11 votes
Accepted

Could not renew letsencrypt certificate error 'The manual plugin is not working'

I had the same problem... You don't have to renew Certificate with "renew" option. You have to run the same command you ran for Certificate creation. It detects your Certificate needs renew, and it ...
  • 126
11 votes
Accepted

In what path I can find the .crt file for Let's Encrypt SSL?

After successfully running Lets Encrypt for example.com, the latest certificate files can be found in the following location: /etc/letsencrypt/live/example.com/privkey.pem /etc/letsencrypt/live/...
9 votes
Accepted

How do I renew LetsEncrypt certificates for a wildcard domain via HTTP challenge?

What you wanting is not possible. As per https://letsencrypt.org/docs/faq/#does-let-s-encrypt-issue-wildcard-certificates wildcard certs must be done via a DNS challenge. This is also restated - along ...
  • 6,570
6 votes

In what path I can find the .crt file for Let's Encrypt SSL?

Quick Answer ubuntu: /etc/letsencrypt/live/domain.com/cert.pem (Certificate) /etc/letsencrypt/live/domain.com/privkey.pem (Private Key) Details You are looking for file like cert.crt, actually ...
4 votes
Accepted

Adding LetsEncrypt to Tomcat/Apache setup with mod_jk

You can use the JkUnMount directive to prevent a directory from being handled by Tomcat. You can let the acme challenge directory be handled by Apache. The configuration for that might look like: ...
3 votes
Accepted

How to fix a rogue DNS-IP mapping in WHM or cPanel?

Namecheap is the registrar, and my nameservers are set to ns1.bluehost.com and ns2.bluehost.com. But the DNS zone on the authoritative nameserver that the parent/registrar points to (at Bluehost and ...
  • 42k
3 votes
Accepted

Most cost effective option for securing 1000+ websites (SSL)

Moving to a system using acme (or DNS if your systems have the hooks) and using Letsencrypt will likely the way to go. Certbot makes this easy. Total cost for certs is your time setting it up as a one ...
  • 6,570
3 votes

How can I migrate from a server with cPanel AutoSSL to one using Let's Encrypt without an interruption to my SSL coverage?

When I migrated some clients from a cpanel install to my "raw apache" based servers I simply copied the cpanel certs to my Apache server and installed them as part if the migration. I then ...
  • 6,570
3 votes

What is the difference of certbot and certbot-auto?

The source of the file (at https://github.com/certbot/certbot/blob/master/certbot-auto like Stephen wrote) clearly shows: Download and run the latest release version of the Certbot client. certbot-...
3 votes
Accepted

When does Squarespace renew TLS/x.509 certificates?

Update: My experience was weird and defied all expectations. I was checking the certificate that was being served right up until about 10 seconds before the expiration date, using a variety of ...
  • 509
3 votes
Accepted

Outlook 2016 says "The target principal name is incorrect" on my site's security certificate

I have managed to resolve the issue. Step One: When you first see the 'Internet Security Warning', select 'View Certificate'. Step Two: What you then need to do, is identify who the Certificate ...
  • 1,302
2 votes
Accepted

Webmin: SSL certificate not trusted (webmin configured on port 10000)

Your normal site running on port 443 is using the SSL you've installed but you haven't installed the same certification for your second site (Webmin running on port 10000). So your site is using a ...
  • 32.7k
2 votes

Moving a custom domain google blogger blog to WordPress

Just to get the order of things right. Can I just move everything to a .wordpress.org blog - test it - then just buy their hosting and change my DNS and my new site is ready? Or do I have to move ...
  • 5,562
2 votes
Accepted

Wildcard certificate with certbot and DNS challenge

how can this work when it takes so long for the changes to propagate? The propagation time (“up to 48 hours for the changes to be known world wide”) is a conservative estimate of the time that ...
2 votes
Accepted

Setting up Let's Encrypt with CloudFlare and dynamic IP

You can create a self-signed certificate on the server, and use that with CF's Full, but not Full (strict) SSL setting. I don't know if you'd have to create a new self-signed certificate each time the ...
  • 176
2 votes
Accepted

How to change challenge from tls-sni-01 to webroot for existing letsencrypt certificate?

