# Let’s Encrypt CAA Rechecking Bug

**URL:** https://discourse.roots.io/t/let-s-encrypt-caa-rechecking-bug/17788
**Category:** trellis
**Tags:** letsencrypt
**Created:** 2020-03-03T19:51:23Z
**Posts:** 2

## Post 1 by @pacotole — 2020-03-03T19:51:24Z

There is a [bug on Lets’s Encrypt](https://community.letsencrypt.org/t/2020-02-29-caa-rechecking-bug/114591) that affects 3 billion of certificates.

I have a trellis+bedrock proyect affected and I have tried to execute the `letsencrypt` role to renew the certificate but it continues to report that it’s affected.

`The certificate currently available on ******.com needs renewal because it is affected by the Let's Encrypt CAA rechecking problem.`

Any ideas to fix it?

_----- SOLVED -------------------------------------------------------------------------_

I have entered via ssh as root, edited `/var/lib/letsencrypt/renew-certs.py` and comment lines 19-21 (young certificate check). After run `./renew-certs.py` to renew certificates and restart nginx. Finally, undo the changes in `renew-certs.py` file.

---

## Post 2 by @swalkinshaw — 2020-03-03T20:55:29Z

You can also just delete the current certificate to force a new one :smile:

To clarify: delete any `*-bundled.cert` files. Of course that would cause a tiny amount of downtime while the renewal happens.

---

## Post 4 by @system — 2020-04-14T19:51:24Z

This topic was automatically closed after 42 days. New replies are no longer allowed.