Recently created a wildcard certificate two weeks ago, that is working well. However realise that it did not include the base domain. Am I able to rerun the same command I used to create the wildcard certificate to create a certificate for the base domain ? This is the command I ran, certbot ce…

Thanks for the suggestion, but was not the issue. Have checked the LE install/configuration symlinks.....and all appear correct from my understanding. lead me to think about other possible issues and have found what the problem was discovered in this thread. [image] Certbot issuing…

If you run the certonly command with a new/extra domain (such as the base domain), then Certbot will issue a new certificate, even if your original wildcard certificate (with no base domain) is not due for renewal. So yes, your proposed command should do exactly what you want. The only change you …

Thanks for reply. tested the following command certbot certonly --agree-tos --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory -d *.example.com.au -d example.com.au It displayed this message that made sense You have an existing certificate that contain…

Sounds like you may have not waited long enough, or you did not enter the TXT records correctly. A sure-fire way to verify that the records are being advertised by your DNS host is to use a direct query or a trace query, e.g. dig +trace _acme-challenge.example.com.au and verify in the output that…

Or… the second TXT record may have overwrote the first. Ensure you have two TXT records before continuing.

Ok, now testing the new certificate, should I expect the following two scenarios to work; https://example.com.au https://subdomain.example.com.au Should the ServerAlias in the vhost.conf file be listed as follows ServerAlias example.com.au *.example.com.au Notice this error in error.log […

[image] PeterC: Ok, now testing the new certificate, should I expect the following two scenarios to work; https://example.com.au https://subdomain.example.com.au Yes, provided they resolve to your IP and you are serving something there - yes. [image] PeterC: Should the ServerAlias in t…

[image] rg305: Yes, provided they resolve to your IP and you are serving something there - yes. This is a working server that have been using for some months. IP points correctly to the base domain and subdomains. We have a few vhosts on this server. It is staging testing so able to safely t…

[image] PeterC: dom1.example.com.au dom3.example.com.au dom3.example.com.au…etc The conf files that would server any of those other names must come above (alphabetically) to the "default" conf files. Try changing 00_default.conf to 99_default.conf or ZZZ_default.conf and 01_default-le-ssl…

[image] PeterC: This says the connection is not secure with “ERR_CERT_AUTHORITY_INVALID” on chrome This may be due to incomplete cert being served... Be sure you are using the fullchain.pem not just the cert.pem Or you've somehow used the wrong intermediate cert or attached a mismatched roo…

Update wildcard certificate to include base domain

Help

PeterC April 27, 2018, 3:11am 6

Thanks for reply,

Not sure why, this time it has worked ? Waited same amount of time and did an external trace to confirm text files where ok.

Thanks for your help

Making a certificate for a base domain plus its wildcard "in one" creates two TXT records, overwriting the first one, breaking the challenge ("During secondary validation: Incorrect TXT record")

Topic		Replies	Views
I added three wild card sub domain to same server IP and try to add the SSL. It worked for few hours but after that it again stopped and giving a connection error. So please help me Help	78	10666	May 12, 2018
Wildcard certificate does not work Server	29	7919	January 2, 2019
My main domain has SSL and my subdomain dont have SSL Help	100	2188	April 15, 2023
Wildcard certificate Help	19	424	February 4, 2025
Only one of my domains isn't renewing Help	144	3145	November 27, 2020

Update wildcard certificate to include base domain

Related topics