Okay, after many headscratching I figured it out. In my renewal conf I stated to stop apache... thus my site was down and let's encrypt was not able to connect hence the error. Underneath the ...
  • 297
2 votes
Accepted

How to use rewrite rule to create exception rule for https redirection for directory ./well-known

The Acme Challenge protocol that the LetsEncrypt bot uses will happily follow redirects. There is no need to reverse proxy the requests to another machine, you can simply redirect those requests ...
2 votes
Accepted

How to approach Let's Encrypt for 180 domain aliases

For want of a better solution, and to get this working, I've ended up creating multiple sets of the codebase onto 'fake' domains and pointing a number of the aliases toward each one. If anyone has a ...
2 votes

Error parsing certificate request: x509: unsupported elliptic curve from Let's Encrypt

Per https://letsencrypt.org/docs/integration-guide/ : Let’s Encrypt accepts RSA keys from 2048 to 4096 bits in length, and P-256 and P-384 ECDSA keys. That’s true for both account keys and ...
2 votes
Accepted

Why letsencrypt certificate generation not done like domain verification done by GSuite?

If you have to do manual work with certbot, you aren't doing it right. Certbot is designed to be automated. Introducing anything manual into the process isn't a good idea. Having to perform a ...
2 votes

Missing SSL certificate cause unwanted redirect to another website

(I use Apache, and I assume NGINX is similar in this regard) I don't believe you CAN turn this off. Its not so much the browser pulling the first available SSL certificate as much as the server not ...
  • 6,570
1 vote
Accepted

Is there an official or safe way to use a LetsEncrypt certificate for the WHM UI?

A somewhat new plug-in named FleetSSL explicitly offers the ability to request and install LE certificates for cPanel services.
1 vote

SSL certificate hostname does not match, but online validation says all is OK

FTP is a seperate service to https, normally handled with different software. You likely need to update the certificate settings for the FTP server and restart it.
  • 6,570
1 vote
Accepted

Wildcard SSL issued by Plesk not working for subdomains hosted by a third party

A certificate has to be installed on every web server hosting content for the domain. The wildcard certificate you obtain and install on your server will only cover subdomains hosted on your server. ...
1 vote

Is letsencrypt compatible with DANE TLSA?

What is the relationship between letsencrypt and DANE TLSA? None in particular, and at least nothing different from any other CA and DANE. Why do you think there would be a specific relationship? ...
1 vote

How to Install Free Lets Encrypt SSL Certificate on GoDaddy Managed WordPress Hosting?

Install ssfhs or a FUSE (filesystem in user space) type of tool that allows you to mount remote file systems via SSH. You can use sshfs-win for Windows or possibly FUSE for macOS but I did this on ...
  • 121
1 vote

Rate limit encountered when setting up Free SSL Certificates from LetsEncrypt.org in Plesk

You have multiple questions in one. Let's Encrypt Rate Limiting For the rate limiting part it just means that you already asked Let's Encrypt too often for the same thing. When you say "When I tried ...
1 vote

Does Let's Encrypt have a link to show information about a domain like TrustSign has

Apparently they don't have something like that. But you could double check and maybe request the feature here https://community.letsencrypt.org/
  • 7,906
1 vote

https://example.com and https://www.example.com: Should I use one or two SSL certificates?

Is there any reason to prefer one option over the other? Assuming the use of Let's Encrypt and that each certificate lists just the www and non-www versions of a single domain, the only likely ...
1 vote

https://example.com and https://www.example.com: Should I use one or two SSL certificates?

You would just need to order the one cert for example.com. The www is part of it or included by default. If you wanted other sub-domains, ie server.example.com, then you would either need a wildcard ...

Only top scored, non community-wiki answers of a minimum length are eligible