Hi @MikeMcQ - Yes, that is the process I used.
"We see a wildcard cert and a non-wildcard in your history."
I moved the site to AWS in July 2022, I renewed it twice manually, then in February 2023 I renewed using the process provided by the AWS docs you linked to. In May, it expired even though the bncert tool was supposed to auto renew it. So, I renewed it again in May using the same process.
Now, two months later, it says revoked but with no reason.
I am trying to understand what @petercooperjr is trying to convey to me, but the jargon is hard to follow as I am completely new at this process. Is he saying that my server was hacked, or ????
I chose lightsail/bncert method because it looked like a set-it-and-forget-it process. Doesn't seem to be that.
Are there any bncert technicians in this forum who could give some greater visibility on what their tool is doing, and how it may have failed here?
I'm reviewing this article now to see that all is configured ok:
https://docs.bitnami.com/aws/how-to/understand-bncert/#certificates-not-renewed-automatically