Certificate not issued for domainname.wedding

[Tank]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: https://montsaintmichel.wedding/

I ran this command: (nside crontab)
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

0 */12 * * * root test -x /usr/bin/certbot && perl -e ‘sleep int(rand(3600))’ && certbot -q renew

It produced this output: no certificate update, while for other domain, the same command is working (example : oloupstmichel.fr)

My web server is (include version): Apache/2.4.7

The operating system my web server runs on is (include version): Ubuntu 14.04.5 LTS

I can login to a root shell on my machine (yes or no, or I don’t know): yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.22.2

[JuergenAuer]

Hi @Tank

@Tank

certbot -q renew

please don't run Certbot with the -q parameter. That hides too much.

What's the error Certbot shows?

Your certificate ( montsaintmichel.wedding - Make your website better - DNS, redirects, mixed content, certificates ):

CN=montsaintmichel.wedding
	05.02.2019
	06.05.2019
177 days expired	montsaintmichel.wedding, www.montsaintmichel.wedding - 2 entries

is 177 days expired, so it's an old problem.

And your configuration is buggy, there is a redirect to a not existing domain:

Domainname	Http-Status	redirect	Sec.	G
• http://montsaintmichel.wedding/ 178.79.166.197	302	https://www.montsaintmichel.wedding Html is minified: 100,00 %	0.063	E
• http://www.montsaintmichel.wedding/ 178.79.166.197	302	https://www.montsaintmichel.wedding Html is minified: 100,00 %	0.064	A
• https://montsaintmichel.wedding/ 178.79.166.197 GZip used - 3726 / 21469 - 82,64 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 127,08 %	3.513	N
Certificate error: RemoteCertificateChainErrors
• https://www.montsaintmichel.wedding/ 178.79.166.197 GZip used - 3726 / 21469 - 82,64 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 127,08 %	3.233	N
Certificate error: RemoteCertificateChainErrors
• https://www.montsaintmichel.wedding GZip used - 3726 / 21469 - 82,64 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 127,08 %	3.297	N
Certificate error: RemoteCertificateChainErrors
• http://montsaintmichel.wedding/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 178.79.166.197 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	302	https://www.montsaintmichel.wedding.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 100,00 %	0.063	E
Visible Content: Found The document has moved here .
• http://www.montsaintmichel.wedding/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 178.79.166.197 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	302	https://www.montsaintmichel.wedding.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 100,00 %	0.063	A
Visible Content: Found The document has moved here .
• https://www.montsaintmichel.wedding.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-1		0.047	R
NameResolutionFailure - The remote name could not be resolved: 'www.montsaintmichel.wedding.well-known'

Happens, if your redirect rule has a "missing slash".

Your first redirect has the same problem:

http://montsaintmichel.wedding/ -> https://www.montsaintmichel.wedding

so if a subfolder is redirected, that's a not existing domain name.

[Tank]

Thank you very much, it was the missing slash error. Everything is working again!
BR,
Tank