Certificate renew goes well, but it's still expired

[tonyzorin]

Hi all.
Trying to renew server's SSL certificate and this is what I get see:

bitnami@ip-172-31-49-134:/opt/bitnami/letsencrypt/certificates$ /opt/bitnami/letsencrypt/scripts/renew-certificate.sh
2019/08/07 20:13:09 [INFO] [PRODUCKT.IO] acme: Trying renewal with -405 hours remaining
2019/08/07 20:13:09 [INFO] [produckt.io, www.produckt.io, PRODUCKT.IO, WWW.PRODUCKT.IO] acme: Obtaining bundled SAN certificate
2019/08/07 20:13:10 [INFO] [produckt.io] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/KpekaVDfk5NiixfMck7AzZxhbbxkofkDwDWQNrdvIhA
2019/08/07 20:13:10 [INFO] [www.produckt.io] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/ISGI2V0f3n47L_nczEe8LQe9lB5uqu7pjQHzMfYGBvc
2019/08/07 20:13:10 [INFO] [www.produckt.io] acme: authorization already valid; skipping challenge
2019/08/07 20:13:10 [INFO] [produckt.io] acme: authorization already valid; skipping challenge
2019/08/07 20:13:10 [INFO] [produckt.io, www.produckt.io, PRODUCKT.IO, WWW.PRODUCKT.IO] acme: Validations succeeded; requesting certificates
2019/08/07 20:13:11 [INFO] [produckt.io] Server responded with a certificate.

But it's still shown as expired.
Am I missing something?

Thanks

[_az]

Could you show the contents of your renew-certificate.sh script?

In the Bitnami documentation, the example restarts the Apache server, but you need to change it to restart nginx, since you are using that instead.

In any case, you should first try to restart nginx to see if it solves your issue:

sudo /opt/bitnami/ctlscript.sh restart nginx

[tonyzorin]

#!/bin/bash
sudo /opt/bitnami/ctlscript.sh stop apache
sudo /opt/bitnami/letsencrypt/lego --tls --email="hello@produckt.io" --domains="PRODUCKT.IO" --domains="WWW.PRODUCKT.IO" --path="/opt/bitnami/letsencrypt" renew --days 90
sudo /opt/bitnami/ctlscript.sh start apache

Indeed, I missed that out. Updated to nginx, still not working.

Expired: Monday, July 22, 2019