Knowledge Base

Let’s Encrypt notifications are received for an already renewed certificate

Symptoms

Let's Encrypt notifications are received for a domain that is actually hosted on another server
The following notifications keep coming when the certificate for example.com was already renewed:

Could not secure domains of Administrator (login admin) with Let's Encrypt certificates. Please log in to Plesk and secure the domains listed below manually.
Securing of the following domains has failed:
<none>
The following domains have been secured without some of their Subject Alternative Names:
<none>
Could not renew Let's Encrypt certificates for Administrator (login admin). Please log in to Plesk and renew the certificates listed below manually.
Renewal of the following Let's Encrypt certificates has failed:
'Lets Encrypt certificate' [days to expire: 12] [-] example.com
Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/5422301042.
Details:
Type: urn:ietf:params:acme:error:unauthorized
Status: 403
Detail: Invalid response from https://example.org/.well-known/acme-challenge/QnlaiM9v7msdH9BnqWzyzWx234wJTQjX-7fRot-TqEw [45.91.101.123]: "<html>rn<head><title>404 Not Found</title></head>rn<body>rn<center><h1>404 Not Found</h1></center>rn<hr><center>nginx</center>rn"
The following Let's Encrypt certificates have been renewed without some of their Subject Alternative Names:
<none>
Legend:
[+] This domain is secure. The domain's SSL/TLS certificate from Let's Encrypt has been issued/renewed.
[-] This domain is not secure. Either the domain's SSL/TLS certificate from Let's Encrypt could not be issued/renewed or the domain name was excluded from the certificate. Renew the certificate manually or request a new one to secure this domain.
The domain example.org has two certificates:
- in the main subscription in Subscription > example.com > SSL/TLS Certificates > Advanced Settings
- in Subscription > example.com > example.org > SSL/TLS Certificates.

Cause

The notification is related to the certificate in the main subscription which is not being used.

Resolution

Log into Plesk
Go to Subscription > example.com > SSL/TLS Certificates > Advanced Settings
Tick the unnecessary certificate for example.org

Note: The certificates which are in use have a number greater than 0 in the Used column.
Click the Remove button