Received expiry notice but certificate is fine

I just received an expiry notice from expiry@letsencrypt.org saying that the certificate will expire in twenty days but the actual certificate expiry date is about 11 weeks away. Running certbot renew just says "skipped", as the cert isn't due for renewal. So my question is why did I get the notice? Seems to be a bug in the letsencrypt expiry notice system.

Bill

Did you add or remove any domains on your certificate?

If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.

1 Like

That would make sense as I set this one up a bit over two months ago, I can't exactly recall the detail of what I did but at the time we cut over from an old website that wasn't using letsencrypt cert. The new site had a temporary url and cert name test.xyz...org.nz which was changed to take over the old name with redirection to www.xyz...org.nz. I vaguely remember there was some problem and perhaps I registered the new certificate twice or something silly like that? Any way it appears I don't need to worry about it. Thanks Bill

1 Like