Concise Accountancy

Accountants and Registered Auditors

Latest newsStarting a business

Renew SSL certificate in AWS Lightsail

You can renew of your SSL certificate in AWS Lightsail. The default SSL certificate lasts for 90 days and you can renew it after 30 days.

The great news is that you can auto-configure your SSL certificate using the Bitnami HTTPS configuration Tool to automatically renew your SSL certificate. It is very easy to execute. All you have to do is to go to your WordPress instance to launch the Bitnami. See picture below.

Your Bitnami will be launched, see the picture below. You enter the following command after the :-$, to launch the Bitnami HTTPS configuration tool.

sudo /opt/bitnami/bncert-tool

If a message prompt you, an updated version is available. Would you like to download it? You would need to run it manually later. (Y/N) enter Y.

The tool will exit now. To run the updated version run the following command:


Close the current bitnami and re-launched it again and execute the following command. You must add the word “sudo and space in front the command /opt/bitnami/bncert-tool otherwise you would get an error message. See picture below.

sudo /opt/bitnami/bncert-tool

Following that, please provides a valid space-separated list of domains for which you wish to configure your web server.

Domain list []: Enter your domain name here. e.g.

The tool will prompt you:

The following domains were not included: Do you want to add them? [Y/N] enter Y.

Then, answer the rest of the questions appear on-screen as follows:

  • Q1. To enable HTTP to HTTPS redirection [Y/N]: Y
  • Q2. Enable non-www to www redirection [Y/N]: N (if your website address is set up without the www. in the front).
  • Q3. Enable www to non-www redirection [Y/N]: Y

Changes to perform

Based on your answers to the questions above, the tool will perform the following changes to your Bitnami installation:

  1. Stop the web server.
  2. Configure web server to use a free Let’s Encrypt certificate for the domains:
  5. Configure a cron job to automatically renew the certificate each month.
  6. Configure web server name to
  7. Enable HTTP to HTTPS redirection (example: redirect to
  8. Enable www to non-www redirection (example: redirect to
  9. Start web server once all changes have been performed

Do you agree to these changes? [Y/n]: enter Y if you agree. Enter N if you would like to change your original answers to Q1 to Q3.

Create a free HTTPS certificate with Let’s Encrypt

You would require to provide a valid e-mail address for which to associate your Let’s Encrypt certificate for your domain list: and, and Server name:

E-mail address []:

Enter Y = yes, when prompted if you would agree to the Let’s Encrypt Subscriber Agreement.

Thereafter, the Bitnami HTTPS Configuration Tool will perform the changes to your Bitnami installation. This may take some time, please be patient.


The tool will notify you when the Bitnami HTTPS Configuration Tool succeeded in modifying your installation.

In addition, it will provide you with the following configuration reports:

Backup files:

  • /opt/bitnami/apache2/conf/httpd.conf.back.202001121659
  • /opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf.back.202001121659
  • /opt/bitnami/apache2/conf/bitnami/bitnami.conf.back.202001121659

Find more details in the log file: /tmp/bncert-202001121659.log

If you find any issues, please check Bitnami Support forums at:

That’s it. Your installation steps in Amazon Web Services (AWS) console is complete. It is very easy to renew your SSL certificate in AWS Lightsail for your business website.

On the same note, to double confirm your SSL certificate renewal is successful, you can use the SSL Server Test to test your server. Enter your website address and click submit. If your installation is successful, you will get an overall rating of A.

For this purpose, the SSL certificate auto-renewal covers one year 2 months. For example, If you configure your SSL certificate auto-renewal today, 12 Jan 2020, the Bitnami HTTPS configuration tool will auto-renew your SSL certificate till 17 March 2021. You can also find these details on the SSL Labs test result.

Share this post


Comments are closed.

%d bloggers like this: