Discrepancy between expiration email and certbot

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: theprequel.org

I ran this command: certbot renew

It produced this output:


Processing /etc/letsencrypt/renewal/theprequel.org.conf


Cert is due for renewal, auto-renewing…

Plugins selected: Authenticator nginx, Installer nginx

Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org

Renewing an existing certificate

Performing the following challenges:

tls-sni-01 challenge for www.theprequel.org

tls-sni-01 challenge for theprequel.org

Cleaning up challenges

Attempting to renew cert (theprequel.org) from /etc/letsencrypt/renewal/theprequel.org.conf produced an unexpected error: Could not automatically find a matching server block for www.theprequel.org. Set the server_name directive to use the Nginx installer… Skipping.


Processing /etc/letsencrypt/renewal/theprequel.org-0001.conf


Cert not yet due for renewal

All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/theprequel.org/fullchain.pem (failure)


The following certs are not due for renewal yet:

/etc/letsencrypt/live/theprequel.org-0001/fullchain.pem expires on 2018-11-30 (skipped)

All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/theprequel.org/fullchain.pem (failure)


1 renew failure(s), 0 parse failure(s)

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: linode

I can login to a root shell on my machine (yes or no, or I don’t know):yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):