Quite often you get plugin error when renewing your ssl using certbot in amazon lightsail (bitnami)

sudo certbot renew

Here is the error

Cert is due for renewal, auto-renewing…
Could not choose appropriate plugin: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError(‘An authentication script must be provided with –manual-auth-hook when using the manual plugin non-interactively.’)
Failed to renew certificate best-citizenships.com with error: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError(‘An authentication script must be provided with –manual-auth-hook when using the manual plugin non-interactively.’)


All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/domain.com/fullchain.pem (failure)


1 renew failure(s), 0 parse failure(s)

The error means you have to generate certificate manually, cannot be done automatically. Follow the instructions below

Easy Fix

First check the ssl certificates installed. You will see the list of domains..

sudo certbot certificates -d example.com
sudo /opt/bitnami/ctlscript.sh stop
sudo certbot certonly --manual --preferred-challenge dns -d example.com -d *.example.com --force-renewal
sudo /opt/bitnami/ctlscript.sh stop

Thats it! Your new certificate should be installed automatically and working.