# Only one of my domains isn't renewing

**URL:** <https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221>\
**Category:** Help\
**Created:** [October 4, 2020, 8:33pm UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221 "2020-10-04T20:33:40Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 4, 2020, 8:33pm UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/1 "2020-10-04T20:33:40Z")

</div>

My domain is: [jnjinnm.com](http://jnjinnm.com) (interstingly all subdomains renew without issue)

I ran this command:

# certbot --apache -d [jnjinnm.com](http://jnjinnm.com)

Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator apache, Installer apache  
Cert is due for renewal, auto-renewing...  
Renewing an existing certificate  
Performing the following challenges:  
http-01 challenge for [jnjinnm.com](http://jnjinnm.com)  
Waiting for verification...  
Challenge failed for domain [jnjinnm.com](http://jnjinnm.com)  
http-01 challenge for [jnjinnm.com](http://jnjinnm.com)  
Cleaning up challenges  
Some challenges have failed.  
IMPORTANT NOTES:

- The following errors were reported by the server:

My web server is (include version): Apache 2.4.41

The operating system my web server runs on is (include version): Ubuntu 20.04.1 LTS

My hosting provider, if applicable, is: Godaddy (DNS only)

I can login to a root shell on my machine (yes or no, or I don't know): yes, using a 3rd party desktop sharing app

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): I can use Webmin 1.955

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 0.40.0

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [October 4, 2020, 9:15pm UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/2 "2020-10-04T21:15:49Z")

</div>

Welcome to the Let's Encrypt Community 🙂

Sorry you're having trouble. I did some initial checking and things generally look good.

What says `apachectl -S`?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 5, 2020, 12:14am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/3 "2020-10-05T00:14:13Z")

</div>

> [@iburnthings](#):
>
> interstingly all subdomains renew without issue

Can you give an example of a working subdomain?

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 27, 2020, 10:30pm UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/4 "2020-10-27T22:30:14Z")

</div>

```
VirtualHost configuration:
*:443 is a NameVirtualHost
         default server agshardscapes.com (/etc/apache2/sites-enabled/agshardscapes.com-le-ssl.conf:2)
         port 443 namevhost agshardscapes.com (/etc/apache2/sites-enabled/agshardscapes.com-le-ssl.conf:2)
                 alias www.agshardscapes.com
         port 443 namevhost becssafe.jnjinnm.com (/etc/apache2/sites-enabled/becssafe.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost emby.jnjinnm.com (/etc/apache2/sites-enabled/emby.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost jnjinnm.com (/etc/apache2/sites-enabled/jnjinnm.com-le-ssl.conf:2)
                 alias www.jnjinnm.com
         port 443 namevhost kristol.jnjinnm.com (/etc/apache2/sites-enabled/kristol.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost ourfamily.jnjinnm.com (/etc/apache2/sites-enabled/ourfamily.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost owncloud.jnjinnm.com (/etc/apache2/sites-enabled/owncloud-le-ssl.conf:2)
         port 443 namevhost squire.jnjinnm.com (/etc/apache2/sites-enabled/squire.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost teatroburlesco.com (/etc/apache2/sites-enabled/teatroburlesco.com-le-ssl.conf:2)
                 alias www.teatroburlesco.com
         port 443 namevhost torrent.jnjinnm.com (/etc/apache2/sites-enabled/torrent.jnjinnm.com-le-ssl.conf:2)
         port 443 namevhost webmin.jnjinnm.com (/etc/apache2/sites-enabled/webmin.jnjinnm.com-le-ssl.conf:2)
*:80 is a NameVirtualHost
         default server jnjinnm.com (/etc/apache2/sites-enabled/000-default.conf:1)
         port 80 namevhost jnjinnm.com (/etc/apache2/sites-enabled/000-default.conf:1)
         port 80 namevhost agshardscapes.com (/etc/apache2/sites-enabled/agshardscapes.com.conf:1)
                 alias www.agshardscapes.com
         port 80 namevhost becssafe.jnjinnm.com (/etc/apache2/sites-enabled/becssafe.jnjinnm.com.conf:1)
         port 80 namevhost emby.jnjinnm.com (/etc/apache2/sites-enabled/emby.jnjinnm.com.conf:1)
         port 80 namevhost jnjinnm.com (/etc/apache2/sites-enabled/jnjinnm.com.conf:1)
                 alias www.jnjinnm.com
         port 80 namevhost kristol.jnjinnm.com (/etc/apache2/sites-enabled/kristol.jnjinnm.com.conf:1)
         port 80 namevhost ourfamily.jnjinnm.com (/etc/apache2/sites-enabled/ourfamily.jnjinnm.com.conf:1)
         port 80 namevhost owncloud.jnjinnm.com (/etc/apache2/sites-enabled/owncloud.conf:1)
         port 80 namevhost squire.jnjinnm.com (/etc/apache2/sites-enabled/squire.jnjinnm.com-le-ssl.conf:23)
         port 80 namevhost squire.jnjinnm.com (/etc/apache2/sites-enabled/squire.jnjinnm.com.conf:1)
         port 80 namevhost teatroburlesco.com (/etc/apache2/sites-enabled/teatroburlesco.com.conf:1)
                 alias www.teatroburlesco.com
         port 80 namevhost torrent.jnjinnm.com (/etc/apache2/sites-enabled/torrent.jnjinnm.com-le-ssl.conf:18)
         port 80 namevhost torrent.jnjinnm.com (/etc/apache2/sites-enabled/torrent.jnjinnm.com.conf:1)
         port 80 namevhost webmin.jnjinnm.com (/etc/apache2/sites-enabled/webmin.jnjinnm.com.conf:1)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/lock/apache2" mechanism=fcntl 
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33 not_used
Group: name="www-data" id=33 not_used

