False Let's Encrypt certificate expiration notice

Hi All,

I am hoping someone can help… I have received an email saying;

“Let’s Encrypt certificate expiration notice for domain “moonpix.co.uk” (and 7 more)”… but when I look at the certificate information from my web browser it shows as expiring on 2/11/2019.

I have tried running “sudo certbot renew --dry-run” and get told there are none due for renewal.

So I tried running without the --dry-run flag hoping it would force everything to sort itself out… but it didnt. It just says

The following certs are not due for renewal yet:
/etc/letsencrypt/live/moonpix.co.uk/fullchain.pem expires on 2019-11-02 (skipped)
No renewals were attempted.

I host my own webserver with Ubuntu 18.04.2. LTS with Apache 2.4.29 with multiple websites hosted on it.

I suspect that this all stems from moving the webserver to a temporary VPS when my hardware failed and took all my VMs down. It took a few weeks to get back up and running, afterwhich I migrated my Ubuntu VM back onto my server.

Can anyone advise, or should I just ignore it?

1 Like

Hi @Slimat

please read

When You Get an Expiration Email

If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.

Checking your domain you have a lot of different certificates - https://check-your-website.server-daten.de/?q=moonpix.co.uk#ct-logs

Issuer not before not after Domain names LE-Duplicate next LE
cPanel, Inc. Certification Authority 2019-08-14 2019-11-12 cpanel.moonpix.co.uk, mail.moonpix.co.uk, moonpix.co.uk, webdisk.moonpix.co.uk, webmail.moonpix.co.uk, www.moonpix.co.uk - 6 entries
cPanel, Inc. Certification Authority 2019-08-14 2019-11-12 cpanel.stjohnsroad.org, mail.stjohnsroad.org, stjohnsroad.moonpix.co.uk, stjohnsroad.org, webdisk.stjohnsroad.org, webmail.stjohnsroad.org, www.stjohnsroad.moonpix.co.uk, www.stjohnsroad.org - 8 entries
cPanel, Inc. Certification Authority 2019-08-14 2019-11-12 sinclair.moonpix.co.uk, www.sinclair.moonpix.co.uk - 2 entries
cPanel, Inc. Certification Authority 2019-08-14 2019-11-12 test.moonpix.co.uk, www.test.moonpix.co.uk - 2 entries
Let's Encrypt Authority X3 2019-08-04 2019-11-02 moonpix.co.uk, pictureperfection.co.uk, s76.kentfirebrigade.co.uk, themoles.co.uk, tonymole.actor, www.moonpix.co.uk, www.pictureperfection.co.uk, www.themoles.co.uk, www.tonymole.actor - 9 entries
Let's Encrypt Authority X3 2019-06-05 2019-09-03 moonpix.co.uk, pictureperfection.co.uk, s76.kentfirebrigade.co.uk, themoles.co.uk, tonymole.actor, www.moonpix.co.uk, www.pictureperfection.co.uk, www.themoles.co.uk, www.tonymole.actor - 9 entries
Let's Encrypt Authority X3 2019-05-30 2019-08-28 moonpix.co.uk, pictureperfection.co.uk, themoles.co.uk, tonymole.actor, www.moonpix.co.uk, www.pictureperfection.co.uk, www.themoles.co.uk, www.tonymole.actor - 8 entries
cPanel, Inc. Certification Authority 2019-05-30 2019-08-28 sinclair.moonpix.co.uk, www.sinclair.moonpix.co.uk - 2 entries

One certificate with 8 domain names, one with 9. But you use a certificate with 9 domain names:

CN=moonpix.co.uk
	04.08.2019
	02.11.2019
expires in 75 days	
moonpix.co.uk, pictureperfection.co.uk, s76.kentfirebrigade.co.uk, 
themoles.co.uk, tonymole.actor, www.moonpix.co.uk, 
www.pictureperfection.co.uk, www.themoles.co.uk, 
www.tonymole.actor - 9 entries

Letsencrypt doesn't know which certificate you use. So a mail is sent.

1 Like

Hi JuergenAuer

Many thanks for the speedy reply… that makes much more sense :wink:

Yes, I had a few hardware issues, compounded with some software issues - hopefully I will get them sorted out one day.

Thanks again

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.