Let's Encrypt certificate expiration notice

Help
1

Hello,
I received a e-mail warning that my certificate (or certificates) for my website will expire in 10 days (on 30 Aug 19 15:23 +0000) but it’s not correct.

Running the SSL Report at: Qualys SSLLAB I got

Common names: tunearch.org
Alternative names: tunearch.org www.tunearch.org
Serial Number: 0332b66e6cd5768897586a8ddb1714873f0d
Valid from: Thu, 01 Aug 2019 05:53:14 UTC
Valid until: Wed, 30 Oct 2019 05:53:14 UTC (expires in 2 months and 8 days)
Key: RSA 2048 bits (e 65537)
Weak key (Debian): No
Issuer: Let’s Encrypt Authority X3

Am I miss something?

—=0 Facts and Figures 0=—
My domain is: tunearch.org
I ran this command: n.a.
It produced this output: n.a.
My web server is (include version): Apache/2.4.29 (Ubuntu)
The operating system my web server runs on is (include version): Ubuntu 18.04.2 LTS
My hosting provider, if applicable, is: Contabo
I can login to a root shell on my machine: YES
I’m using a control panel to manage my site: NO
The version of my client is: certbot 0.23.0

Thanks.

Valerio

2

Hi @Silkwood

the mail is correct. Checking your domain - https://check-your-website.server-daten.de/?q=tunearch.org#ct-logs

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-08-01 2019-10-30 tunearch.org, www.tunearch.org - 2 entries
Let's Encrypt Authority X3 2019-06-01 2019-08-30 tunearch.org, www.tunearch.org - 2 entries
Let's Encrypt Authority X3 2019-06-01 2019-08-30 tunearch.org - 1 entries
Let's Encrypt Authority X3 2019-06-01 2019-08-30 tunearch.org, www.tunearch.org - 2 entries
Let's Encrypt Authority X3 2019-06-01 2019-08-30 tunearch.org, www.tunearch.org - 2 entries

Please read

When You Get an Expiration Email

If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.

Letsencrypt doesn't know if you use the certificate with one or with two domain names.

The certificate with one domain name isn't renewed -> that sends the mail.

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.