2026-05-01 13:39:05,140:DEBUG:certbot._internal.main:certbot version: 1.22.0 2026-05-01 13:39:05,141:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot 2026-05-01 13:39:05,141:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew'] 2026-05-01 13:39:05,141:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-05-01 13:39:05,153:DEBUG:certbot._internal.log:Root logging level set at 30 2026-05-01 13:39:05,158:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/zeta.validns.com.conf 2026-05-01 13:39:05,169:DEBUG:certbot._internal.plugins.selection:Requested authenticator and installer 2026-05-01 13:39:05,181:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/zeta.validns.com/cert2.pem 2026-05-01 13:39:05,183:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-05-29 07:53:36 UTC. 2026-05-01 13:39:05,183:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing... 2026-05-01 13:39:05,184:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2026-05-01 13:39:05,185:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: Authenticator, Plugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: Prep: True 2026-05-01 13:39:05,186:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2026-05-01 13:39:05,186:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2026-05-01 13:39:05,192:DEBUG:certbot._internal.main:Picked account: ), creation_host='zeta.validns.com', register_to_eff=None))> 2026-05-01 13:39:05,193:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2026-05-01 13:39:05,194:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2026-05-01 13:39:05,330:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033 2026-05-01 13:39:05,331:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:05 GMT Content-Type: application/json Content-Length: 1033 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "i9ieLZVw0fA": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived", "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2026-05-01 13:39:05,332:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for zeta.validns.com 2026-05-01 13:39:05,492:DEBUG:certbot.crypto_util:Generating RSA key (2048 bits): /etc/letsencrypt/keys/0004_key-certbot.pem 2026-05-01 13:39:05,494:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0004_csr-certbot.pem 2026-05-01 13:39:05,495:DEBUG:acme.client:Requesting fresh nonce 2026-05-01 13:39:05,495:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2026-05-01 13:39:05,513:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2026-05-01 13:39:05,513:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:05 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 3A87yRk9Q5PKS9Pc-jJCqxGMtZaKmZA8ewKKWkKwDIhwhxc3kok X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2026-05-01 13:39:05,514:DEBUG:acme.client:Storing nonce: 3A87yRk9Q5PKS9Pc-jJCqxGMtZaKmZA8ewKKWkKwDIhwhxc3kok 2026-05-01 13:39:05,514:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "zeta.validns.com"\n }\n ]\n}' 2026-05-01 13:39:05,516:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOVE1UEtTOVBjLWpKQ3F4R010WmFLbVpBOGV3S0tXa0t3RElod2h4YzNrb2siLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "g_3Q9XYE1Bti4aQO6bkh0ilDmHdhzMyWwdbI5h9FQ9STqOJYmjcUP9aHAU5erUi90nKk1G86RFIDZ9oFnV7Wf1F84OeYSZDzR8JEjb9hOOjxoV8rTQz6gDzTJT-rGHr8hy4eBC7q9cKuZeRDTLj3easdLR1lvqcHblt_QQGnzTJO8T9xOVXhN9Xaqn7BQhnyW8b7XSLuX-s_ZWm_V8ffPRa50mv05O-i7_K0ClVBHNcM-nDbdRmOna9sthQ3pig2mxwI8Dhl87ELwbCxalkH6iuit6DdYYyLVpVikW1PvYqDMrf2BbhEldtjja168EjUiKwkoLZGUgyLFDtOJvHEYQ", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInpldGEudmFsaWRucy5jb20iCiAgICB9CiAgXQp9" } 2026-05-01 13:39:05,555:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 350 2026-05-01 13:39:05,556:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Fri, 01 May 2026 19:39:05 GMT Content-Type: application/json