I just renewed the SSL certificate for a domain and installed the new files on my AWS server running Apache. All appears to be ok, but the browser still shows the old expiration date. Is there a way I can somehow "uncache" the certificate, or otherwise get a browser to display the new expiration date so I can tell if it's all working? I've tried restarting both Apache and the browser. Thanks!
Found the answer to my own problem. I'll post it here in case my stupidity helps someone else. :-)
I actually have two AWS web servers, with a load balancer in front of them. I discovered that the new certificate actually displayed fine in the browser if I hit each web server directly, but failed if I went to "www" through the load balancer.
I forgot to upload the new certificate files to the load balancer through AWS's Management Console. This page describes the process:
Note that the private and public key files you copy and paste there have to be in RSA format. This web page describes how to convert your files to that format if needed:
After all that, the browser immediately displays the new certificate. No delay, no caching. Thanks for the comments above anyway.