.org/certbot/venv/lib/python2.7/site-packages/certbot_nginx/tests/testda ta/etc_nginx/ubuntu_nginx_1_4_6/default_vhost/nginx/nginx.conf

You may have multiple web servers running…

Please show:
netstat -pant | grep -Ei '80|443|http|apache|nginx'

Sorry should have filtered that down to just the listen lines:
you can delete it, replace with:
netstat -pant | grep -Ei '80|443|http|apache|nginx' | grep -i listen

ZIMBRA:
tcp 0 0 0.0.0.0:7993 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7995 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7071 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7072 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7073 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:5222 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7110 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7143 0.0.0.0:* LISTEN 8280/java
tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:7025 0.0.0.0:* LISTEN 8280/java
tcp 0 0 0.0.0.0:5269 0.0.0.0:* LISTEN 8280/java

NGINX:
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 8961/nginx: master
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 8961/nginx: master
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 8961/nginx: master
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 8961/nginx: master
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 8961/nginx: master

APACHE:
tcp6 0 0 :::7780 :::* LISTEN 9482/httpd
tcp6 0 0 :::80 :::* LISTEN 15268/httpd

So Apache is in charge of port 80 and NGINX port 443.

Let’s find nginx configs…
more /opt/zimbra/conf/nginx.conf