SSL certificate renewal, every 3 months? / Renovación de certificado SSL, cada 3 meses?

[Manu-Capa]

Hi friends, I have a Plesk Linux server with several domains and published websites. I issue and renew SSL certificates, but apparently I have to reinstall them every 3 months, is that possible? Don't they last for 1 year? Why does Plesk force me to reinstall them and perform the same operation every 3 months? I issue and renew paid certificates with Ionos SSL Starter Wildcard. Is there any solution to make the issued certificate last longer?

I have been told that if I check the option: Keep protected websites, they are updated automatically, but I want them to be updated with my certificate, NOT with a free Let's Encrypt certificate, but with my own.
Does anyone know how to do it or give me more information? Thank you very much.


_______________________________________________________


Hola amigos, tengo un servidor Plesk Linuz con varios dominios y webs publicadas. Emito y renuevo los certificados SSL, pero por lo visto tengo que volver a instalarlos cada 3 meses, es eso posible? No tienen una duración de 1 año? Por que Plesk me obliga a volver a instalarlos y realizar la misma operación cada 3 meses. Emito y renuevo los certificados de pago con SSL Starter Wildcard de Ionos. Hay algun a solución para hacer que dure mas tiempo el certificado emitido?

Me han dicho que si marco la opción: Conservar los sitios web protegidos, se actualizan solos, pero, yo quiero que se actualicen con mi certificado, NO con un certificado gratuito de Let's Encrypt, sino el mio.
Alguien sabe como hacerlo o darme mas información ? Muchas gracias.

 

[Sebahat.hadzhi]

If the SSL certifies in question are Let's Encrypt-powered it is normal to be prompted to renew them every three months as the certificates are valid for 90 days. However, that's not a normal behavior if you are using another SSL vendor that offers SSLs with annual validity. Could you please review the domain name(s) and confirm what SSL certificate they are using?

 

[Raul A.]

Hi,

Automatic wildcard Let's Encrypt certificates renew automatically if the domain DNS zone is hosted in Plesk, or Plesk can send the new domain ownership verification string to the authoritative DNS zone.

Since you have to renew manually I suspect this is the case.

You have 2 options:

1) replace the wildcard with a normal Let's Encrypt certificate (DCV) for the bare domain and www and any other subdomains

2) change the domain nameserves to the Plesk server address and wildcard Let's Encrypt certificates will be issued automatically.

I would also recommend whitelisting nameservers that resolve to your Plesk server in the SSLit! extension in order to avoid such cases where wildcard Let's Encrypt certificates are issued with manual action from the domain owner.