Cert not yet due for renewal … but it's expiredUsing my own private key for Let's Encrypt's certbot due to HPKPCron job for let's encrypt renewalLetsencrypt - do I need to keep “.well-known” accessible for certificate renewal?updating ssl cert for gitlab using certbot & lets encryptWhat ports should I keep open to allow for ACME-based certificate renewal?ssl-cert-check is not getting the correct expiry dates for Lets Encrypt certificatesDockerized Nginx + Certbot + tls-sni challenge not working on renewalServer has a valid SSL Cert, Clients only see expired cert, why?nginx load balancer w/ https and lets encrypt cert renewalLetsencrypt expired certificate renewal failure (NGinx)
Why Is Abelian Gauge Theory So Special?
Three column layout
What's the safest way to inform a new user of their password on my web site?
Golf the smallest circle!
Can a police officer film me on their personal device in my own home?
How to start learning the piano again
Why transcripts instead of degree certificates?
Why is a blank required between "[[" and "-e xxx" in ksh?
Difference between 'demás' and 'otros'?
Does the UK have a written constitution?
Why is the Turkish president's surname spelt in Russian as Эрдоган, with г?
How fast can a ship with rotating habitats be accelerated?
How can I check type T is among parameter pack Ts... in C++?
Coefficients of the characteristic polynomial
How was film developed in the late 1920s?
Which centaur is more 'official'?
Math PhD in US vs Master + PhD in Europe
How to determine what is the correct level of detail when modelling?
Super Polymerization how does it work
How can I convince my reader that I will not use a certain trope?
How exactly is a normal force exerted, at the molecular level?
What are good ways to spray paint a QR code on a footpath?
How do I spend money in Sweden and Denmark?
What's the point of DHS warning passengers about Manila airport?
Cert not yet due for renewal … but it's expired
Using my own private key for Let's Encrypt's certbot due to HPKPCron job for let's encrypt renewalLetsencrypt - do I need to keep “.well-known” accessible for certificate renewal?updating ssl cert for gitlab using certbot & lets encryptWhat ports should I keep open to allow for ACME-based certificate renewal?ssl-cert-check is not getting the correct expiry dates for Lets Encrypt certificatesDockerized Nginx + Certbot + tls-sni challenge not working on renewalServer has a valid SSL Cert, Clients only see expired cert, why?nginx load balancer w/ https and lets encrypt cert renewalLetsencrypt expired certificate renewal failure (NGinx)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I am trying to renew a wildcard let's encrypt certificate.
/usr/local/bin/certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/sub.myDomain.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certs are not due for renewal yet:
/etc/letsencrypt/live/sub.myDomain.com/fullchain.pem expires on 2019-08-14 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
It responds that Cert not yet due for renewal.
But actually it has expired:
echo | openssl s_client -connect sub.myDomain.com:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Mar 11 15:32:13 2019 GMT
notAfter=Jun 9 15:32:13 2019 GMT
How do I renew it?
Here is how I created that certificate:
certbot certonly
--dns-google
--email myEmail@gmail.com
--agree-tos
-d *.sub.myDomain.com
lets-encrypt
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
add a comment |
I am trying to renew a wildcard let's encrypt certificate.
/usr/local/bin/certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/sub.myDomain.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certs are not due for renewal yet:
/etc/letsencrypt/live/sub.myDomain.com/fullchain.pem expires on 2019-08-14 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
It responds that Cert not yet due for renewal.
But actually it has expired:
echo | openssl s_client -connect sub.myDomain.com:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Mar 11 15:32:13 2019 GMT
notAfter=Jun 9 15:32:13 2019 GMT
How do I renew it?
Here is how I created that certificate:
certbot certonly
--dns-google
--email myEmail@gmail.com
--agree-tos
-d *.sub.myDomain.com
lets-encrypt
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
4
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
@Sven you are right, reloading nginx helped me, so the correct way to renew is:/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'
– Maxim Yefremov
Jun 10 at 12:17
add a comment |
I am trying to renew a wildcard let's encrypt certificate.
