Hostname SSL not renewing "If this certificate remains installed on $DATE, the system will attempt to replace it."

Symptoms

The hostname certificate is not being renewed, and when you run the checkallsslcerts script, you receive a message similar to the following.

The “$service” service’s certificate will expire soon ($date). If this certificate remains installed on $month $day, $year, the system will attempt to replace it.

Description

This issue commonly occurs when the installed certificate was manually installed and not ordered and installed through the checkallsslcerts script. The system will not attempt to replace manually installed certificates until three days before the certificate expires.

Workaround

The simplest way to address this issue is to wait until the current certificate is within three days of expiring and allow the system to automatically replace it. Alternatively, you can reset the certificate to a self-signed certificate, which will cause the system to order a new certificate when the daily cPanel update runs, or you can manually install a new certificate.

Additional resources

How do I reset my hostname service SSL to a self-signed?

How to install the hostname SSL certificate onto the cPanel services