Change base domain name for Lets Encrypt SSL certificate

Question

I have used Let's Encrypt to allow me to set up SSL/HTTPS on my server.

The issue is that I run a number of sub-domains too, which I included on the initial install, but looking back now - the certificate details show that it was issued to one of my sub-domains.

I'm wanting to change this to my base domain, but I'm just not sure how to do this.

I have tried running letsencrypt-auto --apache -d example.me -d www.example.me -d mysql.example.me

This went through the process but did not change anything, as the certs are already issued.

How can I change the certificates now, or reissue them so that they are issued to my base domain?

Solution 1

You can simply force renewal:

./certbot --apache -d example.me -d www.example.me -d mysql.example.me --force-renewal

Reference: https://community.letsencrypt.org/t/change-base-domain-name-for-lets-encrypt-ssl-certificate-in-certbot/16955/2

Solution 2

You can revoke your current cert and reissue with -d example.com in first followed by subdomains.

To revoke do:

$ letsencrypt revoke --cert-path example-cert.pem

And reissue with the command you already have.

NOTE: be aware of usage limits or you may end up not issuing more certificates for sometime.