Renewal & Check

After deployment, confirm that HTTPS works.

Automatic Renewal

acme.sh installs a scheduled task automatically.

Manual check:

~/.acme.sh/acme.sh --cron --home ~/.acme.sh

If --reloadcmd was configured, Nginx or Apache reloads automatically after renewal.

HTTPS Check

Command check:

curl -I "https://example.com"

Open in a browser:

https://example.com

Confirm:

• http://example.com redirects to https://example.com
• The browser shows a secure lock
• The certificate domain is correct
• The certificate chain is complete

HTTP/2 200, HTTP/1.1 200, 301, or 302 usually means HTTPS is reachable.

FAQ

The status stays Pending. What should I check?

Check that the domain is correct and points to the server.

Certificate issuance failed. What should I check?

Confirm this path is reachable from the internet:

http://example.com/.well-known/acme-challenge/

Can I share EAB details with someone else?

Only share them with a trusted server administrator. Do not publish the EAB MAC key.

The browser still says the site is not secure. Why?

Check that the web server loaded the new certificate and that the page has no http:// mixed content.