Discourse failure to renew certificate

[RBoy]

Continuing the conversation from here:

Letsencrypt certificate failure to renew

I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. A rebuild fixes it and I have heretofore failed to look for clues in the logs. Next time I’ll do a bit more to diagnose the problem before fixing it for the site.

I got a reminder from Redsift that my certificates are going to expire in a week. Usually discourse will renew the certificates well ahead of time. This time not so, before I start doing a rebuild (which is supposed to solve the issue), @Falco is there anything you want me to check and post back here to help get to the root of why the certificates did not renew?

The root certificate is ISRGX1 and here is the expiring certificate information:

Common Name (CN)	E6
Organization (O)	Let’s Encrypt
Organizational Unit (OU)
Issued On	Wednesday, July 16, 2025 at 7:36:45 PM
Expires On	Tuesday, October 14, 2025 at 7:36:44 PM

The current build is 3.6.0.beta1-dev (7ee52c8f85)

[pfaffman (Jay Pfaffman)]

There was a period of time that the endpoint that let’s encrypt needed was redirected. That’s fixed if you rebuild.