Certificate expired, certbot shows wrong year

My domain is:
https://cdna.motocompano.com/preview/image/2Z/tM/2ZlyE-tMxGuK-A

I ran this command:

sudo /home/www-user/.virtualenvs/letsencrypt/bin/python /home/www-user/.virtualenvs/letsencrypt/bin/certbot renew --dry-run
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/cdna.motocompano.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Simulating renewal of an existing certificate for cdna.motocompano.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all simulated renewals succeeded:
  /etc/letsencrypt/live/cdna.motocompano.com/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
www-user@moco-news-A:/opt/nginx_with_status/logs$ sudo /home/www-user/.virtualenvs/letsencrypt/bin/python /home/www-user/.virtualenvs/letsencrypt/bin/certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/cdna.motocompano.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificates are not due for renewal yet:
  /etc/letsencrypt/live/cdna.motocompano.com/fullchain.pem expires on 2022-01-14 (skipped)
No renewals were attempted.

Servers date shows:
Mon Nov 15 10:42:06 CET 2021

SSL Labs, shows that the certificate expired yesterday:
https://www.ssllabs.com/ssltest/analyze.html?d=cdna.motocompano.com

Certbot version:
certbot 1.18.0

Summary: Certbot shows expire date 15/Nov/2022, SSLALBS shows expire date 15/Nov/2021. How to fix that ?

In certificate transparency record certbot did renew the certificate in October crt.sh | 5422528703
it's your webserver not using the renewed certificate. what's your webserver? (visiting it says it's nginx 1.12.2 so likely centos7)
can you try sudo nginx -T and post its result

2 Likes

Thanks, I missed to restart nginx :slight_smile:

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.