Web browsers not recognizing renewed certificate

[steephill]

I renewed a certificate several weeks ago, but the web browsers I'm using are showing the certificate has expired.

Although it wasn't a straightforward process (see Renew certificate failure) I did renew without errors several weeks ago and when I run the certbot certificates command it is showing 2021-03-14 as the next renewal date.

Why aren't my browsers accessing the renewed certificate details?

Steve

My domain is: www.catspaw.club

I ran this command: certbot certificates

It produced this output:

Found the following certs:
Certificate Name: www.catspaw.club
Serial Number: ...
Domains: www.catspaw.club catspaw.club
Expiry Date: 2021-03-14 22:04:36+00:00 (VALID: 68 days)

My web server is (include version): nginx/1.18.0

The operating system my web server runs on is (include version): FreeBSD 12.1

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.8.0

[griffin]

Did you restart your webserver after the renewal?

I'm seeing this:

[steephill]

No. Just did now and it is working. Thanks.

Do know why the restart doesn't happen automatically or even why there is no restart reminder because I did renew with the nginx option:
$ certbot renew --cert-name www.catspaw.club -a nginx

Steve

[griffin]

Your redirects need help.

This:

http://catspaw.club
301 Moved Permanently
https://www.catspaw.club
200 OK

Should be this:

http://catspaw.club
301 Moved Permanently
https://catspaw.club
301 Moved Permanently
https://www.catspaw.club
200 OK

This:

https://catspaw.club
200 OK

Should be this:

https://catspaw.club
301 Moved Permanently
https://www.catspaw.club
200 OK

[steephill]

Ok. I'll work on that. Thanks.

[griffin]

Here's a command to fix things (run only once!):

certbot certonly --cert-name www.catspaw.club --nginx -d "www.catspaw.club,catspaw.club" --deploy-hook "nginx -s reload" --force-renewal

Then your renewal should just be:

certbot renew