Getting error when renewing certificate

The error we are getting is:

Error: Hostname/IP doesn’t match certificate’s altnames: “Host: localhost. is not in the cert’s altnames: DNS:cakebee.in, DNS:www.cakebee.in

Please guide me how can i resolve this.

Hi @karan,

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

Sir, actually we are an organisation. We are getting the same error for a lot of domains.

Almost all of these questions are still relevant to understand what may be happening in your situation, so please answer the ones that you can answer.

Hi @karan

the answers of the standard template are required.

Additional: There are new Letsencrypt certificates ( https://check-your-website.server-daten.de/?q=cakebee.in#ct-logs ):

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-07-20 2019-10-18 cakebee.in, www.cakebee.in - 2 entries
Let's Encrypt Authority X3 2019-07-17 2019-10-15 trichy.cakebee.in - 1 entries
Let's Encrypt Authority X3 2019-07-17 2019-10-15 coimbatore.cakebee.in - 1 entries
Let's Encrypt Authority X3 2019-07-17 2019-10-15 chennai.cakebee.in - 1 entries
Let's Encrypt Authority X3 2019-06-25 2019-09-23 cakebee.in, www.cakebee.in - 2 entries

The certificate you use is good: 10 days old:

CN=cakebee.in
	20.07.2019
	18.10.2019
expires in 80 days	cakebee.in, 
www.cakebee.in - 2 entries

So use it the next 50 days. Then renew it. Looks like your setup works.

Thank you for your help.

Again we are getting an error in renewing SSL certificates. Please find the logs below:

| [acme-v2] handled(?) rejection as errback:
0|index | Error: certificate has expired
0|index | at TLSSocket. (_tls_wrap.js:1103:38)
0|index | at emitNone (events.js:106:13)
0|index | at TLSSocket.emit (events.js:208:7)
0|index | at TLSSocket._finishInit (_tls_wrap.js:637:8)
0|index | at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:467:38)
0|index | { Error: socket hang up
0|index | at TLSSocket.onHangUp (_tls_wrap.js:1135:19)
0|index | at Object.onceWrapper (events.js:313:30)
0|index | at emitNone (events.js:111:20)
0|index | at TLSSocket.emit (events.js:208:7)
0|index | at endReadableNT (_stream_readable.js:1055:12)
0|index | at _combinedTickCallback (internal/process/next_tick.js:138:11)
0|index | at process._tickDomainCallback (internal/process/next_tick.js:218:9)
0|index | code: ‘ECONNRESET’,
0|index | path: null,
0|index | host: ‘localhost’,
0|index | port: 443,

Domain Name: myinstafarm.com

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.