AS you suggested I have changed in /etc/apache2/sites-available all references to certificates to the same:
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
which means in fact links to /etc/letsencrypt/archive/doktorb.it/fullchain6.pem and /etc/letsencrypt/archive/doktorb.it/privkey6.pem :
root@Bit:/etc/apache2/sites-enabled# ls --full /etc/letsencrypt/live/doktorb.it/
razem 0
lrwxrwxrwx 1 root root 34 2022-02-07 10:29:13.309504143 +0100 cert3.pem -> ../../archive/doktorb.it/cert6.pem
lrwxrwxrwx 1 root root 35 2022-02-07 10:29:13.309504143 +0100 chain3.pem -> ../../archive/doktorb.it/chain6.pem
lrwxrwxrwx 1 root root 39 2022-02-07 10:29:13.309504143 +0100 fullchain3.pem -> ../../archive/doktorb.it/fullchain6.pem
lrwxrwxrwx 1 root root 37 2022-02-07 10:29:13.309504143 +0100 privkey3.pem -> ../../archive/doktorb.it/privkey6.pem
which is present only in ".conf" files with ssl in theirs name so I obtained:
root@Bit:/etc/apache2/sites-enabled# cat *ssl.conf >> plik
root@Bit:/etc/apache2/sites-enabled# cat plik
<VirtualHost *:443>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerName doktorb.it
ServerAdmin mobit@gazeta.pl
DocumentRoot /var/www/html/blog
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
<VirtualHost *:443>
ServerName www.doktorb.it
DocumentRoot /var/www/html/blog/
RewriteEngine on
Some rewrite rules in this file were disabled on your HTTPS site,
because they have the potential to create redirection loops.
RewriteRule ^ https://doktorb.it%{REQUEST_URI} [R=301,L,NE]
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
<VirtualHost *:443>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerName dyplomantka.pl
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html/dyplom/
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
ServerName www.dyplomantka.pl
DocumentRoot /var/www/html/dyplom/
RewriteEngine on
# Some rewrite rules in this file were disabled on your HTTPS site,
# because they have the potential to create redirection loops.
RewriteCond %{HTTP_HOST} ^(www.)?dyplomantka.pl$
RewriteRule ^ https://dyplomantka.pl%{REQUEST_URI} [R=301,L,NE]
#Include /etc/letsencrypt/options-ssl-apache.conf
#SSLCertificateFile /etc/letsencrypt/live/doktorb.it-0001/fullchain.pem
#SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it-0001/privkey.pem
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
Include /etc/letsencrypt/options-ssl-apache.conf
<VirtualHost *:443>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerName dyplomant.pl
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html/dyplom/
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
ServerName www.dyplomant.pl
DocumentRoot /var/www/html/dyplom/
RewriteEngine on
# Some rewrite rules in this file were disabled on your HTTPS site,
# because they have the potential to create redirection loops.
RewriteCond %{HTTP_HOST} ^(www.)?dyplomant.pl$
RewriteRule ^ https://dyplomant.pl%{REQUEST_URI} [R=301,L,NE]
#Include /etc/letsencrypt/options-ssl-apache.conf
#SSLCertificateFile /etc/letsencrypt/live/doktorb.it-0001/fullchain.pem
#SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it-0001/privkey.pem
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
Include /etc/letsencrypt/options-ssl-apache.conf
<VirtualHost *:443>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerName img.doktorb.it
ServerAdmin mobit@gazeta.pl
DocumentRoot /home/andrzeju/media
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/doktorb.it/fullchain3.pem
SSLCertificateKeyFile /etc/letsencrypt/live/doktorb.it/privkey3.pem
root@Bit:/etc/apache2/sites-enabled#
However, there is still a problem with expired domains:
Restarting apache2 (via systemctl): apache2.service.
root@Bit:/etc/apache2/sites-available# certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/doktorb.it.conf
Cert not yet due for renewal
Processing /etc/letsencrypt/renewal/dyplomant.pl-0001.conf
Cert not yet due for renewal
Processing /etc/letsencrypt/renewal/dyplomant.pl.conf
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer None
Renewing an existing certificate for dyplomant.pl and math2play4priz.es
Performing the following challenges:
http-01 challenge for math2play4priz.es
Waiting for verification...
