You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.lemnoslife.com.conf)
What would you like to do?
1: Attempt to reinstall this existing certificate
2: Renew & replace the certificate (may be subject to CA rate limits)
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): An unexpected error occurred:
EOFError
Ask for help or search for solutions at https://community.letsencrypt.org/. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
on my Debian 13 LemnosLife VPS.
certbot --help
Output:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate. The most common SUBCOMMANDS and flags are:
obtain, install, and renew certificates:
(default) run Obtain & install a certificate in your current webserver
certonly Obtain or renew a certificate, but do not install it
renew Renew all previously obtained certificates that are near
expiry
enhance Add security enhancements to your existing configuration
-d DOMAINS Comma-separated list of domains to obtain a certificate for
--apache Use the Apache plugin for authentication & installation
--standalone Run a standalone webserver for authentication
(the certbot nginx plugin is not installed)
--webroot Place files in a server's webroot folder for authentication
--manual Obtain certificates interactively, or using shell script
hooks
-n Run non-interactively
--test-cert Obtain a test certificate from a staging server
--dry-run Test "renew" or "certonly" without saving any certificates
to disk
manage certificates:
certificates Display information about certificates you have from Certbot
revoke Revoke a certificate (supply --cert-name or --cert-path)
delete Delete a certificate (supply --cert-name)
reconfigure Update a certificate's configuration (supply --cert-name)
manage your account:
register Create an ACME account
unregister Deactivate an ACME account
update_account Update an ACME account
show_account Display account details
--agree-tos Agree to the ACME server's Subscriber Agreement
-m EMAIL Email address for important account notifications
More detailed help:
-h, --help [TOPIC] print this message, or detailed help on a topic;
the available TOPICS are:
all, automation, commands, paths, security, testing, or any of the
subcommands or plugins (certonly, renew, install, register, nginx,
apache, standalone, webroot, etc.)
-h all print a detailed help page including all topics
--version print the version number
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://matrix.to/#/!sNARMdEsFZERaQAJzl:matrix.org/$72vQZJMopzmPxkR4Y0PLvlMO-23JhtoKfJO2CZMshzQ:
> vps713872
> root
> -c certbot --apache --key-type ecdsa --elliptic-curve secp384r1 -d [altiscraft.fr](https://altiscraft.fr/),[www.altiscraft.fr](https://www.altiscraft.fr/),[lemnoslife.com](https://lemnoslife.com/),[www.lemnoslife.com](https://www.lemnoslife.com/),[dofus.lemnoslife.com](https://dofus.lemnoslife.com/)
> Saving debug log to /var/log/letsencrypt/letsencrypt.log
> Certificate not yet due for renewal
>
> You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
> (ref: /etc/letsencrypt/renewal/[www.lemnoslife.com](https://www.lemnoslife.com/).conf)
>
> What would you like to do?
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> 1: Attempt to reinstall this existing certificate
> 2: Renew & replace the certificate (may be subject to CA rate limits)
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> Select the appropriate number [1-2] then [enter] (press 'c' to cancel): An unexpected error occurred:
> EOFError
> Ask for help or search for solutions at https://community.letsencrypt.org/. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
on my Debian 13 LemnosLife VPS.
```bash
certbot --help
```
<details>
<summary>Output:</summary>
```
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate. The most common SUBCOMMANDS and flags are:
obtain, install, and renew certificates:
(default) run Obtain & install a certificate in your current webserver
certonly Obtain or renew a certificate, but do not install it
renew Renew all previously obtained certificates that are near
expiry
enhance Add security enhancements to your existing configuration
-d DOMAINS Comma-separated list of domains to obtain a certificate for
--apache Use the Apache plugin for authentication & installation
--standalone Run a standalone webserver for authentication
(the certbot nginx plugin is not installed)
--webroot Place files in a server's webroot folder for authentication
--manual Obtain certificates interactively, or using shell script
hooks
-n Run non-interactively
--test-cert Obtain a test certificate from a staging server
--dry-run Test "renew" or "certonly" without saving any certificates
to disk
manage certificates:
certificates Display information about certificates you have from Certbot
revoke Revoke a certificate (supply --cert-name or --cert-path)
delete Delete a certificate (supply --cert-name)
reconfigure Update a certificate's configuration (supply --cert-name)
manage your account:
register Create an ACME account
unregister Deactivate an ACME account
update_account Update an ACME account
show_account Display account details
--agree-tos Agree to the ACME server's Subscriber Agreement
-m EMAIL Email address for important account notifications
More detailed help:
-h, --help [TOPIC] print this message, or detailed help on a topic;
the available TOPICS are:
all, automation, commands, paths, security, testing, or any of the
subcommands or plugins (certonly, renew, install, register, nginx,
apache, standalone, webroot, etc.)
