Getting email about Let's Encrypt expiry but my host autorenews


#1

I have Let’s Encrypt set up on a domain and I’ve received an email with subject “Let’s Encrypt certificate expiration notice for domain”. But for my host these Let’s Encrypt certificates autorenew (I have other domains on this same hosting plan using Let’s Encrypt for a while now and they autorenew with no emails sent to me).

This is a newly installed domain and website with Let’s Encrypt just set up in January. Expires On: 2019-04-15 03:51:57 according to my host (but it will also autorenew).

This date does not correspond with the expiry date in the email I was sent which says:
“for the names listed below will expire in 19 days (on 13 Feb 19 17:25 +0000)”

So I’m not sure what is going on at all. Is this email sent to me in error? As stated, other domains installed with the same host and hosting plan using Let’s Encrypt have been running and autorenewing for more than a year now. This is a newly installed domain/website with Let’s Encrypt and should not be expiring in February anyway.


#2

Hi @schming

please read

If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.


#3

But that does not work with my situation. I never provided Let’s Encrypt with my email address that I know of until just today when I signed up for this support forum. I have only ever added Let’s Encrypt to my domains using my hosting provider. So I don’t know where Let’s Encrypt got my email address.

Also, the expiration from your email does not line up with what is actually showing in my hosting account.


#4

Then you should ask your hoster. Perhaps the hoster has used your mail to create an account.

Please read the text. If your hoster first creates a certificate (sample: With one domain name), later you use one certificate with two domain names, the one-name-certificate expires - and Letsencrypt sends a mail. But then:

If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.

If someone creates a lot of different certificates with different sets of domain names, Letsencrypt can’t know which certificate is used.


#5

Actually I think I know what happened here and it’s not really what you’re talking about. Apparently my hosting provider thinks that perhaps GoDaddy set up a Let’s Encrypt certificate on the domain when someone other than myself purchased the domain. I think they must have my email as a technical support email on that I guess. I didn’t provide it to them, but maybe the person purchasing the domain did.

It was then moved from GoDaddy to my host. So maybe that original certificate is what is “expiring” I guess. I assume I can ignore these emails.


#6

But I’ll check with my host to see if what you’re saying is the reason too. My host thought perhaps GoDaddy was the issue.