```

I'm also seeing this

```
Found the following certs:

```

Certificate Name: agshardscapes.com-0002  
Domains: [agshardscapes.com](http://agshardscapes.com) [becssafe.jnjinnm.com](http://becssafe.jnjinnm.com) [emby.jnjinnm.com](http://emby.jnjinnm.com) [jnjinnm.com](http://jnjinnm.com) [kristol.jnjinnm.com](http://kristol.jnjinnm.com) [ourfamily.jnjinnm.com](http://ourfamily.jnjinnm.com) [owncloud.jnjinnm.com](http://owncloud.jnjinnm.com) [squire.jnjinnm.com](http://squire.jnjinnm.com) [teatroburlesco.com](http://teatroburlesco.com) [torrent.jnjinnm.com](http://torrent.jnjinnm.com) [webmin.jnjinnm.com](http://webmin.jnjinnm.com) [www.agshardscapes.com](http://www.agshardscapes.com) [www.jnjinnm.com](http://www.jnjinnm.com) [www.teatroburlesco.com](http://www.teatroburlesco.com)  
Expiry Date: 2020-10-13 04:49:54+00:00 (INVALID: EXPIRED)  
Certificate Path: /etc/letsencrypt/live/agshardscapes.com-0002/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/agshardscapes.com-0002/privkey.pem  
Certificate Name: jnjinnm.com-0001  
Domains: [jnjinnm.com](http://jnjinnm.com)  
Expiry Date: 2020-10-13 04:48:56+00:00 (INVALID: EXPIRED)  
Certificate Path: /etc/letsencrypt/live/jnjinnm.com-0001/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/jnjinnm.com-0001/privkey.pem  
Certificate Name: owncloud.jnjinnm.com-0001  
Domains: [owncloud.jnjinnm.com](http://owncloud.jnjinnm.com)  
Expiry Date: 2021-01-09 07:43:40+00:00 (VALID: 73 days)  
Certificate Path: /etc/letsencrypt/live/owncloud.jnjinnm.com-0001/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/owncloud.jnjinnm.com-0001/privkey.pem  
Certificate Name: [www.agshardscapes.com](http://www.agshardscapes.com)  
Domains: [www.agshardscapes.com](http://www.agshardscapes.com)  
Expiry Date: 2020-12-12 09:12:18+00:00 (VALID: 45 days)  
Certificate Path: /etc/letsencrypt/live/www.agshardscapes.com/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/www.agshardscapes.com/privkey.pem  
Certificate Name: [www.jnjinnm.com](http://www.jnjinnm.com)  
Domains: [www.jnjinnm.com](http://www.jnjinnm.com)  
Expiry Date: 2021-01-02 19:09:53+00:00 (VALID: 66 days)  
Certificate Path: /etc/letsencrypt/live/www.jnjinnm.com/fullchain.pem  
Private Key Path: /etc/letsencrypt/live/www.jnjinnm.com/privkey.pem

