I renew certificate but my browsers look old one

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:japan.international-onlineshop.com
I ran this command:

CE_Cert_japan.international-shop-copy-copy Renewing certificate account: CE_Cert_japan.international-shop-copy server: letsencrypt-production-2 /usr/local/pkg/acme/acme.sh --renew -d '[japan.international-onlineshop.com](http://japan.international-onlineshop.com/)' --yes-I-know-dns-manual-mode-enough-go-ahead-please --dns --home '/tmp/acme/CE_Cert_japan.international-shop-copy-copy/' --accountconf '/tmp/acme/CE_Cert_japan.international-shop-copy-copy/accountconf.conf' --force --reloadCmd '/tmp/acme/CE_Cert_japan.international-shop-copy-copy/reloadcmd.sh' --log-level 3 --log '/tmp/acme/CE_Cert_japan.international-shop-copy-copy/acme_issuecert.log' Array ( [path] => /etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin/ [PATH] => /etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin/

I do it in pfsense

It produced this output:

2 11:19:29 UTC 2021] Renew: '[japan.international-onlineshop.com](http://japan.international-onlineshop.com/)' 
[Tue Feb 2 11:19:29 UTC 2021] Single domain='[japan.international-onlineshop.com](http://japan.international-onlineshop.com/)' 
[Tue Feb 2 11:19:29 UTC 2021] Getting domain auth token for each domain [Tue Feb 2 11:19:32 UTC 2021] Getting webroot for domain='[japan.international-onlineshop.com](http://japan.international-onlineshop.com/)' 
[Tue Feb 2 11:19:32 UTC 2021] [japan.international-onlineshop.com](http://japan.international-onlineshop.com/) is already verified, skip dns-01. 
[Tue Feb 2 11:19:32 UTC 2021] Verify finished, start to sign. 
[Tue Feb 2 11:19:32 UTC 2021] Lets finalize the order, Le_OrderFinalize: https://acme-v02.api.letsencrypt.org/acme/finalize/110516354/7668861890 
[Tue Feb 2 11:19:33 UTC 2021] Download cert, Le_LinkCert: https://acme-v02.api.letsencrypt.org/acme/cert/0463fb16d0fab4733debef672f1bbfc049a7 [Tue Feb 2 11:19:34 UTC 2021] Cert success. -----BEGIN CERTIFICATE-----

Wwwwwwwwwwwwwwwwwwwwwwwww

Wwwwwwwwwwwwwwwwwwwwwwwwww

Wwwwwwwwwwwwwwwwwwwwww

WJbCih8NvXJY+VpCfKL61Ea0DHXFBqN2LJsQHnOq7nho5mmwzErVLgcryo /J7UFPPga/Rz9CEbzf8= -----END CERTIFICATE----- 
[Tue Feb 2 11:19:34 UTC 2021] Your cert is in /tmp/acme/CE_Cert_japan.international-shop-copy-copy//[japan.international-onlineshop.com/japan.international-onlineshop.com.cer](http://japan.international-onlineshop.com/japan.international-onlineshop.com.cer)
[Tue Feb 2 11:19:34 UTC 2021] Your cert key is in /tmp/acme/CE_Cert_japan.international-shop-copy-copy//[japan.international-onlineshop.com/japan.international-onlineshop.com.key](http://japan.international-onlineshop.com/japan.international-onlineshop.com.key) 
[Tue Feb 2 11:19:34 UTC 2021] The intermediate CA cert is in /tmp/acme/CE_Cert_japan.international-shop-copy-copy//[japan.international-onlineshop.com/ca.cer](http://japan.international-onlineshop.com/ca.cer) 
[Tue Feb 2 11:19:34 UTC 2021] And the full chain certs is there: /tmp/acme/CE_Cert_japan.international-shop-copy-copy//[japan.international-onlineshop.com/fullchain.cer](http://japan.international-onlineshop.com/fullchain.cer) 
[Tue Feb 2 11:19:34 UTC 2021] Run reload cmd: /tmp/acme/CE_Cert_japan.international-shop-copy-copy/reloadcmd.sh IMPORT CERT CE_Cert_japan.international-shop-copy-copy, /tmp/acme/CE_Cert_japan.international-shop-copy-copy/[japan.international-onlineshop.com/japan.international-onlineshop.com.key](http://japan.international-onlineshop.com/japan.international-onlineshop.com.key), /tmp/acme/CE_Cert_japan.international-shop-copy-copy/[japan.international-onlineshop.com/japan.international-onlineshop.com.cer](http://japan.international-onlineshop.com/japan.international-onlineshop.com.cer) update cert!
[Tue Feb 2 11:19:34 UTC 2021] Reload success

My web server is (include version):Debian 10 apache but certificate on presence
The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: my server

I can login to a root shell on my machine (yes or no, or I don't know):yes I can

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):virtualmin

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot)GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol
v2.8.6

I renew certificate but my browsers look old one 23 декабря 2020 г. How can I change for new certificate ?

2 Likes

Welcome to the Let's Encrypt Community, Evgeny :slightly_smiling_face:

After acquiring or renewing a certificate, make sure your webserver gets reloaded.

sudo apachectl -k graceful

2 Likes

Thank you !)

Отправлено с iPhone

2 Likes

You are quite welcome! :blush:

1 Like

OK now the site encryption is up-to-date...
But my browser still looks old to me!:
image

Is there anything certbot can do to help?

2 Likes

:grimacing:

That's negatively secure.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.