Certificate expiration notice

[Creak]

Hi!

I’ve seen this comment from @jsha, saying that if we received an expiration notice email that is after March 17, 2016 6:32PM UTC, we should start a new thread.

I renewed my certificates 11 days ago, but I received an expiration notice 3 days ago (so well after March 17th).

Here is my renew output from this morning, saying that everything is right:

$ sudo ./letsencrypt-auto renew          
Checking for new version...
Requesting root privileges to run letsencrypt...
   /root/.local/share/letsencrypt/bin/letsencrypt renew

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/domain1.tld.conf
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/domain2.tld.conf
-------------------------------------------------------------------------------

The following certs are not due for renewal yet:
  /etc/letsencrypt/live/domain1.tld/fullchain.pem (skipped)
  /etc/letsencrypt/live/domain2.tld/fullchain.pem (skipped)
No renewals were attempted.

Should I care about the email?

Thanks!

[pfg]

It's a bit more complicated - if you receive mail for a certificate that's been issued after that date, then something went wrong. Otherwise, this is expected. Here are some more details:

Expiration notices for certificates that don't expire yet

…

[Creak]

Ok so if I understand right, I just need to wait until the (wrong) expiration date written in the mail and then everything should be alright.

[markengelhardt]

So it will be 90 days after March 17th before this is resolved for all domains?

[jsha]

Yep, or sooner than that once we run the necessary backfill job, which should be soon now.