The following renewal configurations were invalid:  
/etc/letsencrypt/renewal/agshardscapes.com-0001.conf  
/etc/letsencrypt/renewal/agshardscapes.com.conf  
/etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf  
/etc/letsencrypt/renewal/caitlin.jnjinnm.com.conf  
/etc/letsencrypt/renewal/emby.jnjinnm.com.conf  
/etc/letsencrypt/renewal/ipcam.jnjinnm.com.conf  
/etc/letsencrypt/renewal/jnjinnm.com.conf  
/etc/letsencrypt/renewal/kristol.jnjinnm.com.conf  
/etc/letsencrypt/renewal/ourfamily.jnjinnm.com.conf  
/etc/letsencrypt/renewal/owncloud.jnjinnm.com.conf  
/etc/letsencrypt/renewal/squire.jnjinnm.com-0001.conf  
/etc/letsencrypt/renewal/squire.jnjinnm.com.conf  
/etc/letsencrypt/renewal/torrent.jnjinnm.com.conf  
/etc/letsencrypt/renewal/webmin.jnjinnm.com.conf

I was able to renew several of the subdomains manually and they have a padlock now

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 27, 2020, 10:51pm UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/5 "2020-10-27T22:51:28Z")

</div>

These things are NOT good:

> [@iburnthings](#):
>
> Expiry Date: 2020-10-13 04:49:54+00:00 (INVALID: EXPIRED)  
> Expiry Date: 2020-10-13 04:48:56+00:00 (INVALID: EXPIRED)
> 
> The following renewal configurations were invalid:  
> /etc/letsencrypt/renewal/agshardscapes.com-0001.conf  
> /etc/letsencrypt/renewal/agshardscapes.com.conf  
> /etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/caitlin.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/emby.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/ipcam.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/jnjinnm.com.conf  
> /etc/letsencrypt/renewal/kristol.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/ourfamily.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/owncloud.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/squire.jnjinnm.com-0001.conf  
> /etc/letsencrypt/renewal/squire.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/torrent.jnjinnm.com.conf  
> /etc/letsencrypt/renewal/webmin.jnjinnm.com.conf

Let's start with one as an example and hopefully they can all be resolved in the same manner.  
Please show these three files:

```nohighlight
/etc/apache2/sites-enabled/becssafe.jnjinnm.com-le-ssl.conf
/etc/apache2/sites-enabled/becssafe.jnjinnm.com.conf
/etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf

```

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 1:37am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/6 "2020-10-28T01:37:26Z")

</div>

**Sorry for the formatting.. idk why the code block isn't working**  
/etc/apache2/sites-enabled/becssafe.jnjinnm.com-le-ssl.conf  
  
\<VirtualHost \*:443\>  
DocumentRoot "/var/www/becssafe"  
ServerName [becssafe.jnjinnm.com](http://becssafe.jnjinnm.com)  
\<Directory "/var/www/becssafe"\>  
allow from all  
Options None  
Require all granted  
  
RewriteEngine on  
# Some rewrite rules in this file were disabled on your HTTPS site,  
# because they have the potential to create redirection loops.

```
# RewriteCond %{SERVER_NAME} =becssafe.jnjinnm.com
# RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/agshardscapes.com-0002/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/agshardscapes.com-0002/privkey.pem
</VirtualHost>
</IfModule>

```

/etc/apache2/sites-enabled/becssafe.jnjinnm.com.conf  
  
\<VirtualHost \*:443\>  
DocumentRoot "/var/www/becssafe"  
ServerName [becssafe.jnjinnm.com](http://becssafe.jnjinnm.com)  
\<Directory "/var/www/becssafe"\>  
allow from all  
Options None  
Require all granted  
  
