This guide explains how to renew SSL certificates provided by Let’s Encrypt on a VPS
Let’s Encrypt employs a client called Certbot, designed to handle the installation, management, and automated renewal of SSL certificates. If your Droplet’s SSL certificate does not renew automatically as expected, you can manually renew it by executing the following command:
sudo certbot renew
In cases where you maintain multiple certificates covering various domains and wish to renew a specific one, use the command below:
certbot certonly --force-renew -d example.com
The --force-renew
option instructs Certbot to obtain a new certificate with identical domain settings as the existing one, while the -d
parameter specifies the exact domain(s) whose certificates you want to renew.
To verify successful certificate renewal, run:
sudo certbot renew --dry-run
If this command executes without errors, it indicates that the renewal process has been successful.
To verify that your SSL has been renewed, you can check it on a 3rd-party checker like: https://sslshopper.com