Let's Encrypt Ending Expiration Email Notifications

[humptydumpty]

This shouldn't affect renewals if we're using Cloudron, right?

Hi,

As a Let’s Encrypt Subscriber, you benefit from access to free, automated TLS certificates. One way we have supported Subscribers is by sending expiration notification emails when it’s time to renew a certificate.

We’re writing to inform you that we intend to discontinue sending expiration notification emails. You can learn more in this blog post. You will receive this reminder email again in the coming months:

https://letsencrypt.org/2025/01/22/Ending-Expiration-Emails

Here are some actions you can take today:

Automate with an ACME Client that supports Automated Renewal Information (ARI). ARI enables us to automatically renew your certificates ahead of schedule should the need arise:

https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-into-existing-acme-clients

Sign up for a third-party monitoring service that may provide expiration emails. We can recommend Red Sift Certificates Lite, which provides free expiration emails for up to 250 active certificates:

https://redsift.com/pulse-platform/certificates-lite

Opt in to emails. While we are deprecating expiration notification emails, you can opt in to continue to receive other emails. We’ll keep you informed about technical updates, and other news about Let’s Encrypt and our parent nonprofit, ISRG, based on the preferences you choose:

https://letsencrypt.org/opt-in/

In accordance with this change, we are updating our Subscriber Agreement, effective 24 February 2025. This is the agreement that governs the relationship between you and ISRG with regards to your acquisition and use of SSL/TLS digital certificates issued by ISRG (via Let's Encrypt). You don't need to take any action to continue to use the Let's Encrypt service but we encourage you to review the new agreement. You can find the latest agreement (v1.5) here:

https://letsencrypt.org/repository/

All the best,
Let’s Encrypt

[archos]

Hi,

I have the same issue. I was just about to post on the forum as well. For some domains, I also receive emails from Let's Encrypt saying that the certificate will expire in 5 days, but in Cloudron, everything is green, and it looks like the certificates are active as expected.

I haven’t tried a manual renewal yet, but it seems that Cloudron renews certificates at the last moment.
Has anyone else experienced this, or does anyone know if this is normal behavior?

Thanks!

[humptydumpty]

@archos Certs have been renewing fine for me. No issues at all. I'm just wondering if they'll keep renewing under these new changes.

As for your concerns, I believe it's normal, but you can issue a manual renewal in your dashboard > Domains & Certs > renew all certs and then check if that went through. I remember reading something about rate limits and that may be why they're renewed right before expiring.

[archos]

@humptydumpty Hi,

Thanks for the clarification! I tried a manual renewal, and everything is working fine.

I just found it strange because, in the past, I only received these expiration emails for domains I had removed, so I had some doubts. But if Cloudron renews certificates just before expiration, that makes sense now.

Thanks again!