My domain is: gotailwind.com
We have LetsEncrypt certificates embedded in one version of firmware that has been working fine for years, and it is based on the "X3" (forgive me if I'm saying this incorrectly). When I run the OpenSSL command to check the certificate expiration
openssl x509 -enddate -noout -in .pem it gives the output notAfter=Mar 17 16:40:46 2021 GMT. This leads me to believe it should continue to work until March 17th as long as we do things correctly. This gives us enough time to make sure all devices get the new firmware.
I've spoken with numerous software developers about the changes coming to LetsEncrypt on January 11th and cannot get a solid consensus on what we need to do to keep the devices with this firmware version working past the changes happening on January 11th.
I'm really hoping I can find someone who knows with certainty what the changes are, and what we need to do to validate and test before January 11th so the transition goes off without a hitch. I am willing to hire someone on a short-term contract to guide us and make sure we do the right things here. I don't want January 11th to be a bad day.
My web server is: NGINX (not sure of the version - I'm not a software developer personally)
My hosting provider, if applicable, is: AWS
I can login to a root shell on my machine (yes or no, or I don't know): Yes
The version of my client is (e.g. output of
certbot --version or
certbot-auto --version if you're using Certbot): Don't know