I'm trying to add a new domain to an existing certificate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:Existing domain is babbage.app. New domain is checkmymaths.app

I ran this command: sudo certbot --expand -d babbage.app,www.babbage.app,maths2.babbage.app,checkmymaths.app

It produced this output:Renewing an existing certificate for babbage.app and 3 more domains

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/babbage.app-0001/fullchain.pem
Key is saved at: /etc/letsencrypt/live/babbage.app-0001/privkey.pem
This certificate expires on 2025-12-18.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Deploying certificate
Could not install certificate

NEXT STEPS:

  • The certificate was saved, but could not be installed (installer: nginx). After fixing the error shown below, try installing it again by running:
    certbot install --cert-name babbage.app-0001

Could not automatically find a matching server block for babbage.app. Set the server_name directive to use the Nginx installer.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version):Ubuntu

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:Ubuntu 22:04

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 5.0.0

Do you have a server block in your nginx config with that name?

Thank you for contacting me. Do you mean this:

server {
    server_name checkmymaths.app;

    location / {
                include proxy_params;
                proxy_pass http://unix:/..local path../checkmymaths/checkmymaths.sock;
        }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/checkmymaths.app/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/checkmymaths.app/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

Not exactly. There should be one for Port 80. Certbot will setup the one for Port 443

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.