Azure App Service serving old certificate

Question

Azure App Service serving old certificate

Deepak Kumar 6

Hi,

I am facing issue with Azure App Service Certificate. I can see new certicate in azure app service but on browser still getting old certificate.

2 answers

Your answer

Answer 1

Deepak Kumar 6

Yes i was able to identify the root cause in this case. In this case traffic going vai App Gateway in Azure and over there we have old certificate. Which creating the issue.

Answer 2

Manu Philip 20,206 MVP Volunteer Moderator

App Service automatically syncs the certificate when the job to sync the certificate run and can take up to 48 hours. If the sync didn't happen since the new certificate is deployed, there are chances of issues as you face.

You can force a sync the certificate as below:

Select App Service Certificates > select the certificate
Select Rekey and Sync, and then select Sync. The sync takes some time to finish
When the sync is completed successfully, the following notification should appear: "Successfully updated all the resources with the latest certificate."

The above steps should fix the issue you face

If the Answer is helpful, please click "Accept Answer" and upvote it

Deepak Kumar 6 Reputation points

2022-02-25T09:51:58.237+00:00

Hi,

In the Azue app service i am able to see new certificate so i think sync is already complete even i try to manual sync as well but no luck.
Manu Philip 20,206 Reputation points MVP Volunteer Moderator

2022-02-25T09:57:57.96+00:00

If that's the case, have you tried to check his in another browser of another computer?
Deepak Kumar 6 Reputation points

2022-02-25T10:06:05.45+00:00

yes we checked everywhere getting the old certificate.
Manu Philip 20,206 Reputation points MVP Volunteer Moderator

2022-02-25T10:16:05.25+00:00

Are you using SNI bindings along with IP SSL bindings? Here I see a similar issue reported and the final thread looks like a solution
Deepak Kumar 6 Reputation points

2022-02-25T11:41:39.3+00:00

Hi,

Thanks for your response. No this is SNI Based Binding but i am seeing old certificate under custom domain.
Manu Philip 20,206 Reputation points MVP Volunteer Moderator

2022-02-25T14:15:35.66+00:00

As indicated in the reference above, If you have an SNI SSL binding to <app-name>.azurewebsites.net, remap any CNAME mapping to point to sni.<app-name>.azurewebsites.net instead (add the sni prefix).
Manu Philip 20,206 Reputation points MVP Volunteer Moderator

2022-03-01T07:52:00.753+00:00

Have you find fixing the issue? If so, please mark the relevant thread as answer so that others with similar issue can find the solution for their similar requirements.. Thanks
Deepak Kumar 6 Reputation points

2022-03-01T11:44:08.863+00:00

Hi Manu,

Yes i was able to identify the root cause in this case. In this case traffic going vai App Gateway in Azure and over there we have old certificate.

Share via

Azure App Service serving old certificate

2 answers

Your answer