Skip to main content

SSL renew - The new certificate lacks 7 of the website’s domains:

AndyX
  • Edited

When my Let's Encrypt renewed, I got the following email (see image below). The image I show is a snippet, the email is longer showing all 7 domain errors.

My web host indicates there's nothing wrong and the SSL has been updated properly. Why does cPanel send this email if nothing is wrong?

Comments

8 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  I would say "nothing wrong" is relative in this case.  It seems like the main SSL for domain.com was properly renewed, but various subdomains were not.  It's only an issue if you actually use those subdomains for anything.  If you don't, there's nothing to worry about and it's fine to let those fail.  If you intend to use those subdomains, you'd want to check the DNS for them to ensure they are working properly, as any DNS issues will lead to an AutoSSL system failure.

    0
  • AndyX

    Hi Rex,

    When I look at the following page in cPanel:

    Security -> SSL/TLS -> Manage SSL Sites.

    I see that all 8 fully qualified domain names are shown.

    Why would cPanel have sent the email if nothing is wrong?

    0
  • cPRex Jurassic Moderator

    The most likely explanation is that there was a temporary issue and then it ran again and was able to issue them all normally.

    0
  • AndyX

    That makes sense. Thank you, Rex.

    1
  • Nick

    Hi cPrex.

    Unfortunately this is a known issue/bug with cPanel as explained here - https://features.cpanel.net/topic/22637-fix-autossl-error-notifications-if-wildcards-cover-them

    Are you able to get someone to investigate it? It's a major pain for us and our clients and I'm assuming many thousands of other companies around the world...

    0
  • Nick
    • Edited

    ps. The email is totally wrong. The wildcard certificate does not lack anything, and there never was any problem (and it didn't fail DCV) when renewing the wildcard certificate. It renewed 100% fine.

    0
  • cPRex Jurassic Moderator

    Nick - I see you posted in several threads and the feature request page.  I'm looking into this more today and I'll post an update once I have more details.

    0
  • cPRex Jurassic Moderator

    Additional details will be posted here so I can keep everything in one thread:

    https://support.cpanel.net/hc/en-us/community/posts/21503462179223

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post