I got several mails to renew certificates, which are already renewed (by issuing new ones, no letencrypt renew, yet).

For the record, I just received: Your certificate (or certificates) for the names listed below will expire in 19 days (on 25 Oct 16 00:06 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors. for a domain (the only one so far to get this…

tHi @laurenweinstein1 , is it possible that the domain was renewed for a slightly different set of names? Most confusing versions of this message so far have resulted from cases where people added or removed a name, and then the reminder script doesn’t know how to tell how the new cert is related to …

Hi. I’m unsure what crt.sh script you’re referring to. The particular cert in question is for (e.g.) domain.com and www.domain.com , with the former URL redirecting to the latter. Thanks.

@schoen is talking about the https://crt.sh/ web site, a Certificate Transparency monitor, not a shell script :slight_smile: . If it’s still unreliable, Google operate one too, although it has less weird/ cool features than Rob’s crt.sh https://www.google.com/transparencyreport/https/ct/

Just updating on this – I received a few minutes ago another “certificate is expiring” warning (in 9 days in this case) for that same domain. The actual certificate was issued (renewed) on 9/25 and is good through 12/24. –Lauren–

Just checked on crt.sh . The most recent issuance of the cert is there. The other entries are for my initial test over a couple of days in July. 2016-09-25 2016-09-25C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3

Hi Lauren, would you be willing to let me know which certs they are? I could try to look into the behavior of the reminder script.

Of course. I’ll contact you off-forum. Thanks. –Lauren–

Hi Lauren, I looked at the issuance history for the domain that you mentioned. What I think is happening is that you previously had a certificate (that’s now near expiry) for only example.org . You later replaced this with a new certificate for both example.org and www.example.org , which you’ve succe…

Renewal mails for already renewed certificates

Issuance Tech

serverco February 12, 2016, 5:03pm 2

Yes, it’s a known issue ( or several issues ) - see Expiration Emails (Too Many, Unnecessary, etc.)

Topic		Replies	Views
Keep getting certificate expiration notice emails even though certificate already renewed Issuance Tech	3	2406	December 8, 2016
Received expiration notice for domain but certs renewed Help	9	1140	March 28, 2022
False alarm renewal emails Issuance Tech	4	1277	April 16, 2019
Expiry notice for certificates Feature Requests	1	1165	June 16, 2017
BUG (?): Received an email for "expiring" certificates which are actually not Feature Requests	13	4159	October 25, 2016

Renewal mails for already renewed certificates

Related topics