Let's Encrypt certificate expiration notice for domain

Hi,
I recently got expiration notice email as follows.
When I checked the expiration date, I found no problems.
What’s the problem and what should I do?
———————
Your certificate (or certificates) for the names listed below will expire in 10 days (on 31 May 19 23:36 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.
We recommend renewing certificates automatically when they have a third of their
total lifetime left. For Let’s Encrypt’s current 90-day certificates, that means
renewing 30 days before expiration.

bs.lcbible.org
ibsth.lcbible.org
lcbible.org
——————————
I run an automatic renewal every week using following command
certbot-auto renew

The result of checking the validity period with open ssl command is as follows.
echo | openssl s_client -connect lcbible.org:443 2>/dev/null | openssl x509 -noout -dates
notBefore=May 20 01:30:39 2019 GMT
notAfter=Aug 18 01:30:39 2019 GMT

For reference, I had migrated my server to a different IP address and machine a few months ago.
Does this cause problems?

====================
My domain is:
lcbible.org, www.lcbible.org, bs.lcbible.org, ibsth.lcbible.org,
laubf.lcbible.org, ubf.lcbible.org, bs.ubf.org

Finally, the domain added command is as follows.
( certbot-auto --expand -d lcbible.org -d www.lcbible.org -d bs.lcbible.org -d ibsth.lcbible.org -d laubf.lcbible.org -d ubf.lcbible.org -d bs.ubf.org -d bs3.lcbible.org -d bs2.ubf.kr )

I ran this command:

It produced this output:

My web server is (include version):
nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version):
Ubuntu 18.04.2 LTS

My hosting provider, if applicable, is:
google cloud

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.31.0
certbot-auto 0.34.2

https://crt.sh/?q=lcbible.org

crt.sh ID Logged At ⇧ Not Before Not After Issuer Name
1490808431 2019-05-20 2019-05-20 2019-08-18 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1475888169 2019-05-09 2019-05-09 2019-08-07 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1457134731 2019-05-09 2019-05-09 2019-08-07 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1428245472 2019-04-29 2019-04-29 2019-07-28 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1428244571 2019-04-29 2019-04-29 2019-07-28 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1425148901 2019-04-28 2019-04-28 2019-07-27 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1425147726 2019-04-28 2019-04-28 2019-07-27 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1415785612 2019-04-24 2019-04-24 2019-07-23 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3
1415786638 2019-04-24 2019-04-24 2019-07-23 C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3

You’re probably fine.

From https://letsencrypt.org/docs/expiration-emails/ ,

If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.

Provided that you’re not using the old certificate (with less names) anywhere, you don’t need to take action.

It means because of the old certificate, the email was sent?
Thank you for your quick reply

Hi @danylight7

you use one certificate with 9 domain names ( https://check-your-website.server-daten.de/?q=lcbible.org ):

CN=lcbible.org
	20.05.2019
	18.08.2019
expires in 88 days	
bs.lcbible.org, bs.ubf.org, bs2.ubf.kr, 
bs3.lcbible.org, ibsth.lcbible.org, 
laubf.lcbible.org, lcbible.org, 
ubf.lcbible.org, www.lcbible.org - 9 entries

But you have created a lot of certificates with different sets of domain names. All these certificates are active (17 certificates):

CertSpotter-Id Issuer not before not after Domain names LE-Duplicate next LE
920966408 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-05-20 01:30:39 2019-08-18 01:30:39 bs.lcbible.org, bs.ubf.org, bs2.ubf.kr, bs3.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
9 entries duplicate nr. 1
901691824 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-05-09 02:59:17 2019-08-07 02:59:17 bookak.lcbible.org, bs.lcbible.org, ibsth.lcbible.org, lcbible.org, www.lcbible.org
5 entries
887401693 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-30 05:36:50 2019-07-29 05:36:50 www.lcbible.org
1 entries
885648334 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-29 03:42:58 2019-07-28 03:42:58 bs.lcbible.org, bs.ubf.org, bs2.ubf.kr, bs3.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
9 entries
884041723 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-28 00:46:25 2019-07-27 00:46:25 bs.lcbible.org, bs.ubf.org, bs3.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
8 entries
884024572 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-28 00:29:55 2019-07-27 00:29:55 bs3.lcbible.org
1 entries
879361266 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-24 19:47:25 2019-07-23 19:47:25 bs2.lcbible.org
1 entries
879089339 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-24 15:01:50 2019-07-23 15:01:50 bs.lcbible.org, bs.ubf.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
7 entries
878384652 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-24 04:44:25 2019-07-23 04:44:25 bookak.lcbible.org, bs.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
7 entries
875207306 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-22 05:25:20 2019-07-21 05:25:20 bs.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, ubf.lcbible.org, www.lcbible.org
6 entries
826746044 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-03-23 23:16:41 2019-06-21 23:16:41 bs.lcbible.org, ibsth.lcbible.org, laubf.lcbible.org, lcbible.org, www.lcbible.org
5 entries
826714985 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-03-23 22:58:10 2019-06-21 22:58:10 bs.lcbible.org, ibsth.lcbible.org, lcbible.org, www.lcbible.org
4 entries
802330614 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-03-10 01:23:49 2019-06-08 01:23:49 bookak.lcbible.org, bs.lcbible.org, ibsth.lcbible.org, lcbible.org, www.lcbible.org
5 entries
790678026 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-03-02 23:36:55 2019-05-31 23:36:55 bs.lcbible.org, ibsth.lcbible.org, lcbible.org
3 entries
790674921 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-03-02 23:33:38 2019-05-31 23:33:38 bs.lcbible.org, ibsth.lcbible.org, lcbible.org, www.lcbible.org
4 entries
787592348 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-02-28 18:00:13 2019-05-29 18:00:13 bs.lcbible.org, lcbible.org, www.lcbible.org
3 entries
787589017 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-02-28 17:58:53 2019-05-29 17:58:53 www.lcbible.org
1 entries

Looks like the certificate created 2019-02-28 18:00:13 has produced the mail.

Every certificate with a different set of domain names and without a renew -> sends a new mail.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.