Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: merchiston-curling.club
I ran this command: N/A
It produced this output: N/A
My web server is (include version):
Server version: Apache/2.4.52 (Ubuntu)
Server built: 2024-03-18T13:41:27
The operating system my web server runs on is (include version):
Linux Mint 21.3 x86_64
My hosting provider, if applicable, is: Self Hosted
I can login to a root shell on my machine (yes or no, or I don't know): Y
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): N
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 3.1.0
Hi, just a general query.
Let's Encrypt Expiry Bot informs me my certs will expire soon. (<19 days).
I guess they have been automatically renewing since I set this up a few years ago. I've never needed to intervene in any way since set up.
I have missed the renewal date for my domain: merchiston-curling.club and now there is no way to renew on my domain dashboard (Abion).
My question: If I manage to still retain the domain will certbot still automatically renew the certs?
It should. Anyhow it's easy enough to check (or to get a new one).
Be careful if you have other domains on that certificate, automatic renewal succeeds for all included names or none at all, you might need a new certificate if that's the case.
Also note that the expiry bot is retiring in a few months (June)
Hi Giuseppe, that's good to know. I do have 5 other web sites I set up around the same time. I'm not sure if they all get renewed on the same request.
Is there a certbot cmd I can use to check this?
Also, with the expiry bot going out of use. Is that the same as the renewal bot? Do I need to manually renew my certs in a few months?
This home hosting malarky is fun for a bit but getting a bit of a pain too.
Yes, you can see all the certs handled by Certbot with the certbot certificates command. Please see User Guide — Certbot 3.1.0 documentation for the Certbot user manual.
No. Please understand how ACME works, with the server side (Let's Encrypt) and the client side (an ACME client such as Certbot). You got the expiry email from Let's Encrypt and Certbot does the renewing. Those are totally independent entities. See e.g. How It Works - Let's Encrypt.
Yep, that's my worry. Contacted Abion 3 times since 1st Feb but zero response. Can't renew or even purchase new. If I can get it up and running again soon was hoping the cert renewal would just kick in. I'll try and chivvy them along again.
Thanks for your efforts and responses.
Mike.
Sorry, skimmed that first post way too fast. Nevermind
The most recent cert for that domain just had it and its www subdomain. So, once it is restored and you have A (and/or AAAA) records back in place for the base name and www the cert renewal should occur promptly.
You should, of course, check your registration for those other domains but they are not on this same cert so not affected by this problem.
If you delete it here it won't renew anymore. You will get one more notice from the Expiry bot 7 days before expiration but no further emails from LE after that for this cert.
Each cert is an all or nothing but each "Certificate Name" in that list is a separate cert. They fail or succeed on their own domain names only.
Thanks for all the help. I'll give it a week or so and if I get no response from abion I'll try and transfer the domain to names.co.uk and alter the cert both request bearing in mind the safety concerns.
Cheers, Mike.