Mail for unknown domains


#1

I just got a “Let’s Encrypt certificate expiration notice” mail for a domain I don’t know (casinosnacks.com). Any idea of what might be going on?


Let's Encrypt - Receiving Email About Domains Not Controlled By User
#2

If you’re using Plesk, you probably ran into this bug. From what I understand, they send expiration notices for all domains on the same server to all users right now. Unfortunately, it’s not something Let’s Encrypt can fix on their end, but rather a problem with Plesk’s Let’s Encrypt plugin.

As of now, there’s no way for you to selectively unsubscribe from renewal notices for specific domains, so you would either have to unsubscribe from all renewal notices or just ignore them.


#3

Thanks for the reply. I don’t think it is related since I don’t use Plesk. But who know what lies at the bottom of the Bug you linked. Perhaps something that goes deeper.


#4

That’s interesting. There’s no double opt-in process involved for expiration notices, so it’s not impossible for someone else to provide your email address during registration. That said, it’s of course also possible that other Let’s Encrypt plugins have similar bugs to the one in Plesk.

I assume you use Let’s Encrypt for your own domains? Would you mind sharing how you use Let’s Encrypt in your environment, i.e. do you run certbot or some other ACME client, or is your hosting provider/control panel/etc. handling things for you?


#5

I wrote a blog post about a year ago describing my setup. In short, I use dehydrated for the renewal process. The cron job results in me getting mails like the following:

Date: Sun, 12 Mar 2017 06:47:27 +0100
From: Cron Daemon <root@alexschroeder.ch>
To: root@alexschroeder.ch
Subject: Cron <root@sibirocobombus> cd / && run-parts --report /etc/cron.weekly

/etc/cron.weekly/letsencrypt:
# INFO: Using main config file /etc/letsencrypt.sh/config
Processing alexschroeder.ch with alternative names: www.alexschroeder.ch
+rpg.alexschroeder.ch
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr  4 06:15:00 2017 GMT (Less than 30 days). Renewing!
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting challenge for alexschroeder.ch...
 + Requesting challenge for www.alexschroeder.ch...
 + Requesting challenge for rpg.alexschroeder.ch...
 + Hook: Nothing to do...
 + Responding to challenge for alexschroeder.ch...
 + Hook: Nothing to do...
 + Challenge is valid!
 + Hook: Nothing to do...
 + Responding to challenge for www.alexschroeder.ch...
 + Hook: Nothing to do...
 + Challenge is valid!
 + Hook: Nothing to do...
 + Responding to challenge for rpg.alexschroeder.ch...
 + Hook: Nothing to do...
 + Challenge is valid!
 + Requesting certificate...
 + Checking certificate...
 + Done!
 + Creating fullchain.pem...
 + Hook: Restarting Apache...
 + Done!
Processing arabisch-lernen.org with alternative names: www.arabisch-lernen.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr  4 06:15:00 2017 GMT (Less than 30 days). Renewing!
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting challenge for arabisch-lernen.org...
 + Requesting challenge for www.arabisch-lernen.org...
 + Hook: Nothing to do...
 + Responding to challenge for arabisch-lernen.org...
 + Hook: Nothing to do...
 + Challenge is valid!
 + Hook: Nothing to do...
 + Responding to challenge for www.arabisch-lernen.org...
 + Hook: Nothing to do...
 + Challenge is valid!
 + Requesting certificate...
 + Checking certificate...
 + Done!
 + Creating fullchain.pem...
 + Hook: Restarting Apache...
 + Done!
Processing campaignwiki.org with alternative names: www.campaignwiki.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr 22 04:47:00 2017 GMT (Longer than 30 days). Skipping renew!
 + Hook: Nothing to do...
Processing communitywiki.org with alternative names: www.communitywiki.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr 22 04:47:00 2017 GMT (Longer than 30 days). Skipping renew!
 + Hook: Nothing to do...
Processing korero.org with alternative names: www.korero.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr 22 04:47:00 2017 GMT (Longer than 30 days). Skipping renew!
 + Hook: Nothing to do...
Processing oddmuse.org with alternative names: www.oddmuse.org
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr 22 04:48:00 2017 GMT (Longer than 30 days). Skipping renew!
 + Hook: Nothing to do...
Processing orientalisch.info with alternative names: www.orientalisch.info
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Apr 22 04:48:00 2017 GMT (Longer than 30 days). Skipping renew!
 + Hook: Nothing to do...

#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.