Following are the details of the commands I ran. It appears that the godaddy certificate is still active. I ran it twice and chose option 1 during the second time.
Any help would be greatly appreciated. Please do let me know if there is anything else that can help debug this - nginx config file for example.
Cheers
My domain is: galleri5.com
I ran this command: sudo certbot --nginx -d galleri5.com,www.galleri5.com,brands.galleri5.com --expand
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn’t close to expiry.
(ref: /etc/letsencrypt/renewal/galleri5.com-0001.conf)
What would you like to do?
1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)
Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 1
Keeping the existing certificate
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/galleri5_nginx.conf
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/galleri5_nginx.conf
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/galleri5_nginx.conf
Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you’re confident your site works on HTTPS. You can undo this
change by editing your web server’s configuration.
Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 2
Traffic on port 80 already redirecting to ssl in /etc/nginx/sites-enabled/galleri5_nginx.conf
Traffic on port 80 already redirecting to ssl in /etc/nginx/sites-enabled/galleri5_nginx.conf
Redirecting all traffic on port 80 to ssl in /etc/nginx/sites-enabled/galleri5_nginx.conf
Congratulations! You have successfully enabled https://galleri5.com,
https://www.galleri5.com, and https://brands.galleri5.com
You should test your configuration at:
https://www.ssllabs.com/ssltest/analyze.html?d=galleri5.com
https://www.ssllabs.com/ssltest/analyze.html?d=www.galleri5.com
https://www.ssllabs.com/ssltest/analyze.html?d=brands.galleri5.com
IMPORTANT NOTES:
-
Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/galleri5.com-0001/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/galleri5.com-0001/privkey.pem
Your cert will expire on 2019-05-28. To obtain a new or tweaked
version of this certificate in the future, simply run certbot again
with the “certonly” option. To non-interactively renew all of
your certificates, run “certbot renew”
-
If you like Certbot, please consider supporting our work by:
Donating to ISRG / Let’s Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le
My web server is (include version): nginx/1.10.0
The operating system my web server runs on is (include version): Ubuntu 14.04
My hosting provider, if applicable, is: Google Cloud
I can login to a root shell on my machine (yes or no, or I don’t know): yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version
or certbot-auto --version
if you’re using Certbot): certbot 0.28.0