SSL renew problem

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
chikan.tours (but the name of my ssl is another name ? strange)
I ran this command:
sudo -H ./letsencrypt-auto certonly --standalone -d chikan.tours
It produced this output:
no matter how i update… it just create ssl like chikan.tour-0001 chikan.tour-0002, my ssl does not renew at all. is there anyway to help me to renew my ssl ?
My web server is (include version):
apache
The operating system my web server runs on is (include version):
php 7.0
My hosting provider, if applicable, is:
linode
I can login to a root shell on my machine (yes or no, or I don’t know):

2

Hi @wuouxiang

you have created 3 new identical certificates ( https://check-your-website.server-daten.de/?q=chikan.tours ):

CRT-Id Issuer not before not after Domain names LE-Duplicate next LE
1383535936 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-14 00:17:04 2019-07-13 00:17:04 chikan.tours duplicate nr. 3
1383502472 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-13 23:59:47 2019-07-12 23:59:47 chikan.tours, penghu.wiki duplicate nr. 2
1383500391 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-13 23:58:15 2019-07-12 23:58:15 chikan.tours, penghu.wiki duplicate nr. 1
1383450382 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-13 23:26:34 2019-07-12 23:26:34 chikan.tours duplicate nr. 2
1383429508 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-04-13 23:16:58 2019-07-12 23:16:58 chikan.tours duplicate nr. 1
1196476881 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-02-12 00:32:33 2019-05-12 23:32:33 chikan.tours
1165969029 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-02-01 23:24:26 2019-05-02 22:24:26 chikan.tours, penghu.im, penghu.info, penghu.news, penghu.wiki

Three with chikan.tours, two with chikan.tours + penghu.wiki.

What says

sudo ./letsencrypt-auto certificates

You have used certonly, so you have to install the certificate manual.

But your domain uses

CN=penghu.wiki
	02.02.2019
	03.05.2019
expires in 19 days	
chikan.tours, penghu.im, penghu.info, 
penghu.news, penghu.wiki - 5 entries

with 5 domain names.

3

Thank you so much for your helping. so…what command should I do next… or How could I solve this problem ? I want to remove (CN=penghu.wiki with 5 domain) but I dont know how to delete it ? thank you

4

How did you installed the certificate you use? Do that again.

certonly doesn't install the certificate.

Ignore it. If you install a new certificate (question 1), the certificate is removed. This is one step.

5

Hi I really appreciate you for your kind help
so far…the way I update ssl is – > sudo -H ./letsencrypt-auto certonly --standalone -d chikan.tours
i really always did it for ( I learned from https://www.linode.com/docs/security/ssl/install-lets-encrypt-to-create-ssl-certificates/)
so… you mean I can remove certonly … and just “sudo -H ./letsencrypt-auto --standalone -d chikan.tours” right ? thank you

6

I don't know if that works.

First, you use letsencrypt-auto, that's very old.

What says

letsencrypt-auto --version

Second, you use standalone, not a running webserver. So I don't know if that old letsencrypt-auto knows something about your webserver.

Your non-www + https uses an Apache

Server: Apache/2.4.18 (Ubuntu)

A newer Certbot is able to install the certificate.

Perhaps try

sudo ./letsencrypt-auto -d chikan.tours

and check, if your client sees the new certificate and asks, if you want to install it. That's a feature of newer Certbot-versions.

Or check

to update. Current version is 0.33.