Certbot: Certificate not yet due for renewal
Understand why Certbot skips renewal when the certificate expires in more than 30 days.
Certbot displays "Certificate not yet due for renewal" when
certbot renewruns but the certificate's expiration date is more than 30 days away.
When Certbot Produces This Message
Certbot's
renew command checks each certificate's expiration date. Certbot only renews certificates that expire within 30 days. This message is informational, not an error — it means the certificate is still valid.
When to Force Renewal
Force renewal only if the certificate needs to be reissued (e.g., after adding new domains or replacing a compromised key):
sudo certbot renew --force-renewalUse
--force-renewal sparingly.Forced renewals count against Let's Encrypt's rate limits. See
Certbot: Too many certificates.
How to Check Certificate Expiration
sudo certbot certificatesCertbot lists each certificate with its expiration date and remaining days.