Email that encryption will expire

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

I am receiving emails that my encryption will expire. I no longer have the developer that set this up. I dont know the signon or password. I need help to make sure this is not a scam and I can recertify the encription. Thanks

My domain is: bookdirectforgottencoast.com

I ran this command: I received an email

It produced this output: The email states that an encription will expire

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: hostinger

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

Let's Encrypt does not use a signon or password to get certs. You use an ACME Client program to get a cert from LE which is an ACME Server. There are numerous ACME Clients (and several other ACME Server providers than Let's Encrypt).

But, your domain is "proxied" at Cloudflare. That is the best place to start. The Cloudflare CDN edge manages the cert between the browser and it. Then you have a cert to manage the connection between your Origin server and Cloudflare edge.

It's possible you may be using a Cloudflare Origin CA Cert on your Origin server and no longer need the Let's Encrypt cert you got before. Or, maybe replace the LE cert with such an Origin cert to make your admin easier.

If you don't have the developer around this may become quite a learning curve for you. But, the cloudflare community is still probably the best choice to learn about their product. https://community.cloudflare.com/

As for that email, yes, LE issues warning emails at 20 days and 7 days before expiry. But, that is only one piece of the puzzle when proxied at Cloudflare.

6 Likes
3

One tip you will likely encounter in the Cloudflare Community is to pause the Cloudflare proxy while troubleshooting your origin certificate. If pausing Cloudflare allows your origin certificate to renew, you may need to adjust some settings at Cloudflare. I shared some tips here with some settings that I use for enhancing ACME reliability behind the Cloudflare proxy. I'll keep an eye out for you in the Cloudflare Community.

5 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.