Certificate expired

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: cursocidadaodomundo.com

I ran this command: ee site update cursocidadaodomundo.com --letsencrypt=renew

It produced this output: Renewing SSl cert for https://cursocidadaodomundo.com
ERROR : Cannot RENEW SSL cert !
Your current cert already EXPIRED !
Check logs for reason tail /var/log/ee/ee.log & Try Again!!!

My web server is (include version): vultr.com ???

The operating system my web server runs on is (include version): Ubuntu 18.04 x64

My hosting provider, if applicable, is: putty ???

I can login to a root shell on my machine (yes or no, or I don't know): YES

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Hi all.
I use putty to type the command line.
I do not have certbot
all i need is a command line to solve the expired letsencript certificate.
Maybe uninstall and install again or what ever.
This time I did not receive the expiry alert email and I messed up.

Please help. in simple comand lines, I hve no idea what I'm doing!!!

This looks like a good place to start tracking down the problem--did you try it?

1 Like

I know that my the reason is a expired certificate.

All I need is a command to reset my letsencript once the =renew option is not working

That's a very illogical error message, as Let's Encrypt perfectly accepts invalid certificates when validationg a hostname using the HTTP-01 challenge, if HTTP is being redirected to HTTPS.

Chances are slim someone here on the Community just somehow happens to know how to do that I'm afraid. Why are you using ee anyway? What ACME client is that?

1 Like

I have n idea.
I just followed a step by step on a emarketing curse.
I don't even know what a ACME is.

It cannot be that difficult to reset the certificate

It's called "EasyEngine" ("ee" in the CLI).

And you are correct:

2 Likes

Better call it the nsee! Not so Easy Engine...

2 Likes

@thorstenberg, I would suggest asking about your problem at

as there is more expertise about EasyEngine over there than here on this forum. (The steps to renew a Let's Encrypt certificate are different depending on what software you use—there isn't just one command line that works in every environment—and EasyEngine doesn't seem to be something that people here have much experience with.)

5 Likes

No, that is not your reason. The software literally tells you, both to check the logs for the reason for the failure, and how to check the logs. And in case you hadn't noticed that line, I pointed it out to you, two days ago. Have you yet done that? It might not help us solve the problem (nobody here seems to be familiar with the site software you're using), but then again it might.

3 Likes

Osiris, do you know how to fix this?

I just followed a step by step to setup my Website. I'm not a programmer or web designer.

So, please, don't blame ore judge me. All I need is to get my ssl back.

The history only shows the last commands typed in. No help on that at all.

And thanks for your help so far.

Thorsten

2 Likes

I'm blaming the software developers :wink:

2 Likes

great. me too.

but, would you be able to find a solution?

I don't have experience with EE, but maybe the log file at /var/log/ee/ee.log can shed some light on the situation.

2 Likes

Here is the log result

Renewing SSl cert for https://cursocidadaodomundo.com

ERROR : Cannot RENEW SSL cert !

Your current cert already EXPIRED !

Check logs for reason tail /var/log/ee/ee.log & Try Again!!!

root@cursocidadaodomundo:~# tail /var/log/ee/ee.log

2021-10-03 16:32:09,698 (DEBUG) ee : Running command: date -d "openssl x509 -in /etc/letsencrypt/live/cursocidadaodomundo.com/cert.pem -text -noout|grep "Not A fter"|cut -c 25-" +%s

2021-10-03 16:32:09,708 (DEBUG) ee : Command Output: 1631858096

1 Like

This is an interesting piece of information:

It seems to be using some version of certbot.
If we can find it, then we might be able to work with it to renew your system.
Please show:
which certbot
which certbot-auto
which letsencrypt
which letsencrypt-auto

If none are found, because it might have renamed it (or worse), we might still be able to add another ACME client ("certbot") and use that to work with.

1 Like

I'll be away from my pc till 09/10.
As soon I'm back I send you the data.

Hi guys. Thank you so much for your time in these matter. But it was taking too long, so I moved everything to Godady and paid for it. At least now it is running again.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.