Renew certificate automatically?


#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: upk.myds.me

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: metanet.ch

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

My question:
I got this letter from Let’s Encrypt:
"Your certificate (or certificates) for the names listed below will expire in 20 days (on 11 Sep 18 16:47 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.

We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let’s Encrypt’s current 90-day certificates, that means renewing 30 days before expiration. See https://letsencrypt.org/docs/integration-guide/ for details."

I can’t find a way to update it and - I want to update it automatically!


#2

How did you get the cert in the first place?


#3

I did it with synology nas, sorry, had been absent for a while


#4

Synology should renew it automatically. Suggest you check out whatever troubleshooting information they have to see why it isn’t.


#5

But this message came from Let’s Encrypt !
okay. I’ll wait and will see what happens!


#6

Hi @UPK

you have two active certificates:

https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_expired:false;include_subdomains:false;domain:upk.myds.me&lu=cert_search

Both with upk.myds.me as name, from letsencrypt. One from 14.06.2018 to 12.09.2018, the other from 19.08.2018 to 17.11.2018.

So it looks like the synology nas renews the certificates “a little bit late”, so letsencrypt sends the mail.


#7

Yes, it did. LE sends a notification if you haven’t renewed a cert within 20 days of expiration. But it’s your synology box that obtained the cert, and should be renewing it. If it isn’t renewing it, it’s your synology box that should be able to tell you why not.


#8

Thanks the lot! Great!
You said I got two certs? Should I delete one? They are two because when I made them I thougt the first one did not work.


#9

The first is created 2018-06-14, maybe you had used that. The second is from 2018-08-19, last Sunday.

You don’t need to delete it. It’s only 90 days valide.


#10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.