How to renew a wildcard certificate?

[fszlin]

How to renew a wildcard certificate?

[fszlin]

The idea is to generate a new certificate every 3 months, reuse your account key if possible.

I'd suggest doing so as a scheduled build. 😄

[Tealons]

I saw the script and tried to run the commands in powershell on Kudo, but got stuck. I have no experience with Appveryor. How can I run the script on a Azure Web App?

[TraGicCode]

@fszlin

When you renew the certs I guess the dns txt records don’t change or are an ignored step. Can u explain this in more detail. My understanding is that once you verify ownership of a domain you simply use the generated key pair to ask let’s encrypt for renewals in the future and no updating dns txt records is needed

[webprofusion-chrisc]

Hi, when you renew a certificate with Let's Encrypt you are actually requesting a whole new cert for the same domains, so renewal requires repeating the validation challenge process again.

For DNS challenges this involves create the _acme-challenge TXT record in your domain or subdomain, with the value derived from the authorization specified by Let's Encrypt.

If your cert has multiple domains included then you need to create multiple TXT records in each respective DNS zone.

Note: Certs with wildcard + the root domain (e.g. *.example.com and example.com) require that the TXT record has 2 values in order to respond to the authorization challenge for each part.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.