# Linkerd check --proxy

**URL:** https://linkerd.buoyant.io/t/linkerd-check-proxy/664
**Category:** Linkerd General Discussion
**Tags:** certificates
**Created:** [December 23, 2024, 8:16pm UTC](https://linkerd.buoyant.io/t/linkerd-check-proxy/664 "2024-12-23T20:16:40Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![dverzolla](https://yyz1.discourse-cdn.com/flex029/user_avatar/linkerd.buoyant.io/dverzolla/32/152_2.png) [@dverzolla](https://linkerd.buoyant.io/u/dverzolla)
#### Post date: [December 23, 2024, 8:16pm UTC](https://linkerd.buoyant.io/t/linkerd-check-proxy/664/1 "2024-12-23T20:16:41Z")

</div>

Hi,

The command `linkerd check --proxy` say:

```auto
× trust anchors are within their validity period
    Invalid anchors:
	* 89759643423159114364408881931985711234 root.linkerd.cluster.local not valid anymore. Expired on 2024-10-23T14:27:09Z
    see https://linkerd.io/2/checks/#l5d-identity-trustAnchors-are-time-valid for hints

```

I have already renewed the certificates, restarted the deployments (cert-manager, linkerd, apps, etc) but `linkerd check --proxy` still error in this point.

I have even connected into the node and checked if the mounted root certificate configmap is right, and it is.

Where does `linkerd check --proxy` grab the old certificate from?  
Thanks

---

<div class="post-metadata">

### Author: ![ChrisHolloway](https://avatars.discourse-cdn.com/v4/letter/c/df705f/32.png) [@ChrisHolloway](https://linkerd.buoyant.io/u/ChrisHolloway)
#### Post date: [December 30, 2024, 11:04am UTC](https://linkerd.buoyant.io/t/linkerd-check-proxy/664/2 "2024-12-30T11:04:29Z")

</div>

Replying for the update.

---

<div class="post-metadata">

### Author: ![dverzolla](https://yyz1.discourse-cdn.com/flex029/user_avatar/linkerd.buoyant.io/dverzolla/32/152_2.png) [@dverzolla](https://linkerd.buoyant.io/u/dverzolla)
#### Post date: [December 30, 2024, 2:25pm UTC](https://linkerd.buoyant.io/t/linkerd-check-proxy/664/3 "2024-12-30T14:25:03Z")

</div>

Adding more information here:

```auto
Client version: edge-24.7.2
Server version: edge-24.7.2

```

---

<div class="post-metadata">

### Author: ![Mahendran](https://yyz1.discourse-cdn.com/flex029/user_avatar/linkerd.buoyant.io/mahendran/32/217_2.png) [@Mahendran](https://linkerd.buoyant.io/u/Mahendran)
#### Post date: [December 31, 2024, 12:44am UTC](https://linkerd.buoyant.io/t/linkerd-check-proxy/664/4 "2024-12-31T00:44:42Z")

</div>

Update the control plane and check the proxy injection.If not updated,Please re-inject the linked proxy