RewriteEngine on  
# Some rewrite rules in this file were disabled on your HTTPS site,  
# because they have the potential to create redirection loops.

```
# RewriteCond %{SERVER_NAME} =becssafe.jnjinnm.com
# RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/agshardscapes.com-0002/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/agshardscapes.com-0002/privkey.pem
</VirtualHost>
</IfModule>
root@jnjinlc-Server:/home/jnjinlc# cat /etc/apache2/sites-enabled/becssafe.jnjinnm.com.conf
<VirtualHost *:80>
DocumentRoot "/var/www/becssafe"
ServerName becssafe.jnjinnm.com
<Directory "/var/www/becssafe">
allow from all
Options None
Require all granted
</Directory>
RewriteEngine on
RewriteCond %{SERVER_NAME} =becssafe.jnjinnm.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

```

/etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf  
# renew\_before\_expiry = 30 days  
version = 0.31.0  
archive\_dir = /etc/letsencrypt/archive/becssafe.jnjinnm.com  
cert = /etc/letsencrypt/live/becssafe.jnjinnm.com/cert.pem  
privkey = /etc/letsencrypt/live/becssafe.jnjinnm.com/privkey.pem  
chain = /etc/letsencrypt/live/becssafe.jnjinnm.com/chain.pem  
fullchain = /etc/letsencrypt/live/becssafe.jnjinnm.com/fullchain.pem

```
# Options used in the renewal process
[renewalparams]
installer = apache
authenticator = apache
server = https://acme-v02.api.letsencrypt.org/directory
account = 3a679950640e749f5cd3e873eea5d212
```

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 1:47am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/7 "2020-10-28T01:47:48Z")

</div>

Let's see the full output of:  
`certbot certificates`  
`certbot --version`

I'm seeing:

> [@iburnthings](#):
>
> certbot 0.40.0

> [@iburnthings](#):
>
> version = 0.31.0

and

> [@iburnthings](#):
>
> Ubuntu 20.04.1 LTS

And thinking you might be better off by switching to the latest `snapd` version...

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 1:50am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/8 "2020-10-28T01:50:20Z")

