Re-Subscribe To Renewal Alerts

I see this is a recurring issue so I thought I would raise it as a feature request.

Please allow users to re-subscribe to renewal reminders or make it so the unsubscribe is site specific instead of email specific.

I myself did not realize that unsubscribing from renewal alerts from one specific site, would unsubscribe me from all of them. I manage over a 100 sites and have just started using the let's encrypt service. To say this is a huge headache is an understatement.

2 Likes

Welcome to the Let's Encrypt Community, Russell! :slightly_smiling_face:

For now, you can resubscribe by updating your email address through your ACME client(s). This will need to be done for each of your ACME accounts, so the level of tediousness will depend upon how many of those you are using. If you want to use the same email address that you unsubscribed, you will need to use plus addressing to make your email address "different" from the unsubscribed addressed.

@lestaff

I believe this issue is already on your radar, likely under a bigger improvement effort. I'm tagging you for assurance.

7 Likes

@rwfougere I am not dismissing your request. Heck, I'm just a volunteer here so don't have such powers :slight_smile:

Just wanted to let you know there are certificate monitoring services. I don't recommend any specific one but searching shows many.

Or, develop your own monitor. Many languages have ways to see the parsed x509 cert data. Even clever shell scripting could be used such as below with extra bits as you need.

Checking the cert your server is sending would catch more problems than Let's Encrypt is aware of. They are only checking if certs were renewed - not if the new cert is actually being used.

echo | openssl s_client -connect letsencrypt.org:443 2>/dev/null | openssl x509 -noout -dates

notBefore=Jun  7 03:00:36 2022 GMT
notAfter=Sep  5 03:00:35 2022 GMT
7 Likes

Let's Encrypt is aware that our email unsubscribe options are not good.

Unfortunately that unsubscribe link is from our third-party email service provider, so we don't easily have a lot control here.

We would like to bring that experience "in-house" so we have better control and options here, but it will require the focus and time of our developers to get it done. I can't promise any timeline for making it better, as we're a small team with a lot of work to do!

10 Likes

Thanks for taking the time to reply!

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.