Let's Encrypt CAA Rechecking Incident

VirtuBox · Mar 4, 2020

Hello Everyone,

Let's Encrypt announced yesterday an incident with their CAA Rechecking system and will revoke many TLS/SSL certificates today. You can verify if a domain certificate is going to be revoked today with the following command (just replace yourdomain.tld with the domain you want to check) :

curl -XPOST -d 'fqdn=yourdomain.tld' https://checkhost.unboundtest.com/checkhost

If you want to force renewal of all SSL/TLS certificates hosted on a server with WordOps, you can use the following command :

acme.sh --renew-all --force

Official announcement : https://community.letsencrypt.org/t/revoking-certain-certificates-on-march-4/114864

jond1 · Mar 4, 2020

Thanks for the advisory to help keep the community up to date!

Mmdoooooot · Mar 5, 2020

Web tool:

https://checkhost.unboundtest.com/