Certificate not renewing

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: bmc921.synology.me

I ran this command: Not sure( I use Home Assistant to renew this)

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /data/letsencrypt/renewal/bmc921.synology.me.conf

Traceback (most recent call last):
File “/usr/local/lib/python3.7/site-packages/certbot/renewal.py”, line 64, in _reconstitute
renewal_candidate = storage.RenewableCert(full_path, config)
File “/usr/local/lib/python3.7/site-packages/certbot/storage.py”, line 466, in init
File “/usr/local/lib/python3.7/site-packages/certbot/storage.py”, line 524, in _check_symlinks
“expected {0} to be a symlink”.format(link))
certbot.errors.CertStorageError: expected /data/letsencrypt/live/bmc921.synology.me/cert.pem to be a symlink
Renewal configuration file /data/letsencrypt/renewal/bmc921.synology.me.conf is broken. Skipping.

No renewals were attempted.
Additionally, the following renewal configurations were invalid:
/data/letsencrypt/renewal/bmc921.synology.me.conf (parsefail)

0 renew failure(s), 1 parse failure(s)

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

Is there an update/newer version available?

Hi @n3tguru


you see a problem. Looks like you have changed the /live/bmc921.synology.me/cert.pem manual. So undo that.

Checking your domain your port 80 doesn't answer - https://check-your-website.server-daten.de/?q=bmc921.synology.me

Domainname Http-Status redirect Sec. G
http://bmc921.synology.me/ -2 1.410 V
ConnectFailure - Unable to connect to the remote server
http://www.bmc921.synology.me/ -2 1.410 V
ConnectFailure - Unable to connect to the remote server

Looks like a blocking firewall. Access to port 80 is required if you want to use http validation.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.