# How to renew an SSL certificate

**URL:** <https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825>\
**Category:** Help\
**Created:** [January 27, 2023, 7:42am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825 "2023-01-27T07:42:47Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 7:42am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/1 "2023-01-27T07:42:47Z")

</div>

Hello. Can you please tell me how to renew my SSL certificate? I received an email saying that my certificate will expire in February. But I don't understand how to do it. Certificate issued by LetsEncrypt

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 7:54am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/2 "2023-01-27T07:54:42Z")

</div>

How did you obtain your certificate back in November?

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 7:59am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/3 "2023-01-27T07:59:51Z")

</div>

How did you know that the certificate was received in November? I don't even know myself

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 8:03am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/4 "2023-01-27T08:03:05Z")

</div>

Lifetime is 90 days. If it expires in February, it most likely was issued in November. 😉

Most ways to get a certificate should renew automatically, but that's not your case. We need to understand if automatic renewal is broken or it wasn't configured in the first place.

So, how did you get the certificate? 😃

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 8:07am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/5 "2023-01-27T08:07:59Z")

</div>

That is, if I received a letter about the imminent expiration of the certificate, does this mean that it will not be automatically updated?

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 8:11am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/6 "2023-01-27T08:11:33Z")

</div>

Most probably. But I cannot know that. Renewal is something that your system needs to initiate.

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 8:13am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/7 "2023-01-27T08:13:54Z")

</div>

Then how can I check whether the certificate will be updated or not?

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 8:15am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/8 "2023-01-27T08:15:06Z")

</div>

You need to see if the procedure you used is set up to perform an automatic renewal, which is why I asked you how you got your certificate in the first place 🙂

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 8:32am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/9 "2023-01-27T08:32:00Z")

</div>

I do not remember

I went to the site SSL checker to check the site and there, among other things, it was written that the validity period expires in 89 days. I do not understand then why February

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 27, 2023, 8:34am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/10 "2023-01-27T08:34:58Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 8:39am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/11 "2023-01-27T08:39:08Z")

</div>

> [@Agahuseyn](#):
>
> I do not understand then why February

Show me. And tell us _exactly_ what domains are the expiring certificate for.

If you added or removed domain names, this is fine. (As long as the certificate you are using is not expiring. Unused certificate expiring is fine.)

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 8:51am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/12 "2023-01-27T08:51:37Z")

</div>

[https://siesco.az/](https://siesco.az/)

---

<div class="post-metadata">

**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\
**Post date:** [January 27, 2023, 8:59am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/13 "2023-01-27T08:59:38Z")

</div>

Looks like it's working as intended. Your certificate expiring in April isn't counted as a renewal because the names are different -- it counts as a new issue.

So you get an email telling you you haven't renewed the previous certificate. Which is fine, you got a new one.

> **[crt.sh | siesco.az](https://crt.sh/?dNSName=siesco.az&deduplicate=Y)**
>
> Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)

---

<div class="post-metadata">

**Author:** ![Agahuseyn](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Agahuseyn](https://community.letsencrypt.org/u/Agahuseyn)\
**Post date:** [January 27, 2023, 9:03am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/14 "2023-01-27T09:03:34Z")

</div>

Thank you very much 🙂

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [February 26, 2023, 9:03am UTC](https://community.letsencrypt.org/t/how-to-renew-an-ssl-certificate/191825/15 "2023-02-26T09:03:43Z")

</div>

Closed on February 26, 2023, 9:03am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
