When the auto-renew scheduled task runs, at times the www secured sub-domain will not renew (fails at times) but will be considered successful and be applied in IIS. As a standard we force the www redirection for all of our domains. When the SSL renews, it updates the SSL with the new SSL but the www version is not included in the certificate. This leaves the domain insecure since the www version isn't included in the certificate. The certificate should not be updated/implemented if not all of the domains to secure pass validation. This is a new issue we have identified as of this month. This leaves sites insecure, and we manually have to renew the SSLs. The include "www" subdomain is no longer checked during the manual renewal and I must re-check the option to have the www version included. The issue has been replicated on multiple servers
Microsoft Windows Server 2012 R2
Plesk Onyx - Version 17.5.3 Update #6
Let's Encrypt - Version 2.1.0-48
When the auto-renew scheduled task runs, at times the www secured sub-domain will not renew (fails at times) but will be considered successful and be applied in IIS. As a standard we force the www redirection for all of our domains. When the SSL renews, it updates the SSL with the new SSL but the www version is not included in the certificate. This leaves the domain insecure since the www version isn't included in the certificate. The certificate should not be updated/implemented if not all of the domains to secure pass validation. This is a new issue we have identified as of this month. This leaves sites insecure, and we manually have to renew the SSLs. The include "www" subdomain is no longer checked during the manual renewal and I must re-check the option to have the www version included. The issue has been replicated on multiple servers
Microsoft Windows Server 2012 R2 Plesk Onyx - Version 17.5.3 Update #6 Let's Encrypt - Version 2.1.0-48