Lumen help

Regenerating a Let's Encrypt certificate

You can regenerate a Let's Encrypt certificate to make changes to the certificate such as adding additional host names, updating the key encryption, or changing the common name. Once you make the changes, you need to promote a configuration referencing the certificate to production.

Standard certificates

Certificate state	Description
active	The certificate is active and usable in Media portal.
stdPending	Standard certificates only. The certificate is being refreshed. The certificate may or may not be active during this load as well.

Let's Encrypt certificates

Certificate state	Description	Editable in this state?
active	The certificate is active and usable in Media portal.	Yes
leAcceptedCsrData	CSR data has been accepted as first step of creating/renewing the certificate.	No
leCnameCreationStarted	CName records are being created.	Yes
leCnameCreationComplete	CName records have been created.	Yes
leCreateRenewStarted	Let's Encrypt has started creating/renewing the certificate.	No
leCreateRenewWorkingChallenges	The Let's Encrypt agent is currently working through challenges while creating/renewing this certificate.	No
leCreateRenewAwaitingLeResponse	The Let's Encrypt agent waiting for the Let's Encrypt service while creating/renewing this certificate.	No
leCreateRenewFailed	Create/renew failed and there is no currently active certificate for this record.	Yes
leCleaningConfigs	Configurations are being cleaned	--
leRevokeInProgress	Certificate is in the process of being revoked.	--
leCnameCreationFailed	CName/FPDS records could not be created.	Yes
leRevokeComplete	The certificate was revoked successfully.	--
leRevokeFailed	The certificate could not be revoked.	--
leUnreferenced	The certificate isn't referenced by any SI in any production slot.	--

From the main menu, select My Services > Caching.

From the lists, select the access group and SCID (service component ID) you want to work with.

My Services - Caching (with SCID selected)

Click Manage Certificates.

Media portal lists the certificates associated with the SCID you selected. Certificates in active state are ready to use; certificates with other states may need your attention or may still being processed. Use the section below to learn more about certificate states, click the section below.

My Services - Caching (Manage Certificates)

To regenerate a Let's Encrypt certificate:

In the list of certificates, click Regenerate LE (in the Actions column) on the row for the certificate.

Make your changes to the certificate. When you're done, click Update.

Media portal saves your changes on the Pending tab in the certificate details.