And the other thing to remember: when the certificate renews, restart/reload your services, to use the new certificate(s). I use puppet to pass certificates around, and trigger an apache reload when needed, similarly with dovecot and postfix for mail. John