Challenge failed for domain math2play4priz.es
http-01 challenge for math2play4priz.es
Cleaning up challenges
Failed to renew certificate dyplomant.pl with error: Some challenges have failed.
Processing /etc/letsencrypt/renewal/dyplomantka.pl.conf
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer None
Renewing an existing certificate for 3math.es and 10 more domains
Performing the following challenges:
http-01 challenge for 3math.es
http-01 challenge for math2play4priz.es
http-01 challenge for www.3math.es
http-01 challenge for www.math2play4priz.es
Waiting for verification...
Challenge failed for domain 3math.es
Challenge failed for domain math2play4priz.es
Challenge failed for domain www.3math.es
Challenge failed for domain www.math2play4priz.es
http-01 challenge for 3math.es
http-01 challenge for math2play4priz.es
http-01 challenge for www.3math.es
http-01 challenge for www.math2play4priz.es
Cleaning up challenges
Failed to renew certificate dyplomantka.pl with error: Some challenges have failed.
Processing /etc/letsencrypt/renewal/img.doktorb.it.conf
Cert not yet due for renewal
The following certificates are not due for renewal yet:
/etc/letsencrypt/live/doktorb.it/fullchain3.pem expires on 2022-05-08 (skipped)
/etc/letsencrypt/live/dyplomant.pl-0001/fullchain.pem expires on 2022-05-08 (skipped)
/etc/letsencrypt/live/img.doktorb.it/fullchain3.pem expires on 2022-05-04 (skipped)
All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/dyplomant.pl/fullchain3.pem (failure)
/etc/letsencrypt/live/dyplomantka.pl/fullchain3.pem (failure)
2 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
-
The following errors were reported by the server:
Domain: 3math.es
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for 3math.es - check
that a DNS record exists for this domain; DNS problem: NXDOMAIN
looking up AAAA for 3math.es - check that a DNS record exists for
this domain
Domain: math2play4priz.es
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for math2play4priz.es -
check that a DNS record exists for this domain; DNS problem:
NXDOMAIN looking up AAAA for math2play4priz.es - check that a DNS
record exists for this domain
Domain: www.3math.es
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for www.3math.es - check
that a DNS record exists for this domain; DNS problem: NXDOMAIN
looking up AAAA for www.3math.es - check that a DNS record exists
for this domain
Domain: www.math2play4priz.es
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for
www.math2play4priz.es - check that a DNS record exists for this
domain; DNS problem: NXDOMAIN looking up AAAA for
www.math2play4priz.es - check that a DNS record exists for this
domain
-
The following errors were reported by the server:
Domain: math2play4priz.es
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for math2play4priz.es -
check that a DNS record exists for this domain; DNS problem:
NXDOMAIN looking up AAAA for math2play4priz.es - check that a DNS
record exists for this domain
Maybe I should use certbot certonly?
root@Bit:/etc/apache2/sites-enabled# certbot certonly
Saving debug log to /var/log/letsencrypt/letsencrypt.log
How would you like to authenticate with the ACME CA?
1: Apache Web Server plugin (apache)
2: Spin up a temporary webserver (standalone)
3: Place files in webroot directory (webroot)
Select the appropriate number [1-3] then [enter] (press 'c' to cancel): 1
Plugins selected: Authenticator apache, Installer None
Please enter in your domain name(s) (comma and/or space separated) (Enter 'c'
to cancel): doktorb.it,www.doktorb.it,img.doktorb.it,dyplomant.pl,www.dyplomant.pl,dyplomantka.pl,www.dyplomantka.pl
Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/doktorb.it.conf)
What would you like to do?
1: Keep the existing certificate for now
2: Renew & replace the certificate (may be subject to CA rate limits)
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Keeping the existing certificate
Certificate not yet due for renewal; no action taken.
root@Bit:/etc/apache2/sites-enabled#
What I should do?