Unexpectedly, the certificate has been applied for one year and will expire at the end of this month. After browsing my blog after expiration, the small green lock on the address bar will be grayed out and the site will be unsafe. So update the certificate should be on the agenda.

# Platform

Request a new certificate

My certificate is on the cloud, go to {% label info@console%}>top right corner {% label info@Cloud products%}>{% label info@domain and website%}>{% label info@SLL certificate management%}. Then if there is a certificate that expires soon, there will be a quick re-apply button in the status column, like me:

After applying for {% label success@submit%}, if it is less than half an hour, you will be notified by SMS and email and the application will be approved. After the application is approved, go back to the {% label info@SLL Certificate Management%} page, download the certificate to the local, and extract the certificate file for your platform.

Of course, if your LNMP one-click installation package uses Let'sEncrypt, it's even simpler, and it's automatically renewed directly.

Deploying a new certificate

1. Upload the certificate file and log in to your server using [WinSCP] (https://winscp.net/) (of course you can use other ones), upload the certificate file to your favorite folder of your server, don't close WinSCP first.
2. Update the certificate Log in to your server using [putty] (https://www.putty.org/) (of course you can use anything else), enter the command:

Lnmp ssl add

This will prompt you to enter your domain name.
Please enter domain(example: www.lnmp.org):
Enter more domain name(example: lnmp.org *.lnmp.org):

Then let you enter the root directory of your website.
Please enter the directory for domain tstrs.me:

Prompt for writing rules to enter wordpress.
Allow Rewrite rule? (y/n)

Prompt if you need to keep the log as needed.
Allow access log? (y/n)

This will allow you to choose between a certificate or a Let'sEncrypt certificate. I chose my own certificate.
1: Use your own SSL Certificate and Key
2: Use Let's Encrypt to create SSL Certificate and Key
Enter 1 or 2: 1

Fill in the absolute address of the **.crt** file you just uploaded.
Please enter full path to SSL Certificate file:

Fill in the absolute address of the **.key** file you just uploaded.
Please enter full path to SSL Certificate Key file:

At this time, you will get an error after pressing Enter! ! !

nginx: \[warn\] conflicting server name "localhost" on 0.0.0.0:80, ignored

Did not find a better solution, but has updated your SSL certificate! ! !

Solution :

Enter the command lnmp vhost list. If you display two domain names, delete the domain name you just added. If you are not sure, you can try to delete one randomly, and the running ones will not be deleted. (Remember to do a mirror backup in advance)

Go back to the browser and check the certificate! The expiration date is September 30, 2019. The certificate has been updated successfully.