# Update no longer valid SSL certificate
**URL:** https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065
**Category:** Support
**Created:** [July 17, 2020, 6:26pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065 "2020-07-17T18:26:33Z")
**Posts on this page:** 17
**Page:** 1
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 17, 2020, 6:26pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/1 "2020-07-17T18:26:33Z")
Hello All,
I have Discourse webpage where I have SSL cert issued for it.
The email address is in the `app.yaml` file.
However the cert is no longer valid and I need to update it.
`./launcher rebuild app` does not help.
How can I update the certificate in this situation?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [July 17, 2020, 8:03pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/2 "2020-07-17T20:03:18Z")
Do you have cloudflare in front of your server?
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 17, 2020, 8:15pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/3 "2020-07-17T20:15:21Z")
No cloudflare in front.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [July 17, 2020, 8:24pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/4 "2020-07-17T20:24:02Z")
Is this a letsencrypt certificate or some other kind? If it’s some other cert then you need to put the new cert wherever the old one was.
What is your site URL?
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 17, 2020, 8:38pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/5 "2020-07-17T20:38:08Z")
It is LE cert. Ive just added email for LE when setting up the whole site. Cant share the site URL but I can provide all needed info. Discourse is up to date.
---
### Author:  [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [July 17, 2020, 9:58pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/6 "2020-07-17T21:58:20Z")
Let’s Encrypt should automatically renew providing there is nothing proxying the connection.
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 17, 2020, 10:15pm UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/7 "2020-07-17T22:15:51Z")
Chrome has locked padlock so says the cert is ok, but the period for which the cert is issued is in the past saying, when opening cert, that it is out of date.
There is no proxy.
Arent there any manual way of update?
EDIT: Chrome+standard Windows info about cert says the cert if out of date, but Firefox says it is ok and the dates are valid.
---
### Author:  [@JimPas](https://meta.discourse.org/u/JimPas)
#### Post date: [July 18, 2020, 1:17am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/8 "2020-07-18T01:17:24Z")
I don’t know which client you use, but if you use `certbot certificates` it will show all the certificates - expired and valid. If you’re still using the expired cert and do have a valid one, install the valid one.
But IMHO, this sounds like a problem to be solved at [community.letsencrypt.org](http://community.letsencrypt.org).
One thing to take note of: LetsEncrypt was designed to automate your renewals. If you run if with the `certbot manual` command, then you have to manually renew every 60-90 days. If you use `certonly`, once you’ve created the cert, you’ll have to install it yourself.
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 18, 2020, 8:02am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/9 "2020-07-18T08:02:11Z")
I wasnt choosing cert app. This is the default discourse installation so I dont even know if this is certbot or acme.sh.
---
### Author:  [@neounix](https://meta.discourse.org/u/neounix)
#### Post date: [July 18, 2020, 8:13am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/10 "2020-07-18T08:13:53Z")
Dear @pbies
According to the code:
>
```plaintext
exec:
cmd:
- cd /root && git clone --branch 2.8.2 --depth 1 https://github.com/Neilpang/acme.sh.git && cd /root/acme.sh
- touch /var/spool/cron/crontabs/root
- install -d -m 0755 -g root -o root $LETSENCRYPT_DIR
- cd /root/acme.sh && LE_WORKING_DIR="${LETSENCRYPT_DIR}" ./acme.sh --install --log "${LETSENCRYPT_DIR}/acme.sh.log"
- cd /root/acme.sh && LE_WORKING_DIR="${LETSENCRYPT_DIR}" ./acme.sh --upgrade --auto-upgrade
```
Hope this helps… 🙂
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 18, 2020, 8:27am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/11 "2020-07-18T08:27:45Z")
This helps to understand that acme script is used to install/update. But still I dont find manual instruction to update cert. There should be some webpage for that. Later I will try to enter container and issue new cert based on this code.
---
### Author:  [@neounix](https://meta.discourse.org/u/neounix)
#### Post date: [July 18, 2020, 8:30am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/12 "2020-07-18T08:30:45Z")
> [@pbies](#):
>
> I will try to enter container and issue new cert based on this code.
Hi @pbies
You might also enjoy looking at cron to see what command is running in the container crontab file:
For example, in your main app container:
```plaintext
crontab -l
```
Cheers!
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 26, 2020, 1:05am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/13 "2020-07-26T01:05:09Z")
@neounix
Before I update the cert, I would like to know why for Chrome (exactly Windows info about cert) the cert is no longer valid (out of date), but for Firefox the cert is valid and have expiry time in the future.
Maybe there is no need to manually update the cert?
---
### Author:  [@Dannii](https://meta.discourse.org/u/Dannii)
#### Post date: [July 26, 2020, 3:38am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/14 "2020-07-26T03:38:41Z")
If you’re just checking the certificate date in your browser, then it might show an old one because of the forum’s service worker. I don’t think this is a problem (though I don’t exactly know how it all works.)
---
### Author:  [@neounix](https://meta.discourse.org/u/neounix)
#### Post date: [July 26, 2020, 3:38am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/15 "2020-07-26T03:38:46Z")
Dear @pbies
You can configure your setup anyway you want to try.
When I do it, I always configure the certs as I described in my post because it works easy and without problems.
There is no need to do “cert analysis” because you can just request a new one for free without an issue or problem.
---
### Author:  [@pbies](https://meta.discourse.org/u/pbies)
#### Post date: [July 26, 2020, 4:03am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/16 "2020-07-26T04:03:40Z")
I’ve tried and can’t say if it worked. Just hard-refreshed Ctrl+F5 the site in Chrome and cert is now valid. Seems like cache…
Thanks for your help guys!
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [August 25, 2020, 4:03am UTC](https://meta.discourse.org/t/update-no-longer-valid-ssl-certificate/158065/17 "2020-08-25T04:03:47Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.