Let's Encrypt says cert expiring too soon?

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: https://alex522.myqnapcloud.com/

I received an email with subject line: Let’s Encrypt certificate expiration notice for domain “alex522.myqnapcloud.com

In the body of the email, it says my certificate expires on 20 Apr 20 07:20 +0000.

However, when I go into my QNAP NAS, it says the certificate doesn’t expire until 2020.7.9

What’s up? This is a significant difference.

If the NAS thinks the expiration is far in the future, it would have no need to auto-renews this far out.

Thanks

Pat Furrie

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

1 Like

Hi @pfurrie,

For some reason, your new certificate wasn’t issued until April 11 (possibly April 10 your time, depending on your time zone).

https://crt.sh/?id=2690415766

That’s cutting it too close from the point of view of the CA’s recommendations because it was only about 9 days before the old certificate was going to expire. But your certificate was then renewed successfully so there is no current problem.

It might be worth looking into the schedule on which your NAS tries to renew the certificate and see whether it experienced any renewal failures leading up to the successful renewal on April 11.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.