</div>

```
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewal configuration file /etc/letsencrypt/renewal/agshardscapes.com-0001.conf produced an unexpected error: expected /etc/letsencrypt/live/agshardscapes.com-0001/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/agshardscapes.com.conf produced an unexpected error: expected /etc/letsencrypt/live/agshardscapes.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/becssafe.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/caitlin.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/caitlin.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/emby.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/emby.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/ipcam.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/ipcam.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/kristol.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/kristol.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/ourfamily.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/ourfamily.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/owncloud.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/owncloud.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/squire.jnjinnm.com-0001.conf produced an unexpected error: expected /etc/letsencrypt/live/squire.jnjinnm.com-0001/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/squire.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/squire.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/torrent.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/torrent.jnjinnm.com/cert.pem to be a symlink. Skipping.
Renewal configuration file /etc/letsencrypt/renewal/webmin.jnjinnm.com.conf produced an unexpected error: expected /etc/letsencrypt/live/webmin.jnjinnm.com/cert.pem to be a symlink. Skipping.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: agshardscapes.com-0002
    Domains: agshardscapes.com becssafe.jnjinnm.com emby.jnjinnm.com jnjinnm.com kristol.jnjinnm.com ourfamily.jnjinnm.com owncloud.jnjinnm.com squire.jnjinnm.com teatroburlesco.com torrent.jnjinnm.com webmin.jnjinnm.com www.agshardscapes.com www.jnjinnm.com www.teatroburlesco.com
    Expiry Date: 2020-10-13 04:49:54+00:00 (INVALID: EXPIRED)
    Certificate Path: /etc/letsencrypt/live/agshardscapes.com-0002/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/agshardscapes.com-0002/privkey.pem
  Certificate Name: emby.jnjinnm.com-0001
    Domains: emby.jnjinnm.com
    Expiry Date: 2021-01-25 21:27:36+00:00 (VALID: 89 days)
    Certificate Path: /etc/letsencrypt/live/emby.jnjinnm.com-0001/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/emby.jnjinnm.com-0001/privkey.pem
  Certificate Name: jnjinnm.com-0001
    Domains: jnjinnm.com
    Expiry Date: 2020-10-13 04:48:56+00:00 (INVALID: EXPIRED)
    Certificate Path: /etc/letsencrypt/live/jnjinnm.com-0001/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/jnjinnm.com-0001/privkey.pem
  Certificate Name: owncloud.jnjinnm.com-0001
    Domains: owncloud.jnjinnm.com
    Expiry Date: 2021-01-09 07:43:40+00:00 (VALID: 73 days)
    Certificate Path: /etc/letsencrypt/live/owncloud.jnjinnm.com-0001/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/owncloud.jnjinnm.com-0001/privkey.pem
  Certificate Name: www.agshardscapes.com
    Domains: www.agshardscapes.com
    Expiry Date: 2020-12-12 09:12:18+00:00 (VALID: 45 days)
    Certificate Path: /etc/letsencrypt/live/www.agshardscapes.com/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/www.agshardscapes.com/privkey.pem
  Certificate Name: www.jnjinnm.com
    Domains: www.jnjinnm.com
    Expiry Date: 2021-01-02 19:09:53+00:00 (VALID: 66 days)
    Certificate Path: /etc/letsencrypt/live/www.jnjinnm.com/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/www.jnjinnm.com/privkey.pem

The following renewal configurations were invalid:
  /etc/letsencrypt/renewal/agshardscapes.com-0001.conf
  /etc/letsencrypt/renewal/agshardscapes.com.conf
  /etc/letsencrypt/renewal/becssafe.jnjinnm.com.conf
  /etc/letsencrypt/renewal/caitlin.jnjinnm.com.conf
  /etc/letsencrypt/renewal/emby.jnjinnm.com.conf
  /etc/letsencrypt/renewal/ipcam.jnjinnm.com.conf
  /etc/letsencrypt/renewal/kristol.jnjinnm.com.conf
  /etc/letsencrypt/renewal/ourfamily.jnjinnm.com.conf
  /etc/letsencrypt/renewal/owncloud.jnjinnm.com.conf
  /etc/letsencrypt/renewal/squire.jnjinnm.com-0001.conf
  /etc/letsencrypt/renewal/squire.jnjinnm.com.conf
  /etc/letsencrypt/renewal/torrent.jnjinnm.com.conf
  /etc/letsencrypt/renewal/webmin.jnjinnm.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - -
```

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 1:51am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/9 "2020-10-28T01:51:23Z")

</div>

> [@rg305](#):
>
> `certbot --version`

#certbot --version  
certbot 0.40.0

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 1:53am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/10 "2020-10-28T01:53:55Z")

</div>

> [@iburnthings](#):
>
> error:  
> expected  
> /etc/letsencrypt/live/agshardscapes.com-0001/cert.pem  
> to be a **symlink**.

OK I had not noticed this before.  
**Have you restored that directory recently?**  
Please show:  
`ls -l /etc/letsencrypt/live/agshardscapes.com-0001/`

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 1:56am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/11 "2020-10-28T01:56:40Z")

</div>

You could try:  
`certbot update_symlinks`  
then show:  
`certbot certificates`

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 1:57am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/12 "2020-10-28T01:57:48Z")

</div>

> [@rg305](#):
>
> ls -l /etc/letsencrypt/live/agshardscapes.com-0001/

I have not restored anything

```
# ls -l /etc/letsencrypt/live/agshardscapes.com-0001/
total 20
-rw-r--r-- 1 root root 2167 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3814 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

```

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 1:58am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/13 "2020-10-28T01:58:55Z")

</div>

> [@rg305](#):
>
> `certbot update_symlinks`

```
# certbot update_symlinks
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Expected /etc/letsencrypt/live/agshardscapes.com-0001/cert.pem to be a symlink

```

certbot certificates gives the same output as before

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 2:01am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/14 "2020-10-28T02:01:14Z")

