# WARNING: Your certificate has expired! **URL:** \ **Category:** Pritunl VPN\ **Tags:** pritunl\ **Created:** [November 5, 2025, 9:49am UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605 "2025-11-05T09:49:40Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![littlepepega](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/l/db5fbb/32.png) [@littlepepega](https://forum.pritunl.com/u/littlepepega)\ **Post date:** [November 5, 2025, 9:49am UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/1 "2025-11-05T09:49:40Z")
Hello, It seems I have a problem with server certificate but there is no information about how to renew it. I don’t have a domain, clients connecting to IP. Server log: WARNING: Your certificate has expired! ---
**Author:** ![littlepepega](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/l/db5fbb/32.png) [@littlepepega](https://forum.pritunl.com/u/littlepepega)\ **Post date:** [November 5, 2025, 2:00pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/2 "2025-11-05T14:00:00Z")
I accidentally found out that the certificate is issued for 10 years with no option to renew. By the time I discovered this, I had already spent 4 hours of downtime. I’d really like to see this information in the documentation - especially since I’m a paid subscriber. ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [November 5, 2025, 3:48pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/3 "2025-11-05T15:48:39Z")
This was improved in [**v1.32.4400.99**](https://forum.pritunl.com/t/pritunl-v1-32-4400-99/3562) which will show a warning in the web console when this is occurring. It will require deleting the organization and creating a new one. ---
**Author:** ![tomconnors](https://forum.pritunl.com/user_avatar/forum.pritunl.com/tomconnors/32/1392_2.png) [@tomconnors](https://forum.pritunl.com/u/tomconnors)\ **Post date:** [November 17, 2025, 3:47pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/4 "2025-11-17T15:47:43Z")
I’m also seeing this warning, and my users can’t connect to the VPN. Am I understanding correctly that the only option is to delete the existing organization and users and recreate new users in a new organization, and have my users set up new VPN client configs for their new user accounts? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [November 17, 2025, 11:07pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/5 "2025-11-17T23:07:13Z")
Yes that is currently the only option, an option to renew it will be added in the future. ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [November 18, 2025, 12:41am UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/6 "2025-11-18T00:41:40Z")
I have developed a solution to this issue to renew a organization CA certificate and all user certificates with minimal disruption. A command `pritunl renew-org ` will be added to the next release that will renew the organization CA certificate then iterate through all users and renew the user certificate. This could take several minutes for large organizations so it will only be available on a command to avoid disrupting the process before it completes. Currently the client configuration sync will only accept an updated CA certificate not a user certificate. An updated client release will be made available to sync the user certificate using configuration sync. Users that have an old user certificate should be able to continue to connect assuming it is not expired. An expired user certificate is less likely as these were likely created later on. ---
**Author:** ![Moor](https://forum.pritunl.com/user_avatar/forum.pritunl.com/moor/32/1002_2.png) [@Moor](https://forum.pritunl.com/u/Moor)\ **Post date:** [November 18, 2025, 11:40am UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/7 "2025-11-18T11:40:24Z")
Could you tell me which versions this affects? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [November 18, 2025, 11:50am UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/8 "2025-11-18T11:50:24Z")
This doesn’t effect any specific version. Originally organizations were created with CA certificates that had a 10 year expiration. Pritunl was released just over 10 years ago. As these old installations start hitting the 10 year expiration the error will occur. The current version creates CA certificates with a 30 year expiration. ---
**Author:** ![Nicolas](https://forum.pritunl.com/user_avatar/forum.pritunl.com/nicolas/32/27_2.png) [@Nicolas](https://forum.pritunl.com/u/Nicolas)\ **Post date:** [November 18, 2025, 7:21pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/9 "2025-11-18T19:21:40Z")
pritunl client sync for CA and client cert mean a PKI server could push organization CA with the api ? or pritunl could ask the pki server for renewed intermediate CA before it exipre ? issue client cert with the newer intermediate CA instead of the old one and sync to pritunl client after disconnect and re-auth ? just asking 🙂 but for this we should be able to set the validation period of client cert too for this to make sense. vpn server will need to rotate it’s new certificate too at some point 🙂 ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [November 18, 2025, 8:57pm UTC](https://forum.pritunl.com/t/warning-your-certificate-has-expired/3605/10 "2025-11-18T20:57:48Z")
The next release will have the option `sudo pritunl set user.cert_expire_days 10000` to adjust the certificate expiration.