How can I renew a certificate if I don't know email address?

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: freedomlawclinic.org

I ran this command: sudo /opt/bitnami/bncert-tool

It produced this output: all hunky dory until:
Account rocket@freedomlawclinic.org is not registered. Use
'run' to register a new account.

My web server is (include version): bitnami

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: Lightsail AWS

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Certbot is not installed, it would seem

I've inherited this website from another administrator who is now out of touch. The certificate expired on 31 December 2022. I've tried running bncert to renew but can't get past the fact that I don't know which email address was used to create the certificate, nor can I figure out how to create a new account and register using that.

Any assistance very welcome. (I've been developing websites for years, but this stuff is new to me.)

1 Like

@robspiked Welcome to the community

I don't know bncert that well myself but below are two doc pages that should help.

I found another thread that said you can find the email previously used in this folder. Maybe this will help.

/opt/bitnami/letsencrypt/accounts/acmev02.api.letsencrypt.org

https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-enabling-https-on-wordpress

All about bncert. It might have a feature to show the registered email it used before. Or, maybe just reset the cert?
https://docs.bitnami.com/aws/how-to/understand-bncert/

5 Likes

Mike,

You're a legend. Just that first bit of info was enough to crack it. (The email address in question was not easily guessable!)

Is there any way to change the email address associated? The guy left under a cloud and it's his personal email address! Less than ideal!

Thanks,
Rob

4 Likes

The ACME protocol does support that indeed, but how bncert does that, I dunno, that should also be in the bncert documentation.

6 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.