# How to renew certificates

**URL:** <https://community.letsencrypt.org/t/how-to-renew-certificates/228166>\
**Category:** Help\
**Created:** [November 3, 2024, 11:29am UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166 "2024-11-03T11:29:21Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andres-Chandia](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/andres-chandia/32/83772_2.png) [@Andres-Chandia](https://community.letsencrypt.org/u/Andres-Chandia)\
**Post date:** [November 3, 2024, 11:29am UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/1 "2024-11-03T11:29:21Z")

</div>

Sorry for this basic question.. how do I proceed to renew, I mean, what are the steps to follow?

My domain is: [chandia.net](http://chandia.net)

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [November 3, 2024, 11:36am UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/2 "2024-11-03T11:36:18Z")

</div>

That really depends on a whole lot of factors. There is no "one size fits all" when it comes to ACME. Therefore, we really need answers to _all_ of the questions of the questionnaire, even if that answer might be "I don't know":

* * *

My domain is: `chandia.net`

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

* * *

By the way, it seems you have valid certificates at this moment that are not yet due for renewal: [crt.sh | chandia.net](https://crt.sh/?deduplicate=Y&q=chandia.net).

It _also_ looks like the certificate for _just_ the `www` subdomain ([crt.sh | 14143515774](https://crt.sh/?id=14143515774)) is superfluous with the certificate that's currently in use by your webserver ([crt.sh | 14619228580](https://crt.sh/?id=14619228580)). And that latter cert has about 2 weeks left before it's due for renewal.

So why do you think you need to renew now already?

---

<div class="post-metadata">

**Author:** ![Andres-Chandia](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/andres-chandia/32/83772_2.png) [@Andres-Chandia](https://community.letsencrypt.org/u/Andres-Chandia)\
**Post date:** [November 3, 2024, 1:38pm UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/3 "2024-11-03T13:38:10Z")

</div>

Thanks for answering....  
I have received an email saying:

> Your certificate (or certificates) for the names listed below will expire in 6 days (on 2024-11-08). Please make sure to renew your certificate before then, or visitors to your web site will encounter errors.
> 
> We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let's Encrypt's current 90-day certificates, that means renewing 30 days before expiration. See [Integration Guide - Let's Encrypt](https://letsencrypt.org/docs/integration-guide/) for details.
> 
> [www.chandia.net](http://www.chandia.net)

It would be a great help for me if you, at least point me into the first step of the process...  
Thanks again!

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [November 3, 2024, 1:40pm UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/4 "2024-11-03T13:40:04Z")

</div>

Please review that email again in total and more carefully with the knowledge of the last part of my reply earlier. Thank you.

---

<div class="post-metadata">

**Author:** ![Andres-Chandia](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/andres-chandia/32/83772_2.png) [@Andres-Chandia](https://community.letsencrypt.org/u/Andres-Chandia)\
**Post date:** [November 3, 2024, 2:42pm UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/5 "2024-11-03T14:42:49Z")

</div>

Thanks again, I'm not sure to have understood what you suggest me to do... but here I add some data (anyway it seems, by what you say, that I should not renew until the last day, is that so?):  
My web server is (include version): **Apache/2.4.58 (Ubuntu)**  
The operating system my web server runs on is (include version): **Ubuntu 24.04.1 LTS**  
My hosting provider, if applicable, is: **Saima Systems S. L.**  
I can login to a root shell on my machine (yes or no, or I don't know): **YES**  
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): **NO**  
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): **certbot 2.9.0**  
Thanks one more time!

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [November 3, 2024, 2:59pm UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/6 "2024-11-03T14:59:32Z")

</div>

You used to get a cert that had ONLY the name `www.chandia.net` in it. It is due to expire soon and is the domain name listed in the email. But, you now use a cert with both your www subdomain and the apex name `chandia.net` in it. You got this cert on Sep 20.

You can see that at the history on crt.sh previously linked. And the pic of that below.

The email you received says you may get this warning if you have changed the mix of names in your cert. Which you have. If you don't use that cert with just your www name anymore you can ignore this warning. Your Apache doesn't use it for HTTPS requests to those names but we can't tell if you use it somewhere else (even on a private network).

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/b/3/b3cfd643236f1ebfbaa762713c898214665a71aa.png)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [December 3, 2024, 2:59pm UTC](https://community.letsencrypt.org/t/how-to-renew-certificates/228166/7 "2024-12-03T14:59:55Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
