@beardalaxy try certbot renew --force-renewal

@Halo looks like a DNS problem of some sort? o.0

@beardalaxy might wanna check your dns then
idk how fedi express works would be better to ask whoever runs it for help.

@beardalaxy yeah when you go past the error it loads your instance.
I think this is a problem with them not you

but again. idk how tf fedi express works.
if it was your own server i could help more I think

@Halo basically fediverse express just sets you up with a server on a server hosting website, does all the legwork for you basically but they don't actually host anything. knowing what i know now i probably could have done that whole part myself and had better results because it puts some stuff in weird places but oh well.

anyway i am using digitalocean as the server host.

@beardalaxy ah ic.
uh... man i'm trying to think of what commands i'd run to figure it out

the cert does show as expired when you look at it from browser

Could you run certbot certificates and see what that says.
I don't have access to my server rn so i can't run anything at the same time and see if it'll work

@Halo don't sweat it too much, i'm gonna' open a ticket with digitalocean to see if i can get it figured out there.

certbot says it's still valid with that command so idk lol o.0 just weird dns stuff i guess.

@beardalaxy

well im out of ideas anyway without poking around myself.
sorry couldn't be enough help

@Halo that's okay, i appreciate you trying to help :)

@Halo idk if this is super relevant but the exact error i get is that the CAA lookup timed out. idk what that means lol but i'm looking into it the best i can.

@beardalaxy seems like it may be a problem on the letsencrypt side of things
you may wanna wait a bit and try it again.
or try it without the force flag.
also could check the system time
maybe the date is fucked up on the server so it thinks the cert is still valid.

just a few random thoughts

@Halo it's just weird, because certbot seems to think it expires in september but let's encrypt sent me an email saying it expired just a few days ago xD so i'm left with confusion. system time is correct.

@beardalaxy
you could just delete the cert off the server completely
certbot delete I think it is

@beardalaxy @Halo you have to go to porkbun and add a CAA record for your domains

@Riserise @beardalaxy i don't remember ever doing that but worth a try

@Halo @beardalaxy it's a porkbun special feature iirc

@Riserise @beardalaxy aaa ic ic

@Riserise @Halo lol the only posst i can find about setting CAA records on porkbun the dude says "porkbun did it for me" xD

i am on the CAA screen to put in the values but not sure exactly what to input for the answer.

@Riserise @Halo o i'm retard lol it literally has the example in the box and it's exactly what i needed xD i thought the parentheses were PART OF IT and i was weirded out.

anyway, i was able to force the renewal! thanks for the help guys :) i'm guessing it will just take some time for the renewal to reflect everywhere?

@beardalaxy @Riserise
>i'm guessing it will just take some time for the renewal to reflect everywhere?
I think so?
good the cert renewed tho

If it's still showing the error then you may wanna investigate a bit more

@beardalaxy @Riserise
>If it's still showing the error then you may wanna investigate a bit more
(aka ask the host what's up)

@Halo @Riserise yeah lol it's still happening even after renewing the cert so I guess it's on them somehow?

@Halo @Riserise i had to use this command:

certbot certonly --force-renew -d sb.greenboys.club

then it asked what i wanted to authenticate with, i chose nginx, and it worked then set up a process to automatically renew.

@beardalaxy @Halo what a hassle!
I'm glad you got it working, good job

@Riserise @Halo thank youu