您的现有证书具有与您请求的域或证书名称完全相同且即将到期的证书答案

【问题标题】：You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry您的现有证书具有与您请求的域或证书名称完全相同且即将到期的证书
【发布时间】：2021-11-15 02:39:25
【问题描述】：

当我使用此命令更新我的网站证书时：

/data/docker/nginx/volume/conf/conf/conf.d/cert/example.com/certbot-auto certonly -d '*.example.com' \
--no-self-upgrade \
--manual --preferred-challenges dns \
--server https://acme-v02.api.letsencrypt.org/directory

显示如下信息：

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/example.com-0001.conf)

What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Keep the existing certificate for now
2: Renew & replace the cert (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):

我应该更换证书吗？我的证书不到10天就要过期了，是不是快过期了？多少天被视为关闭？

【问题讨论】：

标签： ssl https

【解决方案1】：

更新 SSL 时，我一直收到同样的错误。
这是我用于collabora.xx.com 子域的技巧。
第 1 步：cd /etc/letsencrypt/renewal 并删除与域/子域相关的 .conf 文件，在我的情况下为 collabora.xx.com.conf
第二步：运行以下命令

certbot certonly --webroot -w /www/html/sites/letsencrypt -d collabora.xx.com
certbot certonly  -d collabora.xx.com
systemctl stop nginx
certbot certonly  -d collabora.xx.com
systemctl restart nginx

记住 collabora.xx.com 在我的例子中是一个子域。

【讨论】：