<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Wildcart Cert - I can disregard mail notifications about expiring subdomain certs, correct?]]></title><description><![CDATA[<p dir="auto">My "<a href="http://domain1.com" target="_blank" rel="noopener noreferrer nofollow ugc">domain1.com</a>" with Hetzner is set to  "Let's Encrypt Prod - Wildcard" in cloudron. I currently receive mails from Let's Encrypt regarding expiring certs for subdomains, e.g. cert for <code>bit.domain1.com</code> which is expiring in 6 days - but I can disregard that, as the wildcard domain has still 43 days, correct?<br />
From the log:</p>
<pre><code>2024-03-11T05:03:58.587Z box:tasks update 15838: {"percent":5,"message":"Ensuring certs of my.domain1.com"}
2024-03-11T05:03:58.601Z box:reverseproxy providerMatchesSync: subject=CN = *.domain1.com domain=*.domain1.com issuer=C = US, O = Let's Encrypt, CN = R3 wildcard=true/true prod=true/true issuerMismatch=false wildcardMismatch=false match=true
2024-03-11T05:03:58.607Z box:reverseproxy expiryDate: subject=CN = *.domain1.com notBefore=Jan 24 19:20:32 2024 GMT notAfter=Apr 23 19:20:31 2024 GMT daysLeft=43.59481936342593
2024-03-11T05:03:58.608Z box:reverseproxy ensureCertificate: my.domain1.com acme cert exists and is up to date
2024-03-11T05:03:58.608Z box:reverseproxy needsRenewal: false. force: false
2024-03-11T05:03:58.608Z box:tasks update 15838: {"percent":9,"message":"Ensuring certs of rt.domain1.com"}
2024-03-11T05:03:58.619Z box:reverseproxy providerMatchesSync: subject=CN = *.domain1.com domain=*.domain1.com issuer=C = US, O = Let's Encrypt, CN = R3 wildcard=true/true prod=true/true issuerMismatch=false wildcardMismatch=false match=true
2024-03-11T05:03:58.626Z box:reverseproxy expiryDate: subject=CN = *.domain1.com notBefore=Jan 24 19:20:32 2024 GMT notAfter=Apr 23 19:20:31 2024 GMT daysLeft=43.59481914351852

2024-03-11T05:03:58.924Z box:tasks update 15838: {"percent":65,"message":"Ensuring certs of bit.domain1.com"}
2024-03-11T05:03:58.940Z box:reverseproxy providerMatchesSync: subject=CN = *.domain1.com domain=*.domain1.com issuer=C = US, O = Let's Encrypt, CN = R3 wildcard=true/true prod=true/true issuerMismatch=false wildcardMismatch=false match=true
2024-03-11T05:03:58.949Z box:reverseproxy ensureCertificate: bit.domain1.com acme cert exists and is up to date
2024-03-11T05:03:58.949Z box:reverseproxy expiryDate: subject=CN = *.domain1.com notBefore=Jan 24 19:20:32 2024 GMT notAfter=Apr 23 19:20:31 2024 GMT daysLeft=43.59481540509259
2024-03-11T05:03:58.949Z box:reverseproxy needsRenewal: false. force: false
</code></pre>
<p dir="auto">and:</p>
<pre><code>2024-03-11T05:04:01.683Z box:tasks update 15838: {"message":"Checking expired certs for removal"}
box:reverseproxy expiryDate: subject=CN = bit.domain1.com notBefore=Dec 18 22:10:19 2023 GMT notAfter=Mar 17 22:10:18 2024 GMT daysLeft=6.7126884375
2024-03-11T05:04:01.726Z
</code></pre>
]]></description><link>https://forum.cloudron.io/topic/11274/wildcart-cert-i-can-disregard-mail-notifications-about-expiring-subdomain-certs-correct</link><generator>RSS for Node</generator><lastBuildDate>Mon, 08 Jun 2026 23:42:03 GMT</lastBuildDate><atom:link href="https://forum.cloudron.io/topic/11274.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 11 Mar 2024 08:36:59 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Wildcart Cert - I can disregard mail notifications about expiring subdomain certs, correct? on Mon, 11 Mar 2024 09:41:22 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/girish" aria-label="Profile: girish">@<bdi>girish</bdi></a> Thanks! I hadn't thought of checking the certificate in the browser - yes, all is good.</p>
]]></description><link>https://forum.cloudron.io/post/84757</link><guid isPermaLink="true">https://forum.cloudron.io/post/84757</guid><dc:creator><![CDATA[necrevistonnezr]]></dc:creator><pubDate>Mon, 11 Mar 2024 09:41:22 GMT</pubDate></item><item><title><![CDATA[Reply to Wildcart Cert - I can disregard mail notifications about expiring subdomain certs, correct? on Mon, 11 Mar 2024 09:29:02 GMT]]></title><description><![CDATA[<p dir="auto">BTW, to be doubly sure, you can always inspect the cert in your browser. Check the cert expiration time. For example, in firefox, I see something like:</p>
<p dir="auto"><img src="/assets/uploads/files/1710149341357-3ac716e8-fd13-4a14-9626-79507db7b313-image-resized.png" alt="image.png" class=" img-fluid img-markdown" /></p>
]]></description><link>https://forum.cloudron.io/post/84753</link><guid isPermaLink="true">https://forum.cloudron.io/post/84753</guid><dc:creator><![CDATA[girish]]></dc:creator><pubDate>Mon, 11 Mar 2024 09:29:02 GMT</pubDate></item><item><title><![CDATA[Reply to Wildcart Cert - I can disregard mail notifications about expiring subdomain certs, correct? on Mon, 11 Mar 2024 09:27:39 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/necrevistonnezr" aria-label="Profile: necrevistonnezr">@<bdi>necrevistonnezr</bdi></a> yes, that's correct, those can be disregarded. I am assuming those notifications come from an earlier cert you got from LE for <a href="http://bit.domain1.com" target="_blank" rel="noopener noreferrer nofollow ugc">bit.domain1.com</a> . Maybe outside of Cloudron or maybe you switched from wildcard to progammatic DNS in Cloudron.</p>
]]></description><link>https://forum.cloudron.io/post/84752</link><guid isPermaLink="true">https://forum.cloudron.io/post/84752</guid><dc:creator><![CDATA[girish]]></dc:creator><pubDate>Mon, 11 Mar 2024 09:27:39 GMT</pubDate></item></channel></rss>