New certificate is not recognize by browsers or services

Help
1

Hi,

I renewed my cert last month, and I can see my new cert being valid here:

image
image2066×554 115 KB

But both browsers and my C# services tell me the certificate has expired, quoting the previous certificate expiry date (yesterday). They don't seem to detect the new certificate.

Certbot is also pointing to the newer certificate locally:

sudo certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: vftc.nhnt.co
    Serial Number: 51ace7ba5cca32f881752d48f0c884b2962
    Key Type: ECDSA
    Domains: vftc.nhnt.co
    Expiry Date: 2025-06-27 06:41:16+00:00 (VALID: 71 days)
    Certificate Path: /etc/letsencrypt/live/vftc.nhnt.co/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/vftc.nhnt.co/privkey.pem
2

[SOLVED] I restarted the AWS instance and things fixed themselves.

2 Likes
3

That means your service hasn't reloaded renewed certificate files and continued using the previously loaded in memory.

You should configure a post-hook that would reload a service affected. User Guide — Certbot 4.0.0 documentation

e.g. certbot renew --post-hook "systemctl reload nginx"

6 Likes
4

ah, nice! that's really useful, thanks!!!

3 Likes