-h all print a detailed help page including all topics
--version print the version number
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
```
</details>
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.lemnoslife.com.conf)
What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the certificate (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):
```bash
certbot --apache --key-type ecdsa --elliptic-curve secp384r1 -d altiscraft.fr,www.altiscraft.fr,lemnoslife.com,www.lemnoslife.com,dofus.lemnoslife.com
```
<details>
<summary>Output:</summary>
```
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.lemnoslife.com.conf)
What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the certificate (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):
```
</details>
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.lemnoslife.com.conf)
What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the certificate (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):
```bash
certbot --apache --key-type ecdsa --elliptic-curve secp384r1 -d altiscraft.fr,www.altiscraft.fr,lemnoslife.com,www.lemnoslife.com,dofus.lemnoslife.com
```
<details>
<summary>Output:</summary>
```
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.lemnoslife.com.conf)
What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the certificate (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):
```
</details>
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
options:
-h, --help show this help message and exit
-c, --config CONFIG_FILE
path to config file (default: /etc/letsencrypt/cli.ini and ~/.config/letsencrypt/cli.ini)
automation:
Flags for automating execution & other tweaks
-n, --non-interactive, --noninteractive
Run without ever asking for user input. This may require additional command line flags; the client will try to
explain which ones are required if it finds one missing (default: False)
-m, --email EMAIL Email used for registration and recovery contact. Use comma to register multiple emails, ex:
u1@example.com,u2@example.com. (default: Ask).
--eff-email Share your e-mail address with EFF (default: Ask)
--no-eff-email Don't share your e-mail address with EFF (default: Ask)
--keep-until-expiring, --keep, --reinstall
If the requested certificate matches an existing certificate, always keep the existing one until it is due for
renewal (for the 'run' subcommand this means reinstall the existing certificate). (default: Ask)
--expand If an existing certificate is a strict subset of the requested names, always expand and replace it with the
additional names. (default: Ask)
--version show program's version number and exit
--force-renewal, --renew-by-default
If a certificate already exists for the requested domains, renew it now, regardless of whether it is near expiry.
(Often --keep-until-expiring is more appropriate). Also implies --expand. (default: False)
--renew-with-new-domains
If a certificate already exists for the requested certificate name but does not match the requested domains,
renew it now, regardless of whether it is near expiry. (default: False)
--reuse-key When renewing, use the same private key as the existing certificate. (default: False)
--no-reuse-key When renewing, do not use the same private key as the existing certificate. Not reusing private keys is the
default behavior of Certbot. This option may be used to unset --reuse-key on an existing certificate. (default:
False)
--new-key When renewing or replacing a certificate, generate a new private key, even if --reuse-key is set on the existing
certificate. Combining --new-key and --reuse-key will result in the private key being replaced and then reused in
future renewals. (default: False)
--allow-subset-of-names
When performing domain validation, do not consider it a failure if authorizations can not be obtained for a
strict subset of the requested domains. This may be useful for allowing renewals for multiple domains to succeed
even if some domains no longer point at this system. This option cannot be used with --csr. (default: False)
--agree-tos Agree to the ACME Subscriber Agreement (default: Ask)
--account ACCOUNT_ID Account ID to use (default: None)
--duplicate Allow making a certificate lineage that duplicates an existing one (both can be renewed in parallel) (default:
False)
-q, --quiet Silence all output except errors. Useful for automation via cron. Implies --non-interactive. (default: False)
```bash
certbot --help automation
```
<details>
<summary>Output:</summary>
```
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
options:
-h, --help show this help message and exit
-c, --config CONFIG_FILE
path to config file (default: /etc/letsencrypt/cli.ini and ~/.config/letsencrypt/cli.ini)
automation:
Flags for automating execution & other tweaks
-n, --non-interactive, --noninteractive
Run without ever asking for user input. This may require additional command line flags; the client will try to
explain which ones are required if it finds one missing (default: False)
-m, --email EMAIL Email used for registration and recovery contact. Use comma to register multiple emails, ex:
u1@example.com,u2@example.com. (default: Ask).
--eff-email Share your e-mail address with EFF (default: Ask)
--no-eff-email Don't share your e-mail address with EFF (default: Ask)
--keep-until-expiring, --keep, --reinstall
If the requested certificate matches an existing certificate, always keep the existing one until it is due for
renewal (for the 'run' subcommand this means reinstall the existing certificate). (default: Ask)
--expand If an existing certificate is a strict subset of the requested names, always expand and replace it with the
additional names. (default: Ask)
--version show program's version number and exit
--force-renewal, --renew-by-default
If a certificate already exists for the requested domains, renew it now, regardless of whether it is near expiry.
