How to change primary domain?

[skizo]

Hello. I am a newbie. I am testing a new vps sever without aministration panel. I have created several virtualhost in Apache with differents domains, and I have installed Lets Encrypt by running certbot. However, it taken my test domain as “primary”, and now I want to change this for another most important for me. How do I this change?

Besides of this, I have another basic questions:

-How to delete certificate for expired or migrate domains another server?
-How to verify the status certificate for one domain?
-How to setup https (SSL), over IP?

Thanks.

[stevenzhu]

Hi,

Please fill in the form:

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

@skizo

-How to delete certificate for expired or migrate domains another server?

use certbot delete (for certbot) ./certbot-auto delete (for certbot auto)

@skizo

-How to verify the status certificate for one domain?

Check on your browser
or
openssl s_client -connect (your_domain:443) -servername (your_domain)
or

SSL Server Test (Powered by Qualys SSL Labs)

@skizo

-How to setup https (SSL), over IP?

Depend on your webserver software

https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#configexample

Getting Started with NGINX: Enable TLS/SSL

Thank you

[skizo]

@stevenzhu

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: historiasdemiedo.es

I ran this command:

It produced this output:

My web server is (include version): Apache 2.4

The operating system my web server runs on is (include version): Centos 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

Thanks. I have completed the form.
In relation to my first question, how do I change the base domain assigned with certifacated by other?
Thanks.

[JuergenAuer]

Hi @skizo

@skizo

how do I change the base domain assigned with certifacated by other?

you don't need to change the base domain. Instead, create a new certificate with the new domain name.

You can use a lot of domains (the same server) with a lot of certificates.

@skizo

-How to delete certificate for expired or migrate domains another server?

Certificates are only 90 days active. So you can ignore a certificate, if the domain is expired.

@skizo

-How to verify the status certificate for one domain?

What is a "status certificate"?

@skizo

-How to setup https (SSL), over IP?

Public certificates from letsencrypt are only possible if you have domain names.

[skizo]

@JuergenAuer

how do I change the base domain assigned with certifacated by other?

you don’t need to change the base domain. Instead, create a new certificate with the new domain name.

You can use a lot of domains (the same server) with a lot of certificates.

This is a bit confusing. If I create a new certificate, for a new domain, then what happens to the other old domains associated with the first domain, if it disappears? I'm not sure how this all changes. Perhaps the best thing is to erase everything and start over from the beginning.

@JuergenAuer

-How to verify the status certificate for one domain?

What is a “status certificate”?

I was referring to checking the time remaining until it expires

@JuergenAuer

-How to setup https (SSL), over IP?

Public certificates from letsencrypt are only possible if you have domain names.

Ok. I understand. Then, certificates are ony valids for domains, not IPs

[schoen]

@skizo

This is a bit confusing. If I create a new certificate, for a new domain, then what happens to the other old domains associated with the first domain, if it disappears? I’m not sure how this all changes. Perhaps the best thing is to erase everything and start over from the beginning.

The certificate is a file which is digitally signed by the certificate authority. It lists names that it applies to. A single Let's Encrypt certificate can apply to up to 100 names (which don't have to be related to one another in any way, as long as you control all of them).

Using Certbot, you can either replace old certificates by issuing updated versions that cover a different set of names, or you can issue new certificates that are managed separately. You can also view the current certificates managed by Certbot by running certbot certificates.

[schoen]

It’s also worth mentioning that new certificates don’t invalidate older certificates. Multiple certificates can coexist at the same time for the same name and they can all be valid simultaneously, regardless of whether one is more recent than another and regardless of whether they refer to different sets of names or to different public keys.