Использую CA letsencrypt. Вот так обновляю сертификат:
certbot certonly --webroot -w /var/www/www.<url_cкрыт>eu/html/ -d www.<url_cкрыт>eu -d <url_cкрыт>eu
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.<url_cкрыт>eu.conf)
What would you like to do?
-------------------------------------------------------------------------------
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days)
-------------------------------------------------------------------------------
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for www.<url_cкрыт>eu
http-01 challenge for <url_cкрыт>eu
Using the webroot path /var/www/www.<url_cкрыт>eu/html for all unmatched domains.
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /etc/letsencrypt/keys/0003_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0003_csr-certbot.pem
IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at
/etc/letsencrypt/live/www.<url_cкрыт>eu/fullchain.pem. Your cert will
expire on 2017-11-29. To obtain a new or tweaked version of this
certificate in the future, simply run certbot again. To
non-interactively renew *all* of your certificates, run "certbot
renew"
- If you like Certbot, please consider supporting our work by:
Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le
Но браузер (хром) ругается, что сертификат устарел. Нужно подождать какоето время? прошло уже несколько дней.
Простой
Сложный
