Letsencryptt Renew fail on main domain

That is not related to certificates/TLS/Let's Encrypt. I'm talking about the confusing name and contents of your certificates as seen in the certbot output.

Anyway, a few issues:

  • Your IMAP and SMTP services are still using the expired certificate, probably because they are refering to the certificate named hygiene-bucco-dentaire.com with the file /etc/letsencrypt/live/hygiene-bucco-dentaire.com/fullchain.pem. That is not the same certificate you issued in your pastebin output, because that certificate is called mail.conceptys-france.com but with the single hostname conceptys-france.com in it.
  • That new certificate wasn't installed in nginx, because nginx isn't properly configured, so certbot doesn't understand its configuration file.
1 Like