</div>

Something has gone wrong.  
The "files" in the live folder should NOT be files, they should be symlinks to the latest version file.  
Like:

```auto
lrwxrwxrwx 1 root root 42 Sep 17 23:03 cert.pem -> ../../archive/EXAMPLE.DOMAIN/cert13.pem
lrwxrwxrwx 1 root root 43 Sep 17 23:03 chain.pem -> ../../archive/EXAMPLE.DOMAIN/chain13.pem
lrwxrwxrwx 1 root root 47 Sep 17 23:03 fullchain.pem -> ../../archive/EXAMPLE.DOMAIN/fullchain13.pem
lrwxrwxrwx 1 root root 45 Sep 17 23:03 privkey.pem -> ../../archive/EXAMPLE.DOMAIN/privkey13.pem

```

Please show:  
`ls -lR /etc/letsencrypt/archive/`

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [October 28, 2020, 2:01am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/15 "2020-10-28T02:01:55Z")

</div>

Looks like it's time for the axe to come out...

`certbot certificates`

`certbot delete --cert-name` _name_

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 2:02am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/16 "2020-10-28T02:02:41Z")

</div>

then deleting the folders with real files and fixing the symlinks should do it?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 2:03am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/17 "2020-10-28T02:03:10Z")

</div>

Please show:  
`ls -lR /etc/letsencrypt/archive/`

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [October 28, 2020, 2:03am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/18 "2020-10-28T02:03:14Z")

</div>

**Don't delete the folders yourself!**

Use `certbot delete`

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [October 28, 2020, 2:04am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/19 "2020-10-28T02:04:14Z")

</div>

Did you copy files around?  
Do you have a script that moves certs around?

READERS: Get involved. Be heard. Do your part with: If you read something you like, then like it ❤

---

<div class="post-metadata">

**Author:** ![iburnthings](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/iburnthings/32/44038_2.png) [@iburnthings](https://community.letsencrypt.org/u/iburnthings)\
**Post date:** [October 28, 2020, 2:04am UTC](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221/20 "2020-10-28T02:04:43Z")

