Multiple sites without www domains on certificate

[brellatech]

we run a reseller server using cyberpanel v2.3 (installed recently). This morning we found we had 10 sites that were failing on the www version of the domain. the non-www version has a certificate and loads fine.

The logs displayed show the command used to generate the certificates but it fails when attempting both www and non-www. it pushes on just with non-www which is successful.

EDIT: I have tested the following domain with letsdebug.net and it came back saying it was ok

My domain is:
lavenderlanephotography.com.au

I ran this command (replace domain.com.au with above):
/root/.acme.sh/acme.sh --issue -d domain.com.au -d www.domain.com.au --cert-file /etc/letsencrypt/live/domain.com.au/cert.pem --key-file /etc/letsencrypt/live/domain.com.au/privkey.pem --fullchain-file /etc/letsencrypt/live/domain.com.au/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt

It produced this output:
Failed to obtain SSL for: domain.com.au and: www.domain.com.au
Trying to obtain SSL for: domain.com.au
Successfully obtained SSL for: domain.com.au

My web server is (include version):

The operating system my web server runs on is (include version):
ubuntu 20.04

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
cyberpanel v2.3

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
2.3.0

[rg305]

Hi @brellatech, and welcome to the LE community forum

@brellatech

--force

I have one word for that:
Why?

@brellatech

/root/.acme.sh/acme.sh ...
--cert-file      /etc/letsencrypt/live/domain.com.au/cert.pem 
--key-file       /etc/letsencrypt/live/domain.com.au/privkey.pem
--fullchain-file /etc/letsencrypt/live/domain.com.au/fullchain.pem
...

And why would you purposely use acme.sh to overwrite files within the certbot folders?
Do you NOT have control of the web server configuration files?

@brellatech

Certbot 2.3.0
/root/.acme.sh/acme.sh
cyberpanel

I think you have made things overcomplicated.

[Bruce5051]

Here is the most recent issued certificate crt.sh | 8773427153
It only has lavenderlanephotography.com.au and no www.lavenderlanephotography.com.au in the SANs.

Or a different view:
non-www https://decoder.link/sslchecker/lavenderlanephotography.com.au/443
and www https://decoder.link/sslchecker/www.lavenderlanephotography.com.au/443

[Osiris]

@brellatech

/root/.acme.sh/acme.sh --issue -d domain.com.au -d www.domain.com.au --cert-file /etc/letsencrypt/live/domain.com.au/cert.pem --key-file /etc/letsencrypt/live/domain.com.au/privkey.pem --fullchain-file /etc/letsencrypt/live/domain.com.au/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt

Oehh, mixing the Certbot directory in /etc/letsencrypt and acme.sh probably can lead only to many issues. I would not recommend.

Also, as Rudy said, please don't use the --force option. It usually doesn't magically make all your issues go away.