# Invalid Cert Date after Renew

**URL:** <https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705>\
**Category:** Help\
**Created:** [February 19, 2021, 6:05pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705 "2021-02-19T18:05:26Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![pnegri](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pnegri](https://community.letsencrypt.org/u/pnegri)\
**Post date:** [February 19, 2021, 6:05pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/1 "2021-02-19T18:05:26Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [amcor-usa.com](http://amcor-usa.com)

I ran this command: certbot certificates

It produced this output: Found the following certs:  
Certificate Name: [amcor-usa.com](http://amcor-usa.com)  
Domains: [amcor-usa.com](http://amcor-usa.com) \*.amcor-usa.com  
Expiry Date: 2021-04-22 17:01:25+00:00 (VALID: 61 days)  
Certificate Path: /etc/letsencrypt/live/amcor-usa.com/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/amcor-usa.com/privkey.pem

My web server is (include version): Amazon Lightsail

The operating system my web server runs on is (include version): Ubuntu 16.04.6 LTS (GNU/Linux 4.4.0-1121-aws x86\_64)

My hosting provider, if applicable, is: Network solutions

I can login to a root shell on my machine (yes or no, or I don't know): no, using sudo

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

Chrome browser error message:

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/d/4/d427c651e4978e493b1df0dd544241a85feb07d1.png)

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [February 19, 2021, 7:07pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/2 "2021-02-19T19:07:34Z")

</div>

> [@pnegri](#):
>
> I can login to a root shell on my machine (yes or no, or I don't know): no, using sudo

Sudo is an application to provide root access. While strictly answering "No" to this question is indeed correct, for the _purpose_ of the question ("Can you run stuff as the root user?"), `sudo` is fine 🙂 Although you obviously understood that, otherwise you wouldn't have answered "using sudo" 😉

Anyway, on to your problem: how did you get the certificate? With which certbot plugin? Did you use the `apache` or `nginx` plugin as installer? If you did **not** use those plugins, you're required to reload your webserver after the renewal. Most of the time, a user would add a simple reload command to the `--deploy-hook` command when getting the certificate in the first place if the `apache` or `nginx` plugin wasn't used.

---

<div class="post-metadata">

**Author:** ![pnegri](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pnegri](https://community.letsencrypt.org/u/pnegri)\
**Post date:** [February 19, 2021, 7:12pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/3 "2021-02-19T19:12:25Z")

</div>

Hi and thank you for the reply. I used the tutorial linked below (which I think is Apache) and renewed the certificate manually

[https://lightsail.aws.amazon.com/ls/docs/en\_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress#request-a-lets-encrypt-certificate-wordpress](https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress#request-a-lets-encrypt-certificate-wordpress)

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [February 19, 2021, 7:24pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/4 "2021-02-19T19:24:27Z")

</div>

Not sure how Bitnami on Lightsail is different than other Bitnami instances, but that guide you've used is terrible.. Just wow..

No guarantees from my end, but you would probably have been better off with this info:

> [@Using Bitnami? Please see Bitnami's documentation!](https://community.letsencrypt.org/t/using-bitnami-please-see-bitnamis-documentation/133363):
>
> M…

Now that you've used the LightSail tutorial however, I'm not sure you can just go and use the how-to linked in the above thread.

In any case, if you'd like to continue using that Lightsail how-to, you should read the final paragraph closely:

> Step 9: Renew the Let's Encrypt certificates every 90 days  
> Let’s Encrypt certificates are valid for 90 days. Certificates can be renewed 30 days before they expire. To renew the Let's Encrypt certificates, run the original command used to obtain them. Repeat the steps in the [Request a Let’s Encrypt SSL wildcard certificate](https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress#request-a-lets-encrypt-certificate-wordpress) section of this tutorial.

Especially the last sentence. Did you repeat those steps from the link?

---

<div class="post-metadata">

**Author:** ![pnegri](https://avatars.discourse-cdn.com/v4/letter/p/c68b51/32.png) [@pnegri](https://community.letsencrypt.org/u/pnegri)\
**Post date:** [February 19, 2021, 7:49pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/5 "2021-02-19T19:49:48Z")

</div>

I think you're right, my hands are tied by the Lighstail tutorial I already used. I could try the bitnami documentation on the next (auto)renewal, but for now I am not experienced enough to troubleshoot beyond the tutorial steps.

I did complete the steps for the renewal back on Jan 21. I was prompted with successful updated cert and thought it was finished. But now with the invalid/old expiration date still showing in the browser, it's like I can't seem to get the site pointed to the new valid certificate. I tried restarting apache several times.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [February 19, 2021, 7:55pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/6 "2021-02-19T19:55:59Z")

</div>

I'm not familiair with the Bitnami set up **at all** , so I can't guide you further, sorry. Maybe someone else might help.

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [February 19, 2021, 11:01pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/7 "2021-02-19T23:01:07Z")

</div>

Welcome to the Let's Encrypt Community 🙂

Take a look at this recent thread where I assisted another Bitnami user:

> [@About Let's Encrypt Renewal](https://community.letsencrypt.org/t/about-lets-encrypt-renewal/145646):
>
> M…

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 21, 2021, 11:02pm UTC](https://community.letsencrypt.org/t/invalid-cert-date-after-renew/145705/8 "2021-03-21T23:02:02Z")

</div>

Closed on March 21, 2021, 11:02pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
