I renewed the cert but it is not updated

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: sandyeggo.com

I ran this command: sudo certbot -d $DOMAIN -d $WILDCARD --manual --preferred-challenges dns certonly

It produced this output: Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/sandyeggo.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/sandyeggo.com/privkey.pem
Your cert will expire on 2023-02-07. To obtain a new or tweaked
version of this certificate in the future, simply run certbot
again. To non-interactively renew all of your certificates, run
"certbot renew"

My web server is (include version): AWS Lightsail

The operating system my web server runs on is (include version): Ubuntu 16.04.6 LTS (GNU/Linux 4.4.0-1128-aws x86_64)

My hosting provider, if applicable, is: AWS

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Bitnami WordPress 5.2.2-3

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.31.0

I renewed the cert, everything looks good but the date shows Nov as the expiration, it should have a date 3 months out. When I try it again it says I do not need to renew. How do I resolve this issue?

Did you restart Apache after you got the new cert?

4 Likes

Hello @sandyeggocnc, welcome to the Let's Encrypt community. :slightly_smiling_face:

Here is a list of issued certificates crt.sh | sandyeggo.com, the latest being 2022-11-09.

Using SSL Server Test (Powered by Qualys SSL Labs), it seems you are still serving the older Certificate even though a new one has been issued.
Results here: SSL Server Test: sandyeggo.com (Powered by Qualys SSL Labs)

That is an old version of Certbot, the latest is Certbot 1.32.0 Release

2 Likes

Now I feel bad, I bounced the server and now the cert shows as February. Thank you for the help!

4 Likes

My bad, I bounced the server and all is good, thank you for the hand.

4 Likes

Two things that don't work well together [most of the time]:

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.