Run 'sudo certbot certificates' to see all certificates with expiry dates. Or use 'echo | openssl s_client -connect yourdomain.com:443 | openssl x509 -noout -dates' to check a specific domain. Set up a cron job to alert when certificates are within 30 days of expiry.
Certbot sets up a systemd timer that runs 'certbot renew' twice daily. When a certificate is within 30 days of expiry, it renews automatically. Set up a deploy hook to reload Nginx: create /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh with 'systemctl reload nginx'. Test with certbot renew --dry-run.
Run sudo certbot renew --dry-run. This simulates the renewal process without actually renewing. If it succeeds, auto-renewal is working. If it fails, check the error message common issues are port 80 not accessible or Nginx config errors.
Set up a deploy hook: create /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh with 'systemctl reload nginx', make it executable. Or run 'sudo certbot renew --deploy-hook "systemctl reload nginx"'. The deploy hook runs automatically after each successful renewal.
Browse all our FAQs or reach out to our support team
Your learning library
Find your next course. Build something great.
