Well, it has been three months since I last had to wrestle with Let’s Encrypt certs.
As expected, they did not auto-renew.
I issued the commands found in the previous post on this topic and noticed something.
[name@server ~]$ .acme.sh/acme.sh --issue --server letsencrypt -d www.nycnyne.net -d nycnyne.net -w /home/name/public_html/nycnyne.net/
[Wed Aug 31 19:12:42 EDT 2022] Domains not changed.
[Wed Aug 31 19:12:42 EDT 2022] Skip, Next renewal time is: 2022-09-29T04:31:03Z
[Wed Aug 31 19:12:42 EDT 2022] Add '--force' to force to renew.
[name@server ~]$ .acme.sh/acme.sh --issue --server letsencrypt -d www.matthannan.net -d matthannan.net -w /home/name/public_html/
[Wed Aug 31 19:13:05 EDT 2022] Domains not changed.
[Wed Aug 31 19:13:05 EDT 2022] Skip, Next renewal time is: 2022-09-29T04:30:51Z
[Wed Aug 31 19:13:05 EDT 2022] Add '--force' to force to renew.
What’s that –force business? And what do you mean “Skip”?
So I issued the commands again, but this time with the –force switch. This did the business.
[name@server ~]$ .acme.sh/acme.sh --issue --force --server letsencrypt -d www.nycnyne.net -d nycnyne.net -w /home/name/public_html/nycnyne.net/
[Wed Aug 31 19:30:23 EDT 2022] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Wed Aug 31 19:30:23 EDT 2022] Multi domain='DNS:www.nycnyne.net,DNS:nycnyne.net'
[Wed Aug 31 19:30:23 EDT 2022] Getting domain auth token for each domain
[Wed Aug 31 19:30:25 EDT 2022] Getting webroot for domain='www.nycnyne.net'
[Wed Aug 31 19:30:25 EDT 2022] Getting webroot for domain='nycnyne.net'
[Wed Aug 31 19:30:25 EDT 2022] Verifying: www.nycnyne.net
[Wed Aug 31 19:30:25 EDT 2022] Pending, The CA is processing your order, please just wait. (1/30)
[Wed Aug 31 19:30:29 EDT 2022] Success
[Wed Aug 31 19:30:29 EDT 2022] Verifying: nycnyne.net
[Wed Aug 31 19:30:29 EDT 2022] Pending, The CA is processing your order, please just wait. (1/30)
[Wed Aug 31 19:30:32 EDT 2022] Success
[Wed Aug 31 19:30:32 EDT 2022] Verify finished, start to sign.
[Wed Aug 31 19:30:32 EDT 2022] Lets finalize the order.
[Wed Aug 31 19:30:32 EDT 2022] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/numbers'
[Wed Aug 31 19:30:34 EDT 2022] Downloading cert.
[Wed Aug 31 19:30:34 EDT 2022] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/more numbers'
[Wed Aug 31 19:30:34 EDT 2022] Cert success.
I then used cat to show the cert and key and copied those into the TLS/SSL page in cPanel.
A few minutes later, and a hard refresh, I had a lock icon showing again. I am not convinced that the cron job is doing what is expected of it.