/usr/local/bin/certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/sub.myDomain.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certs are not due for renewal yet:
/etc/letsencrypt/live/sub.myDomain.com/fullchain.pem expires on 2019-08-14 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
It responds that Cert not yet due for renewal.
But actually it has expired:
echo | openssl s_client -connect sub.myDomain.com:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Mar 11 15:32:13 2019 GMT
notAfter=Jun 9 15:32:13 2019 GMT
How do I renew it?
Here is how I created that certificate:
certbot certonly
--dns-google
--email myEmail@gmail.com
--agree-tos
-d *.sub.myDomain.com
lets-encrypt
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
I am trying to renew a wildcard let's encrypt certificate.
/usr/local/bin/certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/sub.myDomain.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certs are not due for renewal yet:
/etc/letsencrypt/live/sub.myDomain.com/fullchain.pem expires on 2019-08-14 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
It responds that Cert not yet due for renewal.
But actually it has expired:
echo | openssl s_client -connect sub.myDomain.com:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Mar 11 15:32:13 2019 GMT
notAfter=Jun 9 15:32:13 2019 GMT
How do I renew it?
Here is how I created that certificate:
certbot certonly
--dns-google
--email myEmail@gmail.com
--agree-tos
-d *.sub.myDomain.com
lets-encrypt
lets-encrypt
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
edited Jun 10 at 12:10
Daniel K
3341 silver badge11 bronze badges
3341 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
asked Jun 10 at 6:37
Maxim YefremovMaxim Yefremov
1191 gold badge1 silver badge11 bronze badges
1191 gold badge1 silver badge11 bronze badges
4
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
@Sven you are right, reloading nginx helped me, so the correct way to renew is:/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'
– Maxim Yefremov
Jun 10 at 12:17
add a comment |
4
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
@Sven you are right, reloading nginx helped me, so the correct way to renew is:/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'
– Maxim Yefremov
Jun 10 at 12:17
4
4
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
@Sven you are right, reloading nginx helped me, so the correct way to renew is:
/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'– Maxim Yefremov
Jun 10 at 12:17
@Sven you are right, reloading nginx helped me, so the correct way to renew is:
/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'– Maxim Yefremov
Jun 10 at 12:17
add a comment |
1 Answer
1
active
oldest
votes
Your system renewed its certificate last month, but the web server never restarted or reloaded to actually start using it.
To fix the problem, reload/restart the web server.
You can also supply the appropriate command to reload your web server as a --deploy-hook to your certbot renew command.
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f970776%2fcert-not-yet-due-for-renewal-but-its-expired%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Your system renewed its certificate last month, but the web server never restarted or reloaded to actually start using it.
To fix the problem, reload/restart the web server.
You can also supply the appropriate command to reload your web server as a --deploy-hook to your certbot renew command.
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
add a comment |
Your system renewed its certificate last month, but the web server never restarted or reloaded to actually start using it.
To fix the problem, reload/restart the web server.
You can also supply the appropriate command to reload your web server as a --deploy-hook to your certbot renew command.
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
add a comment |
Your system renewed its certificate last month, but the web server never restarted or reloaded to actually start using it.
To fix the problem, reload/restart the web server.
You can also supply the appropriate command to reload your web server as a --deploy-hook to your certbot renew command.
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
Your system renewed its certificate last month, but the web server never restarted or reloaded to actually start using it.
To fix the problem, reload/restart the web server.
You can also supply the appropriate command to reload your web server as a --deploy-hook to your certbot renew command.
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
answered Jun 10 at 14:40
Michael Hampton♦Michael Hampton
180k28 gold badges337 silver badges667 bronze badges
180k28 gold badges337 silver badges667 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f970776%2fcert-not-yet-due-for-renewal-but-its-expired%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
4
Was your web server restarted after renewing the cert?
– Sven♦
Jun 10 at 6:59
no it wasn’t, it’s docker container, I’ll try to restart it
– Maxim Yefremov
Jun 10 at 7:03
@Sven you are right, reloading nginx helped me, so the correct way to renew is:
/usr/local/bin/certbot renew --post-hook '/usr/sbin/nginx -s reload'– Maxim Yefremov
Jun 10 at 12:17