# What to do if tls-sni is deprecated?
**URL:** https://community.letsencrypt.org/t/what-to-do-if-tls-sni-is-deprecated/85086
**Category:** Help
**Created:** [February 3, 2019, 9:16am UTC](https://community.letsencrypt.org/t/what-to-do-if-tls-sni-is-deprecated/85086 "2019-02-03T09:16:48Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@lohceofficial](https://community.letsencrypt.org/u/lohceofficial)
#### Post date: [February 3, 2019, 9:16am UTC](https://community.letsencrypt.org/t/what-to-do-if-tls-sni-is-deprecated/85086/1 "2019-02-03T09:16:48Z")
Good morning all,
First of all thank you all for the great job that you are doing in the area of SSL awareness.
So I also received the email **Action is required to prevent your Let’s Encrypt certificate renewals from breaking.** alerting about _TLS-SNI-01 validation is reaching end-of-life and will stop working on February 13th, 2019._
After reading this thread it looks like the _ **renewal fixing process** _ is not yet stable (at the time of this writing) and that (may be i am not getting it well) this alert do not impact certificated which will not be renew during the February month
So my question is this : Do I have to take any actions in the short term about my certificate ([www.lohce.com](http://www.lohce.com) expiring on the 24 April 2019), i will like to avoid shutting down my Apache service while following the [How to stop using TLS-SNI-01 with Certbot](https://community.letsencrypt.org/t/how-to-stop-using-tls-sni-01-with-certbot/83210)
Any answer will help me better understand what to do
Kindly, best regards
---
### Author:  [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)
#### Post date: [February 3, 2019, 10:05am UTC](https://community.letsencrypt.org/t/what-to-do-if-tls-sni-is-deprecated/85086/2 "2019-02-03T10:05:57Z")
Hi @lohceofficial
I've splittet your post, so you have an own topic, makes things easier.
> [@lohceofficial](#):
>
> After reading this thread it looks like the _ **renewal fixing process** _ is not yet stable
There are a lot of different configurations, so there is no general renewal fixing process.
> [@lohceofficial](#):
>
> Do I have to take any actions in the short term about my certificate ([www.lohce.com](http://www.lohce.com) expiring on the 24 April 2019)
Check your certbot version (`certbot --version`), should be minimal 0.28.
You can use --dry-run to create a test certificate.
Your domain looks ok ( [https://check-your-website.server-daten.de/?q=lohce.com](https://check-your-website.server-daten.de/?q=lohce.com) ). non-www isn't defined, port 80 is open and redirects to https, Letsencrypt follows these redirects.
| Domainname | Http-Status | redirect | Sec. | G |
| --- | --- | --- | --- | --- |
| • [http://www.lohce.com/](http://www.lohce.com/) | | | | |
| 35.162.63.137 | 302 | [https://www.lohce.com/](https://www.lohce.com/) | 0.376 | A |
| | | | | |
| • [https://www.lohce.com/](https://www.lohce.com/) | | | | |
| 35.162.63.137 | 200 | | 3.473 | B |
| | | | | |
| • [http://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 35.162.63.137 | 302 | [https://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](https://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | 0.374 | A |
| | | | | |
| • [https://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](https://www.lohce.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | 404 | | 6.554 | A |
| Not Found | | | | |
| | | | | |
Checking such a test file in /.well-known/acme-challenge there is the (good) http status 404 - not found.
---
### Author:  [@system](https://community.letsencrypt.org/u/system)
#### Post date: [March 5, 2019, 10:05am UTC](https://community.letsencrypt.org/t/what-to-do-if-tls-sni-is-deprecated/85086/3 "2019-03-05T10:05:58Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.