We extend time,but Still receive mail of time will expire


#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: www.kezhiyin.com , I extend time at three month,but still reciive mail of time will expire


#2

Hi @oyoui,

You have 4 valid (non expired certificates) covering different sub set of domains:

CRT ID     CERT TYPE  DOMAIN (CN)       VALID FROM             VALID TO               EXPIRES IN  SANs
581516686  Pre cert   hz.kezhiyin.com   2018-Jul-03 10:56 UTC  2018-Oct-01 10:56 UTC  77 days     hz.kezhiyin.com
                                                                                                  hzcdn.kezhiyin.com
577525302  Pre cert   www.kezhiyin.com  2018-Jul-02 06:14 UTC  2018-Sep-30 06:14 UTC  75 days     api.kezhiyin.com
                                                                                                  cdn.kezhiyin.com
                                                                                                  hz.kezhiyin.com
                                                                                                  hzcdn.kezhiyin.com
                                                                                                  static.kezhiyin.com
                                                                                                  test.kezhiyin.com
                                                                                                  testcdn.kezhiyin.com
                                                                                                  www.kezhiyin.com
571128991  Pre cert   www.kezhiyin.com  2018-Jun-30 02:39 UTC  2018-Sep-28 02:39 UTC  73 days     api.kezhiyin.com
                                                                                                  cdn.kezhiyin.com
                                                                                                  hz.kezhiyin.com
                                                                                                  static.kezhiyin.com
                                                                                                  test.kezhiyin.com
                                                                                                  www.kezhiyin.com
424292995  Pre cert   www.kezhiyin.com  2018-Apr-27 06:20 UTC  2018-Jul-26 06:20 UTC  9 days      api.kezhiyin.com
                                                                                                  cdn.kezhiyin.com
                                                                                                  static.kezhiyin.com
                                                                                                  www.kezhiyin.com

I suppose you are receiving mails because of the cert expiring in 9 days and this cert is covering 4 domains (api.kezhiyin.com, cdn.kezhiyin.com, static.kezhiyin.com, www.kezhiyin.com). As you are not renewing the cert with the same sub set of domains, LE doesn’t know that you have renewed it adding more domains.

As you have renewed it adding more domains and you are using the new cert on your site, you should ignore the received mails.

Cheers,
sahsanu


#3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.