My SSL certificate expired

[Jil]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kaydemghana.com

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: Google Cloud

I need help to renew the SSL certificate or an advice on what to do after checking out the error on the website. Thanks

[webprofusion]

Did you use a wordpress plugin for Let's Encrypt or did you use Certbot (or something else)?

If you don't know I'd recommend hiring a local web consultancy to fix it for you.

[griffin]

Welcome to the Let's Encrypt Community, Jil

Your certificate is expired. As @webprofusion asked, do you know how you got the certificate previously?

Complete certificate history for kaydemghana.com:

https://crt.sh/?q=kaydemghana.com

[Jil]

Thanks friend, I had a local Web service work on it. He is advising I switch to another hosting provider.

Please do you agree to this?

[Jil]

From the history, that's a cloudflare basic certificate?
Any help with that. Want to see if I can renew and possibly switch to a new hosting provider next year

[griffin]

It appears to me that your Let's Encrypt certificate was autorenewing successfully for many months. A Cloudflare wildcard certificate appears to be the most recent certificate issued though. It appears that kaydemghana.com is using Cloudflare for its DNS yet is not using the Cloudflare content delivery network (CDN). I see no reason why you can't either renew your Let's Encrypt certificate or install the existing Cloudflare wildcard certificate. Do you have SSH access to the webserver?

[Jil]

Yes, I have SSH access

[griffin]

Please run the following commands and post their outputs:

sudo apachectl -k graceful

sudo apachectl -S

[Jil]

VirtualHost configuration:
*:443 kaydemghana.com (/opt/bitnami/apache2/conf/bitnami/bitnami.conf:70)
*:80 is a NameVirtualHost
default server kaydemghana.com (/opt/bitnami/apache2/conf/bitnami/bitnami.conf:8)
port 80 namevhost kaydemghana.com (/opt/bitnami/apache2/conf/bitnami/bitnami.conf:8)
port 80 namevhost local-stackdriver-agent.stackdriver.com (/opt/bitnami/apache2/conf/bitnami/bitnami.conf:120)
ServerRoot: "/opt/bitnami/apache2"
Main DocumentRoot: "/opt/bitnami/apache2/htdocs"
Main ErrorLog: "/opt/bitnami/apache2/logs/error_log"
Mutex ssl-cache: using_defaults
Mutex default: dir="/opt/bitnami/apache2/logs/" mechanism=default
Mutex proxy-balancer-shm: using_defaults
Mutex ssl-stapling-refresh: using_defaults
Mutex rewrite-map: using_defaults
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
PidFile: "/opt/bitnami/apache2/logs/httpd.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
Define: USE_PHP_FPM
User: name="daemon" id=1
Group: name="daemon" id=1

[griffin]

That's a Bitnami stack.

https://docs.bitnami.com/google/how-to/generate-install-lets-encrypt-ssl/

[Jil]

Thanks Griffin.Bn able to renew it. thanks much

[griffin]

You are quite welcome!