Lifetime SSL subscription yet it expires

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: cpayant.com

I ran this command: We have lifetime SSL subscription, yet it has expired.

It produced this output:

My web server is (include version): Namecheap

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: Namecheap

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

With whom? Let's Encrypt is a fully automated CA and does not offer "subscriptions".

There are many, MANY certs issued for your domain: crt.sh | cpayant.com. But you probably mean crt.sh | 14155911870, which is the certificate for just cpayant.com and www.cpayant.com?

How did you get this certificate in the first place? Because looking at the lack of answers you've provided on the questionnaire, it looks like you should ask your hosting provider why the certificate was not renewed.

3 Likes

We bought the lifetime auto-renewal from wpencryption.

Sounds like you need to contact "wpencryption" then?

3 Likes

But can you kindly explain what you mean by CA is automatically renewed? It means we shouldn't have pad for the automatic renewal in the first place? Also, how do we do the automatic renewal via CPanel?

Here is a list of issued certificates crt.sh | cpayant.com several of them are presently not expired.

2 Likes

I did not say it gets automatically renewed. Let's Encrypt is a CA which uses the ACME protocol. Software called an "ACME client" (there are many of those out on the internet) connect to the Let's Encrypt ACME server to get a certificate. The term "renewal" or "renewing" is simply getting a new certificate with the same hostnames as a previously issued certificate, initiated by the ACME client. Let's Encrypt does not automatically renew a cert.

There are many ways to get a certificate using such an ACME client. Often they are included in shared hosting services, e.g. in cPanel somewhere. Others with e.g. a VPS and root access to their server could choose to run one of the ACME clients on their server to get a cert.

It depends on what they offered. If they offered support for problems such as this and you're willing to pay for that, sure. But Let's Encrypt certificates themselves are free of charge.

I don't know, best to ask your hosting provider or wpencryption as you're paying them for "lifetime auto-renewal" apparently.

6 Likes

SSL Certificates expire periodically. LetsEncrypt is a FREE CA that offers 90 day certificates, other CAs offer certificates up to 397 days. The 397 day max is expected to be much lower.

You purchased a commercial subscription from a vendor, who is probably reselling another CA's services. The history of your domain also suggests you have Cloudflare obtaining certificates for your infrastructure as well.

Your vendor's "lifetime" subscription does not mean a lifetime certificate - no one can offer a cert more than 397 days. You purchased a commercial service that will renew certificates for you for a "lifetime". Those certificates could likely be obtained freely from a CA like LetsEncrypt.

Contact the group you purchased the subscription from, as they can help you properly set up your system - and you paid them for that!

6 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.