{"id":872,"date":"2016-02-21T05:47:24","date_gmt":"2016-02-21T13:47:24","guid":{"rendered":"https:\/\/www.cloudinsidr.com\/content\/?p=872"},"modified":"2019-07-19T03:27:21","modified_gmt":"2019-07-19T10:27:21","slug":"how-to-extend-the-validity-of-a-letsencrypt-certificate","status":"publish","type":"post","link":"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/","title":{"rendered":"How to renew a Letsencrypt certificate"},"content":{"rendered":"

In a\u00a0post titled How to Set Up Letsencrypt, the SSL-Certificate Engine for the Cloud Era of Hyperscale, on AWS EC2<\/a>, we have introduced you to this free, open, and fully automated Certificate Authority backed\u00a0by the likes of Facebook (a gold sponsor), and discussed a manual\u00a0setup for adventurers in\u00a0How to Use Letsencrypt across Servers in the Manual Configuration Mode with a CSR<\/a>.<\/p>\n

Now is the\u00a0time to discuss how to extend the validity of a Letsencrypt certificate for up to another 90 days of blissful happiness.<\/p>\n

<\/p>\n

So long as you keep the host names unchanged when renewing the certificate, your new certificate will\u00a0be saved in the same location with a\u00a0new version number, so that the previous certificate can be retained while\u00a0a symlink makes sure that your server software will find it once it reloads its configuration files.<\/p>\n

How to renew a Letsencrypt certificate without changing domains<\/h2>\n

Follow these steps to renew your Letsencrypt certificate.<\/p>\n

Step 1. Stop your Web server<\/h6>\n

You must stop your web server to allow Letsencrypt to bind to port 80.<\/p>\n

systemctl stop nginx<\/pre>\n
Step 2.\u00a0Launch the Letsencrypt wizard<\/h6>\n
There are several ways to go about this. Here is the simplest of them all:<\/p>\n
certbot renew\r\n\r\nor you can also enforce the renewal if you like:\r\n\r\ncertbot renew --force-renewal\r\n\r\n<\/pre>\n
That’s it.<\/p>\n
\"Renew<\/a>
Renewing Letsencrypt certificate<\/figcaption><\/figure>\n
Step 3. Verify the output and adjust configuration files in your server software if necessary<\/h6>\n
Pay close attention to the output this command generates. If the path differs from that of your old certificate, you web and mail servers will need some help in finding\u00a0the new certificate.<\/p>\n
Step 4. Start your web server and\u00a0reload the config file of other applications<\/h6>\n
Start your web server, for example like this:<\/p>\n
systemctl start nginx<\/pre>\n
Make sure that your server’s configuration file point to the correct location of your Letsencrypt\u00a0certificate.<\/p>\n
How to renew a Letsencrypt certificate with a new set of domains<\/h2>\n
If you need to change the set of domains when renewing your Letsencrypt certificate, follow all steps except Step 2 above. In Step 2, use the full command as follows:<\/p>\n
letsencrypt certonly --server https:\/\/acme-v02.api.letsencrypt.org\/directory -d host1.domain1.tld -d domain1.tld -d ...<\/pre>\n
Letsencrypt may remind you of your weekly allotment. Select option 2 to proceed.<\/p>\n
\"Renewing<\/a>
Renewing a Letsencrypt certificate<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"
In a\u00a0post titled How to Set Up Letsencrypt, the SSL-Certificate Engine for the Cloud Era of Hyperscale, on AWS EC2, we have introduced you to this free, open, and fully automated Certificate Authority backed\u00a0by the likes of Facebook (a gold sponsor), and discussed a manual\u00a0setup for adventurers in\u00a0How to Use Letsencrypt across Servers in the […]<\/p>\n","protected":false},"author":101011,"featured_media":1602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[16,17,33,111,2,6],"tags":[118,114,38],"yoast_head":"\nHow to renew a Letsencrypt certificate - CloudInsidr<\/title>\n<meta name=\"robots\" content=\"index, follow\" \/>\n<meta name=\"googlebot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta name=\"bingbot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to renew a Letsencrypt certificate - CloudInsidr\" \/>\n<meta property=\"og:description\" content=\"In a\u00a0post titled How to Set Up Letsencrypt, the SSL-Certificate Engine for the Cloud Era of Hyperscale, on AWS EC2, we have introduced you to this free, open, and fully automated Certificate Authority backed\u00a0by the likes of Facebook (a gold sponsor), and discussed a manual\u00a0setup for adventurers in\u00a0How to Use Letsencrypt across Servers in the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudInsidr\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-21T13:47:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-07-19T10:27:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2016\/02\/certbot-renew-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"760\" \/>\n\t<meta property=\"og:image:height\" content=\"738\" \/>\n<meta name=\"twitter:card\" content=\"summary\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/\",\"name\":\"CloudInsidr\",\"description\":\"Cyber security, infotech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.cloudinsidr.com\/content\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2016\/02\/certbot-renew-1.jpg\",\"width\":760,\"height\":738,\"caption\":\"Renewing a Letsencrypt certificate\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/#webpage\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/\",\"name\":\"How to renew a Letsencrypt certificate - CloudInsidr\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/#primaryimage\"},\"datePublished\":\"2016-02-21T13:47:24+00:00\",\"dateModified\":\"2019-07-19T10:27:21+00:00\",\"author\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/21ce63bea726ea64da1beed97e63ba84\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudinsidr.com\/content\/how-to-extend-the-validity-of-a-letsencrypt-certificate\/\"]}]},{\"@type\":[\"Person\"],\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/21ce63bea726ea64da1beed97e63ba84\",\"name\":\"Anna E Kobylinska\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7a3e9bd152f9d5cd41bf2b92df649857?s=96&d=mm&r=g\",\"caption\":\"Anna E Kobylinska\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/872"}],"collection":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/users\/101011"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/comments?post=872"}],"version-history":[{"count":10,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/872\/revisions"}],"predecessor-version":[{"id":2580,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/872\/revisions\/2580"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media\/1602"}],"wp:attachment":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media?parent=872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/categories?post=872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/tags?post=872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}