Thought I renewed correctly through dns. Still shows as expired

run implies also installing something. With --dry-run the fake cert isn't saved to disk, so there's nothing to install.

1 Like