Receiving Expiration Emails for Dozens of Domains

Well, I've seen similar reports here in the past. I think usually it's because there's a large-scale integrator that doesn't really understand what the ACME account email address is used for and they end up having many customers' domains under one account, which happens to have one of the customer's emails (like, whichever customer happened to have the first cert issued or the most recent cert issued or something like that). The integration guide tries to be clear about who the subscriber is supposed to be, but I think that not everybody who needs to do so actually reads it or understands it.

@cdolson, have you always configured your own certificates for your own VMs with something like certbot, or have you ever had a hosting provider just creating the certificate for you using their own system?

Unless this is related somehow to the problems they had with expiration notices a few months ago. But I tend to doubt it.

For reference, some past threads with some similar issues:

5 Likes