</div>

I did this but I'll get the archives in a sec  
# ls -l /etc/letsencrypt/live/\*  
-rw-r--r-- 1 root root 740 Apr 12 2020 /etc/letsencrypt/live/README

```
/etc/letsencrypt/live/agshardscapes.com:
total 20
-rw-r--r-- 1 root root 2187 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3834 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/agshardscapes.com-0001:
total 20
-rw-r--r-- 1 root root 2167 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3814 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/agshardscapes.com-0002:
total 4
lrwxrwxrwx 1 root root 46 Jul 14 23:49 cert.pem -> ../../archive/agshardscapes.com-0002/cert2.pem
lrwxrwxrwx 1 root root 47 Jul 14 23:49 chain.pem -> ../../archive/agshardscapes.com-0002/chain2.pem
lrwxrwxrwx 1 root root 51 Jul 14 23:49 fullchain.pem -> ../../archive/agshardscapes.com-0002/fullchain2.pem
lrwxrwxrwx 1 root root 49 Jul 14 23:49 privkey.pem -> ../../archive/agshardscapes.com-0002/privkey2.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/becssafe.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 2252 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3899 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/caitlin.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1923 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3570 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/emby.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1911 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3558 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/emby.jnjinnm.com-0001:
total 4
lrwxrwxrwx 1 root root 45 Oct 27 16:27 cert.pem -> ../../archive/emby.jnjinnm.com-0001/cert1.pem
lrwxrwxrwx 1 root root 46 Oct 27 16:27 chain.pem -> ../../archive/emby.jnjinnm.com-0001/chain1.pem
lrwxrwxrwx 1 root root 50 Oct 27 16:27 fullchain.pem -> ../../archive/emby.jnjinnm.com-0001/fullchain1.pem
lrwxrwxrwx 1 root root 48 Oct 27 16:27 privkey.pem -> ../../archive/emby.jnjinnm.com-0001/privkey1.pem
-rw-r--r-- 1 root root 692 Oct 27 16:27 README

/etc/letsencrypt/live/ipcam.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1919 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3566 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/jnjinnm.com-0001:
total 4
lrwxrwxrwx 1 root root 40 Jul 14 23:48 cert.pem -> ../../archive/jnjinnm.com-0001/cert2.pem
lrwxrwxrwx 1 root root 41 Jul 14 23:48 chain.pem -> ../../archive/jnjinnm.com-0001/chain2.pem
lrwxrwxrwx 1 root root 45 Jul 14 23:48 fullchain.pem -> ../../archive/jnjinnm.com-0001/fullchain2.pem
lrwxrwxrwx 1 root root 43 Jul 14 23:48 privkey.pem -> ../../archive/jnjinnm.com-0001/privkey2.pem
-rw-r--r-- 1 root root 692 Jul 14 23:48 README

/etc/letsencrypt/live/kristol.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1948 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3595 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/ourfamily.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1927 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3574 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 692 Apr 12 2020 README

/etc/letsencrypt/live/owncloud.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1927 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3574 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/owncloud.jnjinnm.com-0001:
total 4
lrwxrwxrwx 1 root root 49 Oct 11 02:43 cert.pem -> ../../archive/owncloud.jnjinnm.com-0001/cert4.pem
lrwxrwxrwx 1 root root 50 Oct 11 02:43 chain.pem -> ../../archive/owncloud.jnjinnm.com-0001/chain4.pem
lrwxrwxrwx 1 root root 54 Oct 11 02:43 fullchain.pem -> ../../archive/owncloud.jnjinnm.com-0001/fullchain4.pem
lrwxrwxrwx 1 root root 52 Oct 11 02:43 privkey.pem -> ../../archive/owncloud.jnjinnm.com-0001/privkey4.pem
-rw-r--r-- 1 root root 692 Apr 13 2020 README

/etc/letsencrypt/live/squire.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 2220 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3867 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1708 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/squire.jnjinnm.com-0001:
total 20
-rw-r--r-- 1 root root 1919 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3566 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/torrent.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1923 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3570 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/webmin.jnjinnm.com:
total 20
-rw-r--r-- 1 root root 1919 Apr 12 2020 cert.pem
-rw-r--r-- 1 root root 1647 Apr 12 2020 chain.pem
-rw-r--r-- 1 root root 3566 Apr 12 2020 fullchain.pem
-rw-r--r-- 1 root root 1704 Apr 12 2020 privkey.pem
-rw-r--r-- 1 root root 682 Apr 12 2020 README

/etc/letsencrypt/live/www.agshardscapes.com:
total 4
lrwxrwxrwx 1 root root 45 Sep 13 04:12 cert.pem -> ../../archive/www.agshardscapes.com/cert2.pem
lrwxrwxrwx 1 root root 46 Sep 13 04:12 chain.pem -> ../../archive/www.agshardscapes.com/chain2.pem
lrwxrwxrwx 1 root root 50 Sep 13 04:12 fullchain.pem -> ../../archive/www.agshardscapes.com/fullchain2.pem
lrwxrwxrwx 1 root root 48 Sep 13 04:12 privkey.pem -> ../../archive/www.agshardscapes.com/privkey2.pem
-rw-r--r-- 1 root root 692 Jul 14 23:49 README

/etc/letsencrypt/live/www.jnjinnm.com:
total 4
lrwxrwxrwx 1 root root 39 Oct 4 14:09 cert.pem -> ../../archive/www.jnjinnm.com/cert1.pem
lrwxrwxrwx 1 root root 40 Oct 4 14:09 chain.pem -> ../../archive/www.jnjinnm.com/chain1.pem
lrwxrwxrwx 1 root root 44 Oct 4 14:09 fullchain.pem -> ../../archive/www.jnjinnm.com/fullchain1.pem
lrwxrwxrwx 1 root root 42 Oct 4 14:09 privkey.pem -> ../../archive/www.jnjinnm.com/privkey1.pem
-rw-r--r-- 1 root root 692 Oct 4 14:09 README
```

[Next page](https://community.letsencrypt.org/t/only-one-of-my-domains-isnt-renewing/135221.md?page=2)
