I received a notification that my cert is going to expire, What are the steps of renewing the expiring cert?

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: psasb.us

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Hi @ITpsa,

There is no one single way to renew a Let's Encrypt certificate, because Let's Encrypt provides an API for software to use in requesting certificates. The certificates are then requested by all sorts of different software (more than 50 different tools can do this now).

So, the details will depend on what method was used to obtain the certificate originally, and how your web site is hosted, including with what software. The renewal process can be different for each kind of software environment.

2 Likes

What kind of notification did you receive?

Because Let's Encrypt will send reminder emails but not until 20 days before cert expiration. And, both certs for your domain (the base and the www subdomain) still have 26 days remaining. (see history here)

Normally certs are renewed with 30 days remaining so it is reasonable to get a warning with 26 days left. It just wouldn't come from Let's Encrypt. Did that notification give any instructions on how to renew the cert? Or who to contact to help with that?

https://tools.letsdebug.net/cert-search?m=domain&q=psasb.us&d=2160

2 Likes

Our internal documentation notified us about the expiring cert, I don’t have much info but I did see that the issue was R3 and Org is Let’s encrypt, there is 26 days before it expires.
I am not entirely sure if this was renewed last year (automatically) but I don’t want to let it expire.
It would be great just to get this automatically renewed

Let's Encrypt certs expire after 90 days. That is why automated software is usually used to set them up and renew them.

If you can provide more answers to the form questions we can help you find out why it did not renew on its normal schedule.

Without more answers there isn't much for us to work with. You must have set something up to request a cert. Let's Encrypt can't issue a cert without such a request.

3 Likes

That is a priority here and with Let's Encrypt.
It makes little sense to create a system that creates more work for us [every 90 days].

If you can [find someone who can] log into the system that uses that cert that is expiring, we may be able to walk them through on how to find which ACME client was used to obtain the most recent cert and from there we may be able to guide you/them on how to automate that renewal process.

Step #1: Find the system that uses the cert.
[What is/are the FQDN(s) on the cert?]

Step #2: Find the administrator of that system.

Step #3: Find the ACME client / method used to obtain the expiring cert.

Step #4: Renew the cert.

Step #5: [can be included into #4] Automate the renewal process.

Step #6: Test the renewal process.
[ensure that it works as expected]

Step #7: Sit back and relax :wink:

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.