Renew for Qnap link

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
blacksec.myqnapcloud.com

I'm getting emails to renew, but I don't know what to do or if I need to.
This is to connect remotely to myQNAPcloud Link.
Can I get some help on this issue, please
Thanks

2

Hello @thales, welcome to the Let's Encrypt community. :slightly_smiling_face:

Using the online tool Let's Debug and making the assumption the https://letsencrypt.org/docs/challenge-types/ is the HTTP-01 challenge results in https://letsdebug.net/blacksec.myqnapcloud.com/2379003

image
image1009×490 8.3 KB

Best Practice - Keep Port 80 Open

If the assumption is correct then you need to allow access via Port 80 "The HTTP-01 challenge can only be done on port 80." That would be done by opening up the firewalls to pass the challenge on Port 80 and possibly adding a forwarding rule to the router.

Edit

Here is a list of issued certificates crt.sh | blacksec.myqnapcloud.com, I suggest just use the one issued on 2025-02-18.

The currently being served certificate can be viewed here https://decoder.link/sslchecker/blacksec.myqnapcloud.com/443

image
image817×560 6.29 KB

Presently Let’s Encrypt does not issue certificates for IP Address, also the IPv4 Address 192.168.1.1 is a private address and thus not accessible from the public facing Internet.

And there seems to be Geo Blocking Permanent link to this check report.

And this is what I see from Chrome after by passing the warnings

image
image1252×848 23.5 KB

2 Likes
3

Hi,
I'm confused here.
I don't have a website because I don't need one.
This certificate was created by QNAP to allow a safe remote connection to my NAS from outside my local network.
I opened port 80 on my NAS. Ikeep it close and just open when using Idrive that requires port 80 to be open.
This certificate, from what I understood was free, but I got an e-mail asking to renew because it was expiring.
Can you help me to undestand is goin on and what should I do?