How to reissue cert for additional hostnames (SANs)

Support
1

How can I reissue the cert for the main host to additional hostnames (SANs)?

Trying to fix mail errors: "Hostname/IP does not match certificate's altnames: Host: mail.host.com. is not in the cert's altnames: DNS:server.host.com, DNS:123.host.cloud",

2 
cpcmd letsencrypt:append '[some.new.hostname,host.name.2.com]'

Alternatively, override ssl_hostnames. Hostname preservation behavior is simpler because it adds the hostname + renewal in one step.

3

Thank you, will give that a try.

Another question, what’s the command to resync a domains DNS from Cloudflare?

4

dns:reset will restore all original records for a domain - removing anything foreign and adding any missing records.

If you’d like to import remote records when changing nameservers from a provider to Cloudflare, that’s a service they provide directly. To know the nature of all DNS records of a domain requires enumerating the entire label space (~[a-z0-9-.]^253) for all records, something they have the computing power to do. SecurityTrails provides a similar service.