SSL auto-renewals not running automatically

Virtualmin
1
SYSTEM INFORMATION
OS type and version Debian 11
Webmin version 2.651
Virtualmin version 8.1.0 Professional
Webserver version Apache version 2.4.67
Related packages certbot

Hello,

We are a company providing infrastructure and support for clients running Virtualmin. Our clients have the subscription models. Over the past months we have ran into a problem with automatic SSL renewals via ACME. They are just not performed automatically, even when the option “Automatically renew certificate” is selected.

We have tried this with both Let’s Encrypt certificates as well as with a 3rd party provider. The results are the same, the renewals are not ran automatically. When manually requesting for renewal, the process works and the certificate is indeed renewed. certbot is installed to handle the certificates, as it is needed for the 3rd party ones.

Has anyone ran into this problem? I would love to hear back from the community.

Kind regards,
Andreas

2

Giving more info on this, it appears as if Virtualmin cannot see the SSL expiration date for some reason,

~$ sudo virtualmin get-ssl --domain "$DOMAIN"
cert: /home/www/x/ssl.cert
key: /home/www/x/ssl.key
ca: /home/www/x/ssl.ca
type: rsa
size: 
type: Signed by CA

while the openssl command does see them:

sudo ls -l "$CERT" "$KEY" "$CA"
sudo file "$CERT" "$KEY" "$CA"

sudo openssl x509 \
  -in "$CERT" \
  -noout \
  -subject \
  -issuer \
  -startdate \
  -enddate \
  -serial \
  -fingerprint \
  -sha256

-rwxr-xr-x 1 x x 2496 apr 10 09:20 /home/www/x/ssl.ca
-rwx------ 1 x x 2642 apr 10 09:20 /home/www/x/ssl.cert
-rwx------ 1 x x 1704 apr 10 09:20 /home/www/x/ssl.key
/home/www/x/ssl.cert: PEM certificate
/home/www/x/ssl.key:  ASCII text
/home/www/x/ssl.ca:   PEM certificate

subject=
issuer=C = x, ST = y, L = z, O = c, CN = u
notBefore=Apr 10 07:10:04 2026 GMT
notAfter=Jul 10 07:09:04 2026 GMT
serial=redacted
SHA256 Fingerprint=redacted

Is this the expected behavior?