Notifications state SSL is expiring but AutoSSL log states otherwise

Operating System & Version
CentOS 7.9
cPanel & WHM Version
100.0.7

martin MHC

Well-Known Member
Sep 14, 2016
292
69
78
UK
cPanel Access Level
Root Administrator
Hello~

For many days (4+) the SERVER HOST domain has had notification emails stating:
[domain.co.uk] The SSL (Secure Sockets Layer) certificate for <various subparts such as "exim" / "ftp" / etc.> on “domain.co.uk” will expire in less than 30 days.

Email contains data:



Issuer: cPanel, Inc.
Key Size:
Expires: Tuesday, February 8, 2022 at 11:59:59 PM UTC



However, when using AutoSSL to check the domain and to renew (as usual) the AutoSSL states:

Certificate expiry: 3/24/22, 12:00 AM UTC (55.55 days from now)

Is there an issue here? I am wary as this is the server hosting domain. Thanks.


Also CPanel may want to tweak their wording as SSL is defunct and the term now is TLS (Transport Layer Security)
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,498
1,971
363
cPanel Access Level
Root Administrator
Hey there! AutoSSL doesn't perform the same checks as the hostname certificate, as they are separate SSL certificates on the system. You can check the SSL for the hostname with the following command:

Code:
/usr/local/cpanel/bin/checkallsslcerts
which should match the warnings you are receiving from the automated notifications.
 

martin MHC

Well-Known Member
Sep 14, 2016
292
69
78
UK
cPanel Access Level
Root Administrator
Hey there! AutoSSL doesn't perform the same checks as the hostname certificate, as they are separate SSL certificates on the system. You can check the SSL for the hostname with the following command:

Code:
/usr/local/cpanel/bin/checkallsslcerts
which should match the warnings you are receiving from the automated notifications.
Ok, thanks @cPRex ; so how would I update the hostname certificate after doing this check? Or just leave it to try and replace within 3 days?

To rephrase -- do I need to do anything specifically in this case or simply just let it autorenew at the 3day mark?