Google: Chrome will no longer trust Symantec certificates, 30% of the web will need to switch Certificate Authorities

[orenwolf]

@werdnagreb

Yes! We fell for that, too. We put an entry in our cron job and thought that was that, but turns out there was a bug in one of the update scripts coming from letsencrypt. And the renewal was failing, but we had no idea. We found out the hard way when our certs expired. Thankfully, it was a quick fix and our customers never complained, but still it was nervewracking.

I recommend a site like Track SSL to generate notifications when your certs are near expiry. That way if your crons fail, well - you’ll get extra notifications before they expire.