SSL renewal check skipping expired certificates

Environment: Cyberpanel v2.0 build 3
Server: Ubuntu 18.04
Host: DigitalOcean

Install type: OLS
Installation from official server


A client reported to me that he site was not accessible. It was due to the SSL certificate expiring on Jan 15th (four days ago).

Look in the /home/cyberpanel/error-logs.txt I can see the “Running SSL Renew Utility” output. It appears to be skipping certificates that are expired. At least it did in the case of this client’s site.

For example:

[01.16.2021_02-00-04] Checking SSL for
[01.16.2021_02-00-04] SSL exists for Checking if SSL will expire in 15 days…
[01.16.2021_02-00-04] SSL exists for and is not ready to renew, skipping…

Yet the certificate expired on January 15th. See here:

This is obviously a major problem. But as there’s no data in the log showing a failed renewal, I am not sure where to start troubleshooting the cause.

I’ve search the log back to Nov 15th, and there was never an instance of this SSL certificate being detected as requiring renewal. No renewal attempts have been made. No errors have been logged related to the renewal of this domain’s SSL.

Something else worth pointing out …
I manually renewed the SSL for this domain with the SSL Manager (“Issue SSL”).

The log out put was as follows:

[01.18.2021_20-36-09] /root/ --issue -d -d --cert-file /etc/letsencrypt/live/ --key-file /etc/letsencrypt/live/ --fullchain-file /etc/letsencrypt/live/ -w /home/ --force
[01.18.2021_20-36-17] Successfully obtained SSL for: and:
[01.18.2021_20-36-17] {‘’: (550, b’5.1.1 Recipient address rejected: User unknown in virtual mailbox table’)}

You’ll see the last line is using a ‘’ email address. I am not sure what this is for, but such an address does not exist. Why would it?

I’d like to know if this error is of any consequence?


(In case that’s a better place to address bugs)


@plumcake said:

Hi Plumcake. Have you still got this issue occurring, or have you already manually renewed the certificate? I’m guessing you’ve already renewed it. But, if not, please let me know. I’d like to have you decode the existing certificate and see if it has expired or was renewed.
I’ve got a ticket on this here Expired SSL certificates are not triggering renewal · Issue #518 · usmannasir/cyberpanel · GitHub, which explains a little more.

This issue continues to occur. I’ve now got multiple expired SSL certs that are being skipped.

I subscribed to Cyberpanel support. They checked the server, they said everything was fine. Damn not. Certificates have been a regular problem since then.