Getting certificate expiration notice for domains that does not expire

Certbot certificate command's result:

Certificate Name: vs9.voicesnapforschools.com
Domains: vs9.voicesnapforschools.com www.schoolchimes.com
Expiry Date: 2022-01-30 05:54:13+00:00 (VALID: 40 days)
Certificate Path: /etc/letsencrypt/live/vs9.voicesnapforschools.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/vs9.voicesnapforschools.com/privkey.pem

There are still 40 days remaining for my domain's certificate expiry.
But I have received two mails from LetsEncrypt on certificate expiration notice

When tried to renew manually it says,

Processing /etc/letsencrypt/renewal/vs9.voicesnapforschools.com.conf


Cert not yet due for renewal

Why do I receive these mails. What should be done ?

At first glance it seems that you have renewed the mentioned cert (that expires on Dec 21):
crt.sh | vs9.voicesnapforschools.com


But when we dig a little deeper...
We see that they are not identical:
The first (top) one covers:
image
The last (bottom) one covers:
image

So, as you see, they don't "cover the exact same set of names" and thus are NOT considered as related (the first isn't a successful renewal of the other - it is a new/separate cert).

I guess... learn.
Learn to better read and understand such email.
Everything that I did and pointed to should be contained therein.
[if it doesn't seem that way to you and you think it should be better written, maybe you could help by rewording it or expanding that wording]

3 Likes

Thank you for the explanation @rg305 . Will definitely dig more deeper with the future mails.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.