Modifing existing certificat

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

eatdoori.delivery
kokumy.delivery
yoffi.delivery

I ran this command:

certbot --webroot -w /var/www/html certonly -d eatdoori.delivery -d kokumy.delivery -d yoffi.delivery

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None

You have an existing certificate that contains a portion of the domains you
requested (ref: /etc/letsencrypt/renewal/eatdoori.delivery-0001.conf)

It contains these names: eatdoori.delivery

You requested these names for the new certificate: eatdoori.delivery,
kokumy.delivery, yoffi.delivery.

Do you want to expand and replace this existing certificate with the new
certificate?

(E)xpand/(C)ancel: e
Renewing an existing certificate for eatdoori.delivery and 2 more domains
Performing the following challenges:
http-01 challenge for kokumy.delivery
http-01 challenge for yoffi.delivery
Using the webroot path /var/www/html for all unmatched domains.
Waiting for verification...
Challenge failed for domain kokumy.delivery
Challenge failed for domain yoffi.delivery
http-01 challenge for kokumy.delivery
http-01 challenge for yoffi.delivery
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

My web server is (include version):

apache2

The operating system my web server runs on is (include version):

debian10

My hosting provider, if applicable, is:

hetzner

I can login to a root shell on my machine (yes or no, or I don't know):

yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

certbot 1.13.0

2

Hi @thx4

if you use webroot and if that doesn't work, you use the wrong webroot.

What says

apachectl -S
3

(Since these are three different sites with different content, it's extremely unlikely that the same webroot would be correct for all three of them.)

4

hey community,

figured it out with --expand.

Wanted to let you know. Thx a lot.

5

As (if I remember correctly) the person who wrote the code for --expand in Certbot, I'm not confident that this would make the difference in this situation. :slight_smile:

The only effect of --expand is to avoid having to answer this question interactively

but not to change what Certbot does otherwise.