Symptoms
- Let's Encrypt certificate expiration notification mails for domain "example.com" is delivered from Let's Encrypt (expiry@letsencrypt.org):
From: Let's Encrypt Expiry Bot expiry@letsencrypt.org
To: admin@example.com
Subject: Let's Encrypt certificate expiration notice for domain "example.com" (and 1 more)
Hello,
Your certificate (or certificates) for the names listed below will expire in 7 days (on 17 Aug 17 00:00 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.
example.com
www.example.com
example.staging.com
[...]Regards,
The Let's Encrypt Team - In a browser example.com certificate shows certificate expiration date far from the one in the email notification.
- The current certificate has additional domains and/or aliases included.
example.com
www.example.com
webmail.example.com
mail.example.com
plesk.example.com
example.org (ALIAS)
Cause
The certificate for domain example.com was not renewed but re-installed as new domains and/or aliases are included/excluded.
Since Let´s Encrypt checks certificates by their included CA´s this will cause the new certificate to not overwrite the old notification alert.
Resolution
- Log in to Plesk
- Navigate to Domains > example.com > SSL/TLS certificates and check if there are any Let's Encrypt certificates that are not in use anymore.
If such certificates are not found, these notifications can be safely ignored.
To unsubscribe from notifications click on the 'unsubscribe' link which is contained in every email. If there is no such link, contact Let's Encrypt Community Support