Verification Issues Renewing Let’s Encrypt Free SSL On AWS Light Sail

Having trouble renewing your free SSL on Amazon's Lite Sail service? I had many frustrations trying to accomplish this.

First open up your terminal window on the Light Sail Instance

Run the following command:

sudo certbot -d -d --manual --preferred-challenges dns certonly

Amazon AWS Lightsail SSL Renewal Example Terminal Commands

This will return two values you have to enter at your domain registrar and add a TXT record.


When checking propagation you need to use when searching for the TXT record the following values:

If you use just your domain name ( it will return SPF records.

Once they have propagated then you can stop and start apache using the commands below. Rebooting the instance doesn't always work and loads the Apache2 start page.

sudo service apache2 stop
sudo /opt/bitnami/ start apache