[GH-ISSUE #3251] Keeps trying to renew deleted certificates #2194

Open
opened 2026-02-26 07:34:27 +03:00 by kerem · 5 comments
Owner

Originally created by @Waldorf3 on GitHub (Oct 10, 2023).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3251

After changing from using domain based certificates to DNS based challenge, and now having just one wild-card cert for all my domains, I deleted all the old per-domain certificates (through the GUI, one by one).

Container logs now show it still tries (and fails) to renew all the deleted certificates. Obviously something goes wrong when certificates are deleted, and the database isn't updated correctly.

npm  | Failed to renew certificate npm-11 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-12 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-13 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-14 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-2 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-3 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-4 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-5 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-8 with error: Some challenges have failed.
npm  | Failed to renew certificate npm-9 with error: Some challenges have failed.
npm  | All renewals failed. The following certificates could not be renewed:
npm  |   /etc/letsencrypt/live/npm-11/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-12/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-13/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-14/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-2/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-3/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-4/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-5/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-8/fullchain.pem (failure)
npm  |   /etc/letsencrypt/live/npm-9/fullchain.pem (failure)
npm  | 10 renew failure(s), 0 parse failure(s)

v2.10.4 © 2023 jc21.com. Theme by Tabler

Originally created by @Waldorf3 on GitHub (Oct 10, 2023). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3251 After changing from using domain based certificates to DNS based challenge, and now having just one wild-card cert for all my domains, I deleted all the old per-domain certificates (through the GUI, one by one). Container logs now show it still tries (and fails) to renew all the deleted certificates. Obviously something goes wrong when certificates are deleted, and the database isn't updated correctly. ``` npm | Failed to renew certificate npm-11 with error: Some challenges have failed. npm | Failed to renew certificate npm-12 with error: Some challenges have failed. npm | Failed to renew certificate npm-13 with error: Some challenges have failed. npm | Failed to renew certificate npm-14 with error: Some challenges have failed. npm | Failed to renew certificate npm-2 with error: Some challenges have failed. npm | Failed to renew certificate npm-3 with error: Some challenges have failed. npm | Failed to renew certificate npm-4 with error: Some challenges have failed. npm | Failed to renew certificate npm-5 with error: Some challenges have failed. npm | Failed to renew certificate npm-8 with error: Some challenges have failed. npm | Failed to renew certificate npm-9 with error: Some challenges have failed. npm | All renewals failed. The following certificates could not be renewed: npm | /etc/letsencrypt/live/npm-11/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-12/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-13/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-14/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-2/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-3/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-4/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-5/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-8/fullchain.pem (failure) npm | /etc/letsencrypt/live/npm-9/fullchain.pem (failure) npm | 10 renew failure(s), 0 parse failure(s) ``` v2.10.4 © 2023 [jc21.com](https://jc21.com/?utm_source=nginx-proxy-manager). Theme by [Tabler](https://tabler.github.io/?utm_source=nginx-proxy-manager)
Author
Owner

@github-actions[bot] commented on GitHub (May 30, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:2138528373 --> @github-actions[bot] commented on GitHub (May 30, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@nik2208 commented on GitHub (Aug 27, 2024):

needed to set as deleted all table 'certificate' rows referring to deleted domain names. that solved the issue

<!-- gh-comment-id:2311464749 --> @nik2208 commented on GitHub (Aug 27, 2024): needed to set as deleted all table 'certificate' rows referring to deleted domain names. that solved the issue
Author
Owner

@github-actions[bot] commented on GitHub (Jun 1, 2025):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:2926293976 --> @github-actions[bot] commented on GitHub (Jun 1, 2025): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@github-actions[bot] commented on GitHub (Jan 22, 2026):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:3782127999 --> @github-actions[bot] commented on GitHub (Jan 22, 2026): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@Waldorf3 commented on GitHub (Jan 23, 2026):

needed to set as deleted all table 'certificate' rows referring to deleted domain names. that solved the issue

still unresolved. Would be nice if someone would fix it instead of just repeatedly closing it

<!-- gh-comment-id:3788881855 --> @Waldorf3 commented on GitHub (Jan 23, 2026): > needed to set as deleted all table 'certificate' rows referring to deleted domain names. that solved the issue still unresolved. Would be nice if someone would fix it instead of just repeatedly closing it
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#2194
No description provided.