Keep Server Online
  
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
  
or
  
 
  
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
  
Thank You! Steffen
  
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
 |    |   
 | 
     Topic: [Urgent] Let's Encrypt revocations affecting TLS cert's | 
 |   
| Author | 
  | 
 
Steffen Moderator
 
  Joined: 15 Oct 2005 Posts: 3131 Location: Hilversum, NL, EU
  | 
 Posted: Wed 26 Jan '22 10:31    Post subject: [Urgent] Let's Encrypt revocations affecting TLS cert's | 
     | 
 
  | 
 
Received the following mail :
 
 	  | Code: | 	 		  Hello,
 
 
Please immediately renew your TLS certificate(s) that were issued from
 
Let's Encrypt using the TLS-ALPN-01 validation method and the following
 
ACME registration (account) ID(s):
 
 
xxxxxxxxx
 
 
We've determined that an error made it possible for TLS-ALPN-01
 
challenges, completed before today, to not comply with certificate
 
issuance requirements. We have remediated this problem and will revoke
 
all unexpired certificates that used this validation method at 16:00 UTC
 
on 28 January 2022. Please renew your certificates now to ensure an
 
uninterrupted experience for your site visitors.
 
 
We apologize for any inconvenience this may cause. If you need support
 
in the renewal process, please comment on our forum post. Our staff and
 
community members are available to help:
 
 
https://community.letsencrypt.org/t/170449 
 
 
Thank you,
 
 
The Let's Encrypt Team | 	  
 
All certificates issued in the last 90 days and validated with TLS-ALPN-01 challenge are affected. You need to (force) renew the certificate according to your ACME client’s directions.
 
 
At https://community.letsencrypt.org/t/170449  in the comments is also the way how to renew with mod_md.
 
 
!! It is advised by us to renew all your Let's Encrypt certificates.
 
 
Let's Encrypt  will revoke all unexpired certificates that used this validation method at 16:00 UTC on 28 January 2022. Renew your certificates now to ensure an uninterrupted experience for your site visitors. | 
 
  | 
 
| Back to top | 
 | 
 
icing
 
  
  Joined: 22 Sep 2015 Posts: 41 Location: Münster, Germany
  | 
 | 
 
| Back to top | 
 | 
 
James Blond Moderator
  
  Joined: 19 Jan 2006 Posts: 7442 Location: EU, Germany, Next to Hamburg
  | 
 Posted: Fri 28 Jan '22 15:38    Post subject:  | 
     | 
 
  | 
 
A quick check for a single domain
 
 
 	  | Code: | 	 		  
 
curl -X POST -d 'fqdn=example.com' https://tls-alpn-check.letsencrypt.org/checkhost
 
 | 	 
  | 
 
  | 
 
| Back to top | 
 | 
 
 
 
 
 | 
 
 
 |  
 
 |  
  |   
 |