Renewing Certificates

Certificates generated by the Keyfactor ACME server automatically renew as per standard ACME protocol. The certificates issued via the ACME protocol are added to the Keyfactor ACME SQL database to track renewal requirements. You may also either manually renew them or set up an automated job to run the renewal checks. Issue standard Certbot commands for renewals.

To run a manual renewal for all certificates:

REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt certbot renew
Note:  You can specify a certificate to renew by adding the parameterClosed A parameter or argument is a value that is passed into a function in an application. --cert-name <domain-identifer> to the command. If the certificates are not up for renewal, you can still force them to renew by passing in the argumentClosed A parameter or argument is a value that is passed into a function in an application. --force-renewal. The default threshold for renewal in Certbot is 30 days prior to expiration.