Home/Notes/Managing certificate renewals at a plumber
Managing certificate renewals at a plumber
14 May 2026
How a plumber deals with certificate renewals — and what usually goes wrong.
The problem: a CAA record that blocks the new CA. The certificate chain breaks for a plumber.
Nobody at a plumber could remember who had configured certificate renewals. The credentials were in a text file inside a folder called OLD STUFF on a shared drive.
Email deliverability is nobody’s favourite topic, but a plumber lost two bookings because certificate renewals was misconfigured and replies landed in spam for a week.
When we reviewed certificate renewals, the DNS panel showed a CAA record that blocks the new CA. Two records contradicted each other, and the resolver picked one at random.
The registrar dashboard crashed twice while we were fixing certificate renewals for a plumber. We filed a ticket; they replied four days later with a template answer.
A friend of the owner at a plumber had set up certificate renewals years ago. When we audited, the config still pointed at a server they stopped paying for in 2024.
The chain of trust for certificate renewals starts at the registrar. If the registrar account uses an email nobody reads, every downstream fix is temporary.
We keep a playbook for certificate renewals. Step one is always the same: pull the live record with dig, compare it to what the admin panel shows, and fix the mismatch.
Related notes
Tell us what you need.
Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.
hello@digitalserved.com