(Often --keep-until-expiring is more appropriate). Also implies --expand. (default: False)
--renew-with-new-domains
If a certificate already exists for the requested certificate name but does not match the requested domains,
renew it now, regardless of whether it is near expiry. (default: False)
--reuse-key When renewing, use the same private key as the existing certificate. (default: False)
--no-reuse-key When renewing, do not use the same private key as the existing certificate. Not reusing private keys is the
default behavior of Certbot. This option may be used to unset --reuse-key on an existing certificate. (default:
False)
--new-key When renewing or replacing a certificate, generate a new private key, even if --reuse-key is set on the existing
certificate. Combining --new-key and --reuse-key will result in the private key being replaced and then reused in
future renewals. (default: False)
--allow-subset-of-names
When performing domain validation, do not consider it a failure if authorizations can not be obtained for a
strict subset of the requested domains. This may be useful for allowing renewals for multiple domains to succeed
even if some domains no longer point at this system. This option cannot be used with --csr. (default: False)
--agree-tos Agree to the ACME Subscriber Agreement (default: Ask)
--account ACCOUNT_ID Account ID to use (default: None)
--duplicate Allow making a certificate lineage that duplicates an existing one (both can be renewed in parallel) (default:
False)
-q, --quiet Silence all output except errors. Useful for automation via cron. Implies --non-interactive. (default: False)
```
</details>
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewing an existing certificate for altiscraft.fr and 4 more domains
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/www.lemnoslife.com/fullchain.pem
Key is saved at: /etc/letsencrypt/live/www.lemnoslife.com/privkey.pem
This certificate expires on 2026-06-29.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
Deploying certificate
Successfully deployed certificate for altiscraft.fr to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for www.altiscraft.fr to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for lemnoslife.com to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for www.lemnoslife.com to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for dofus.lemnoslife.com to /etc/apache2/sites-enabled/ssl.dofus.lemnoslife.com-le-ssl.conf
Your existing certificate has been successfully renewed, and the new certificate has been installed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
* Donating to EFF: https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
```bash
certbot --renew-by-default --apache --key-type ecdsa --elliptic-curve secp384r1 -d altiscraft.fr,www.altiscraft.fr,lemnoslife.com,www.lemnoslife.com,dofus.lemnoslife.com
```
<details>
<summary>Output:</summary>
```
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewing an existing certificate for altiscraft.fr and 4 more domains
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/www.lemnoslife.com/fullchain.pem
Key is saved at: /etc/letsencrypt/live/www.lemnoslife.com/privkey.pem
This certificate expires on 2026-06-29.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
Deploying certificate
Successfully deployed certificate for altiscraft.fr to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for www.altiscraft.fr to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for lemnoslife.com to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for www.lemnoslife.com to /etc/apache2/sites-enabled/ssl.lemnoslife.com.conf
Successfully deployed certificate for dofus.lemnoslife.com to /etc/apache2/sites-enabled/ssl.dofus.lemnoslife.com-le-ssl.conf
Your existing certificate has been successfully renewed, and the new certificate has been installed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
* Donating to EFF: https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
```
</details>
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: yt4.lemnoslife.com
https://chat.mistral.ai/chat/eb44613e-0683-441c-8b75-8f4383eabb9d
https://chatgpt.com/share/69cc5cdf-3088-832e-8052-f8637e8671c9
```bash
certbot delete --cert-name crawler.yt.lemnoslife.com yt4.lemnoslife.com
```
<details>
<summary>Output:</summary>
```
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: yt4.lemnoslife.com
```
</details>
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificate(s) are selected for deletion:
* crawler.yt.lemnoslife.com
WARNING: Before continuing, ensure that the listed certificates are not being
used by any installed server software (e.g. Apache, nginx, mail servers).
Deleting a certificate that is still being used will cause the server software
to stop working. See https://certbot.org/deleting-certs for information on
deleting certificates safely.
Are you sure you want to delete the above certificate(s)?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
No certificate found with name crawler.yt.lemnoslife.com (expected /etc/letsencrypt/renewal/crawler.yt.lemnoslife.com.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
```bash
certbot delete --cert-name crawler.yt.lemnoslife.com
```
<details>
<summary>Output:</summary>
```
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificate(s) are selected for deletion:
* crawler.yt.lemnoslife.com
WARNING: Before continuing, ensure that the listed certificates are not being
used by any installed server software (e.g. Apache, nginx, mail servers).
Deleting a certificate that is still being used will cause the server software
to stop working. See https://certbot.org/deleting-certs for information on
deleting certificates safely.
Are you sure you want to delete the above certificate(s)?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
No certificate found with name crawler.yt.lemnoslife.com (expected /etc/letsencrypt/renewal/crawler.yt.lemnoslife.com.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
```
</details>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
https://matrix.to/#/!sNARMdEsFZERaQAJzl:matrix.org/$72vQZJMopzmPxkR4Y0PLvlMO-23JhtoKfJO2CZMshzQ:
on my Debian 13 LemnosLife VPS.
Output:
Output:
Output:
Note:
Output:
Output:
Output:
Output:
Output:
I confirm that only now the https://lemnoslife.com certificate changed.
Related to #3.
I added
--renew-by-defaultto:On Debian 13 OverClock3000:
Output:
Output:
/etc/letsencrypt/renewal/crawler.yt.lemnoslife.com.conf:does not return anything.
Output:
DuckDuckGo and Google search certbot do not renew failed to verify domains.
https://chat.mistral.ai/chat/eb44613e-0683-441c-8b75-8f4383eabb9d
https://chatgpt.com/share/69cc5cdf-3088-832e-8052-f8637e8671c9
Output:
Output:
I would like to avoid specifying the working domain names, as there is a majority of them.
does not return anything.
Output:
As https://gitea.lemnoslife.com certificate seems to have been updated and I do not use other domain names, can postpone solving this issue.