Not sure if this is the right category to put this, but the expiry emails seem to reflect the old expiry dates.
For eg: my certs are were set to expiry say 1st Sept 2016. I renew all certs on the 25th of August 2016. However I still get emails from letsencrypt stating that my cert will expire 1st Sept.
I check the actual expiry of the cert and its correctly dated 25th Nov 2016, which is 3 months from the 25th of August.
Is this a bug in the auto notifier? Or is it just meant to be this way?
Other than that letsencrypt is working great for me and all my domains.
As far as I know, the auto notifier doesn’t have a clue you’ve already renewed your certificates. So you can ignore the extra e-mails if all is renewed properly.
It should check for “identical” renewals. However if your new cert has an additional domain ( perhaps a www subdomain on it) then it won’t recognise it as a direct replacement.
If your list of domains on the new cert is identical to the list on the old cert, it’s probably a bug
Original expiry was 21st Sept 2016. I renewed on 29th August 2016, but on
12th Sept, I still got this mail which shows the original expiry of 21st
Sept 2016:
Your certificate (or certificates) for the names listed below will expire
in 10 days (on 21 Sep 16 21:15 +0000). Please make sure to renew your
certificate before then, or visitors to your website will encounter errors.
You originally obtained separate certs for cherokee.chrysler.org.sg and weblogs.chrysler.org.sg on the 22nd of June which were both renewed the day after. Also on the 23rd you obtained a cert for both names which was renewed on the 31st of August.
The email you received refers to the 2 separate certs that you have presumably abandoned in favour of the single cert for both.
Since you have renewed the cert containing both names, you shouldn’t get an alert for that. You haven’t renewed the certs for the separate domain names though - hence you will have received an alert for that.
Ummm a little confused still and apologize I didn’t realize I created
separate certs for that.
You mentioned I shouldn’t get alerts for the combined cert because I
renewed that? But I am getting alerts for the combined cert but not for the
separate certs which were not renewed.
Maybe I’ll just ride through all the old expiry dates and after the next
renewal (I renew about 5 - 10 days before expiry) I will monitor to see if
I get alerts for the last expiry date
So does that mean that when the expiry email comes with the two FQDNs it’s
actually referring to 2 separate certs under my email which expiry on the
same date? I always thought it referred to the combined cert for the FQDNs
listed under it.
I think there is probably confusion because you have a single email with both domains listed in it.
It does say "Your certificate (or certificates) "… and in this case it’s certificates
If you look at the dates on the links I provided above, the two separate, single domain, certs are the ones that expire at Sep 21 21:15:00 2016 GMT - so those are the ones that the email refers to (not the combined cert.