Renewal of SSL Certificate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: hipscc.org

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: GoDaddy

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

We have determined that the certificate on the domain is going to expire, but we have not received a renewal notice and all the email addresses that we could think of for a notification to go to, are apparently not valid. How can we determine if the cert will autorenew or how do we renew it if it's not?

Thanks,
Ryan

2 Likes

There is a fairly recent certificate issued: https://crt.sh/?Identity=hipscc.org&deduplicate=Y / https://crt.sh/?id=3664567191 which is also currently in use.

How did you determine that? It's still months away.

2 Likes

Considering that hipscc.org is currently parked, there is no certificate being served (for https).


@Osiris

How?

2 Likes
3 Likes

Like @danb35 (and probably most of the world) I just see the site, not any parking placeholder site.

3 Likes

Hmm... :thinking: So www points to the hosted webserver and the apex points to the parking IP.

http://hipscc.org

2 Likes

So... the truth is even more horrifying than my assumption...

hipscc.org. 598 IN A 34.102.136.180
hipscc.org. 598 IN A 23.236.62.147

Park a domain registered with GoDaddy

...

  1. Update the Points to field to the IP address 34.102.136.180.

Uh...

www.hipscc.org. 21599 IN CNAME www106.wixdns.net.
www106.wixdns.net. 599 IN CNAME balancer.wixdns.net.
balancer.wixdns.net. 299 IN CNAME f7a0737a-balancer.wixdns.net.
f7a0737a-balancer.wixdns.net. 299 IN CNAME td-balancer-dc11-60-177.wixdns.net.
td-balancer-dc11-60-177.wixdns.net. 3599 IN A 185.230.60.177
2 Likes

I'm getting a DNS park page now too.. Guess perhaps DNS had to propogate or something.

3 Likes

What do you see with dig?

2 Likes

Same as yours:

hipscc.org.             600     IN      A       34.102.136.180
hipscc.org.             600     IN      A       23.236.62.147

CNAME to wix for the www subdomain too.

3 Likes

The parked page should just be a redirect to www.
That would "fix" this.
But what about https://parked.page ? ? ?
Well, that is something the hosting company needs to do for you.
http & https to the parked page should redirect to www.

2 Likes

We got a notification from our documentation system on 11/23 that it was going to expire in 24 days. That does not seem to be accurate anymore. I don't know what would have changed, but it seems odd that it would be pushed out by a few months.

2 Likes

Thanks for all the feedback. I'm going to have to loop in someone who knows more about this than I do next week.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.