I've recently rebuilt a bunch of servers and (due to DNS provider issues) obtained new certificates on new accounts. Now I'm getting reminder messages about the out-of-use certificates. The problem is that I can't be sure they're about the out-of-use certificates, since they only mention the certi…

This is a long-standing request, with people begging for more information on these emails for many many years (Certificate ID, Account ID, etc). ISRG/LetsEncrypt have been very clear about a few things, also for many years: Their email system is already too expensive, and they don't have resource…

Dit you try to revoke the old certs that are not used anymore? There are a couple of ways you can do this - here are the examples with certbot: [image] Revoking Certificates - Let's Encrypt When a certificate is no longer safe to use, you should revoke it. This can happen for a few dif…

Thank you for the pointer We have been in a rather complex transition with server migration that includes warm backups, and did not want to revoke the old certificates. Also, my suggestion is about a reminder message, which is at least partly to help people who are dealing with mistakes, or things…

I support your request 100 percent @rptb1 ; moreover, this should be a fairly simple and easy to apply change - just modifying the existing email template.

[image] rptb1: I can't be sure they're about the out-of-use certificates, since they only mention the certificates by domain name. If a certificate was issued with the same exact set of names as the original certificate, then that should count as a "renewal" and so you wouldn't get an email, …

Part of the transition involved reorganising the way names were attached to certificates, splitting some virtual servers, etc. I have no expectation that Let's Encrypt can deduce what we're up to!

I like your suggestion. In the meantime, you could search the transparency logs for certs that match the names in the email. And, which are due to expire in 20 days (or 7 if second email). One search tool is crt.sh although note that on its result page it does not show every name in the SANs list…

Please do not suggest unnecessary revocation of certificates. It is purely a waste of time and resources. [image] Certificate Revocation: An Animated Clarification Issuance Tech O…

@rptb1 Welcome to the Let's Encrypt Community, Richard! :slightly_smiling_face: [image] Received Expiration Email But Already Renewed Certificate: What to Know and Do Help I…

With millions of certificates being processed per week and this suggestion having already been made nearly as many times, rest assured that it's not a simple change.

[image] rptb1: Such as people who forget to revoke and need to know about lost servers. How does one forget to revoke a certificate? It's so incredibly rarely justified that it is usually both obvious and urgent when it needs to be done. How does one lose a server? :thinking:

Please include cert indentity in reminder mails

Feature Requests

griffin December 10, 2023, 2:58am 8

Please do not suggest unnecessary revocation of certificates. It is purely a waste of time and resources.

Topic		Replies	Views
BUG (?): Received an email for "expiring" certificates which are actually not Feature Requests	13	4160	October 25, 2016
Controlling/tailoring reminder emails from LE for deleted/defunct certificates? Help	18	1091	April 24, 2023
Receiving emails saying certificate are soon to expire, but they are not Help	11	575	July 17, 2022
Renewal mails for already renewed certificates Issuance Tech	22	5222	June 13, 2017
Getting spurious expiration notices Help	6	312	June 4, 2024

Please include cert indentity in reminder mails

Related topics