A
A
Alexey Bespalov2019-09-22 11:21:03
Digital certificates
Alexey Bespalov, 2019-09-22 11:21:03

How to renew Wildcard SSL from Let's Encrypt?

I'm trying to renew certificates for all subdomains at once. It happened 3 months ago. Now Let's Encrypt writes that everything went well, but the browser does not see the certificate.
Did it by running the following command:

certbot certonly --debug --force-renew -a manual -d *.vsedekor.ru
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Renewing an existing certificate
Resetting dropped connection: acme-v02.api.letsencrypt.org

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/vsedekor.ru/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/vsedekor.ru/privkey.pem
   Your cert will expire on 2019-12-21. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

A week ago, I updated TXT records on the domain to confirm the domain, everything went well. Today the certificate is no longer valid. I ran the command again without confirmation, immediately says that everything went well (the test of the command and the answer resulted).
Tell me, maybe you need to do something differently to renew certificates for all subdomains at once?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
K
ky0, 2019-09-22
@FreeArcher

It looks like the web server didn't pick up the new certificate. Show config related to SSL files. By the way, did you reload the web server after the update?

V
Vitaly Karasik, 2019-09-22
@vitaly_il1

Does the webserver take the certificate from /etc/letsencrypt/live/vsedekor.ru/fullchain.pem?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question