Hi @interseb
that's correct. Your last active certificates ( https://check-your-website.server-daten.de/?q=bleys.ambercity.net#ct-logs ):
| Issuer | not before | not after | Domain names | LE-Duplicate | next LE |
|---|---|---|---|---|---|
| Let's Encrypt Authority X3 | 2019-06-23 | 2019-09-21 | bleys.ambercity.net, ical.ambercity.net, ical2.ambercity.net, noah.ambercity.net, sasha.ambercity.net, webmail.ambercity.net - 6 entries | ||
| Let's Encrypt Authority X3 | 2019-04-24 | 2019-07-23 | bleys.ambercity.net, ical.ambercity.net, ical2.ambercity.net, noah.ambercity.net, sasha.ambercity.net, webmail.ambercity.net - 6 entries | ||
| Let's Encrypt Authority X3 | 2019-04-24 | 2019-07-23 | bleys.ambercity.net, webmail.ambercity.net - 2 entries |
The certificate with two domain names isn't renewed.
That's correct too. The certificate with 6 domain names is renewed. And you use that certificate:
CN=bleys.ambercity.net
23.06.2019
21.09.2019
expires in 68 days bleys.ambercity.net,
ical.ambercity.net, ical2.ambercity.net,
noah.ambercity.net, sasha.ambercity.net,
webmail.ambercity.net - 6 entries
Nothing is wrong. Letsencrypt doesn't know which certificate you use.
Please read
When You Get an Expiration Email
If your certificate is already renewed, we won’t send an expiry notice. We consider a certificate to be renewed if there is a newer certificate with the exact same set of names, regardless of which account created it. If you’ve issued a new certificate that adds or removes a name relative to your old certificate, you will get expiration email about your old certificate. If you check the certificate currently running on your website, and it shows the correct date, no further action is needed.
You have changed the set of domain names. The old set produces the mail.