UPDATE 08 February 2022: The rate limit adjustments have been reverted to normal conditions. You can read about our rate limits here . UPDATE 29 January 2022: We completed the revocation of approximately 2.7 million certificates validated with the TLS-ALPN-01 method. If a subscriber did not renew…

I got the email. But how do I know my certificate is issued with TLS-ALPN-01 validation method?

Unfortunately, we cannot provide that information at this time. Some accounts have too many domains or serials to list in an email. Depending on your ACME client, you might review the configuration file to see which domains are utilizing which challenge types and which account. All successful issua…

[image] SSLisKillingMe: For complete noobs like me, it would be helpful for the method of how to check if this is your certficiate/where to find if this if is true for you? I've looked at a few things and still not sure... If you received an e-mail, then your account successfully issued a cer…

Thanks. Will go find a forum on how to force renew certs.

Is there a threshold timestamp such that certificates issued before that will get revoked ? I just renewed my certificates using tls-alpn-01 method few minutes ago, and validity (times are in UTC) reads following: Validity Not Before: Jan 26 05:02:55 2022 GMT Not Af…

For anyone using apache mod_md. Simply add/change the minimum date. By default I believe its 10% or 30 days. Honestly I can't remember. MDRenewWindow 21d For me I simply changed 21 to 60 and restarted the apache service. I got a new certificate within a minute or two automatically. Your apache i…

[image] abbe: Is there a threshold timestamp such that certificates issued before that will get revoked ? I do not have the exact time on-hand but Let’s Encrypt fixed and re-enabled the TLS-ALPN-01 challenge around 00:48 UTC on 26 January 2022. All certificates issued/renewed and validated wi…

PSA: Anyone using Caddy v2.4.2 or newer (June 12, 2021) (or CertMagic v0.14 or newer) will most likely not have to take any action. Caddy will automatically detect the revocation thanks to its automatic OCSP stapling and replace the certificate for you. (We have prior production experience with thi…

[Amazon Lightsail on Bitnami/Apache - Auto-Renew Script + Cronjob] Ok, I remembered creating a script to renew my certificates (bitnami/apache server). I created a script here so edited it and changed this script (which is run daily by a cron job to check if the certs need renewing yet): sudo nano…

Questions about Renewing before TLS-ALPN-01 Revocations

Help

Topic		Replies	Views
Revoking certain certificates on March 4 Help	176	136166	April 11, 2020
Unable to renew my ssl certificates Help	7	1865	September 11, 2020
Problem with Certbot renew Help	59	2976	November 30, 2020
Error renewing certificates while --dry-run succeeds Help	57	3158	November 11, 2020
[Solved] Failure renewing certs with certbot behind reverse proxy Help	19	7442	October 18, 2018

Questions about Renewing before TLS-ALPN-01 Revocations

Related topics