# Renewal over port 443

**URL:** <https://community.letsencrypt.org/t/renewal-over-port-443/176915>\
**Category:** Help\
**Created:** [May 1, 2022, 6:52pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915 "2022-05-01T18:52:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![MGJd8CG7](https://avatars.discourse-cdn.com/v4/letter/m/ac8455/32.png) [@MGJd8CG7](https://community.letsencrypt.org/u/MGJd8CG7)\
**Post date:** [May 1, 2022, 6:52pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915/1 "2022-05-01T18:52:47Z")

</div>

Hi,

in the instructions, it says that a cronjob is placed automatically for renewing the certificate, once it is outdated.  
Does renewal take place over port 443 (HTTPS) or port 80 (HTTP)?  
I configured my Apache2 web server so that only traffic over port 443 is allowed. Do I have to open port 80 for renewal of the certificate?

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 1, 2022, 7:02pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915/2 "2022-05-01T19:02:02Z")

</div>

If you've used the `http-01` challenge (probably), then yes, port 80 needs to be open.

Please read:

> **[Best Practice - Keep Port 80 Open - Let's Encrypt](https://letsencrypt.org/docs/allow-port-80/)**
>
> We occasionally get reports from people who have trouble using the HTTP-01 challenge type because they’ve firewalled off port 80 to their web server. Our recommendation is that all servers meant for general web use should offer both HTTP on...

---

<div class="post-metadata">

**Author:** ![MGJd8CG7](https://avatars.discourse-cdn.com/v4/letter/m/ac8455/32.png) [@MGJd8CG7](https://community.letsencrypt.org/u/MGJd8CG7)\
**Post date:** [May 2, 2022, 9:26pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915/3 "2022-05-02T21:26:40Z")

</div>

@Osiris thanks for the quick reply, I will reconfigure my web server so that HTTP requests are automatically handed over to port 443/HTTPS.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [May 2, 2022, 11:28pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915/4 "2022-05-02T23:28:17Z")

</div>

"Handed over to" via a 301 redirect, right? (Not TCP port forwarding.)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [June 1, 2022, 11:28pm UTC](https://community.letsencrypt.org/t/renewal-over-port-443/176915/5 "2022-06-01T23:28:27Z")

</div>

Closed on June 1, 2022, 11:28pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.