检查 crontab 任务列表

crontab -l

如果能看到类似16 7 * * * "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" > /dev/null的任务，则说明acme已经设置了自动续期。

手动模拟自动续期检查

acme.sh --cron --home /root/.acme.sh

如果能看到类似下边的日志，也说明正常：

[Wed Jul  1 06:30:12 EDT 2026] ===Starting cron===
[Wed Jul  1 06:30:12 EDT 2026] Already up to date!
[Wed Jul  1 06:30:12 EDT 2026] Upgrade successful!
[Wed Jul  1 06:30:13 EDT 2026] Automatically upgraded to: 3.1.4
[Wed Jul  1 06:30:13 EDT 2026] Renew: 域名
[Wed Jul  1 06:30:13 EDT 2026] Renewing: '域名'
[Wed Jul  1 06:30:13 EDT 2026] Renewing using Le_API=https://acme-v02.api.letsencrypt.org/directory
[Wed Jul  1 06:30:13 EDT 2026] Skipping invalid cert for: 域名
[Wed Jul  1 06:30:13 EDT 2026] Skipped 域名_ecc
[Wed Jul  1 06:30:13 EDT 2026] Renew: 域名
[Wed Jul  1 06:30:13 EDT 2026] Renewing: '域名'
[Wed Jul  1 06:30:13 EDT 2026] Renewing using Le_API=https://acme-v02.api.letsencrypt.org/directory
[Wed Jul  1 06:30:14 EDT 2026] ARI suggestedWindow starts at: 2026-08-29T12:08:35Z
[Wed Jul  1 06:30:14 EDT 2026] Skipping. Next renewal time is: 2026-08-30T00:44:09Z
[Wed Jul  1 06:30:14 EDT 2026] Add '--force' to force renewal.
[Wed Jul  1 06:30:14 EDT 2026] Skipped 域名_ecc
[Wed Jul  1 06:30:14 EDT 2026] ===End cron===

注意：这个命令不一定会真的续期，因为证书没到续期时间时会提示跳过，这是正常的。

也可以查看这个域名的 acme.sh 配置

cat /root/.acme.sh/域名/域名.conf

看里边是否有类似以下的内容：

Le_Webroot='/home/wwwroot/html'
Le_Keylength='ec-256'
Le_NextRenewTimeStr='2026-08-30T00:44:09Z'
Le_RealKeyPath='/etc/x-ui/server.key'
Le_RealFullChainPath='/etc/x-ui/server.crt'
Le_ReloadCmd='__ACME_BASE64__START_bmdpbnggLXQgJiYgc3lzdGVtY3RsIHJlbG9hZCBuZ2lueA==__ACME_BASE64__END_'

Le_ReloadCmd='__ACME_BASE64__START_bmdpbnggLXQgJiYgc3lzdGVtY3RsIHJlbG9hZCBuZ2lueA==__ACME_BASE64__END_'解码后就是nginx -t && systemctl reload nginx

手动检查域名证书到期时间

openssl x509 -in /etc/x-ui/server.crt -noout -dates