Content-Length: 350 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/2915156736/506312208985 Replay-Nonce: 3A87yRk9SL3RFO7IUDktCPmWM-6Z_i-csJNkcdd-ZfqK3hLorFo X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2026-05-08T19:39:05Z", "identifiers": [ { "type": "dns", "value": "zeta.validns.com" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2915156736/506312208985" } 2026-05-01 13:39:05,556:DEBUG:acme.client:Storing nonce: 3A87yRk9SL3RFO7IUDktCPmWM-6Z_i-csJNkcdd-ZfqK3hLorFo 2026-05-01 13:39:05,556:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:05,557:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOVNMM1JGTzdJVURrdENQbVdNLTZaX2ktY3NKTmtjZGQtWmZxSzNoTG9yRm8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "A2n4DrjLmjzOvFDcAx2AnA_wSLVg5TGh0ZCQI0qyW0fA0YQUMGbL4A5wK8T-3sWuFYfDOVhupRNV_Q3WhuA6trPRnI_QX9zth_LWeh49HsN0wQS_oByZ9mQHjx7pflB8T4OZV9xU3JBVCRqLJ-Rg5PRF2VhomihaOZrUES43LxfWjTTjLdyJkCJOrRjkji7k19XKWldp_tfJZYlklFotxrSLbLTnoEJqhofRcVlHIsB40HaO6D-4qG8C6BgMHXarre7PIbhNefScFdUkVT_g-cVigxEp0HicJhoS0OXqsN-VVHCht8BtF_0fY0LHKCkfg1YLKREvsfP6-9H6NyJLLg", "payload": "" } 2026-05-01 13:39:05,579:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 824 2026-05-01 13:39:05,579:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:05 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKV1p41JfiscbPMsfvDKwC_kvPHRUm81fL91pwrc9rPr8 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/o4em5g", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/Wt2IVg", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } ] } 2026-05-01 13:39:05,579:DEBUG:acme.client:Storing nonce: VJnpPdsKV1p41JfiscbPMsfvDKwC_kvPHRUm81fL91pwrc9rPr8 2026-05-01 13:39:05,580:INFO:certbot._internal.auth_handler:Performing the following challenges: 2026-05-01 13:39:05,580:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 13:39:05,580:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains. 2026-05-01 13:39:05,580:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge 2026-05-01 13:39:05,582:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo 2026-05-01 13:39:05,583:DEBUG:acme.client:JWS payload: b'{}' 2026-05-01 13:39:05,584:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS1YxcDQxSmZpc2NiUE1zZnZES3dDX2t2UEhSVW04MWZMOTFwd3JjOXJQcjgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1L2lNdHloUSJ9", "signature": "OYQRjo-rLiFTmzqZk21mctT25l-aFBkqvRp5-FsVU8A5ZvHkEgFJNtZ8Wf1GR3x_clE2-ZqPrwhoKhgEZtOK81jrgl3tyv_1bR7-92n7Sr3uzE3lvpuFml_OPle9hwtXu0eRJ6JZCqwVfxl6HhzwjXaxe7baoHUqQBYbYSUjyOH5U3Yo9pzBDeD4f-9D9bBAxvW__tzQDlIqifb78PKEQnScsmugRPmTkWmWqyjenNPaudxSR1Aqa8GUmIs6SR48sPnXKcn3kyZrO9vL8YFcDGxcI_q8FMokLQT1319Cn_olv_nJJ79fgUiYqVc0VScMaqdxiIyKFiamZ9xUNUA_9Q", "payload": "e30" } 2026-05-01 13:39:05,605:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2915156736/696957522995/iMtyhQ HTTP/1.1" 200 195 2026-05-01 13:39:05,606:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:05 GMT Content-Type: application/json Content-Length: 195 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ Replay-Nonce: 3A87yRk9lzk3cU-OZ-B7geiWmbhRGiUBy1uXJ2qVG9Fy_wzPWKc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } 2026-05-01 13:39:05,606:DEBUG:acme.client:Storing nonce: 3A87yRk9lzk3cU-OZ-B7geiWmbhRGiUBy1uXJ2qVG9Fy_wzPWKc 2026-05-01 13:39:05,606:INFO:certbot._internal.auth_handler:Waiting for verification... 2026-05-01 13:39:06,608:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:06,610:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOWx6azNjVS1PWi1CN2dlaVdtYmhSR2lVQnkxdVhKMnFWRzlGeV93elBXS2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "dk3A_7MyhaC6SliC_y3PWkJ8oKLDOs79bQyj46EawwcNyoG9G0avyFDd3tQBJQoxT_hKEL4IYI5iLAICFSWQkTlRzOcwOo-mS5MLvkKL7fTCiqUYWn9ofkMqQeY2m1cas8wf5-Wslh9SZIDeipLiIuZrnlTdTNFrlH4BKgi3V6Gr1J0a31AFL8e7iQGdnIPs0WHz4vh-fvJTAW0Y3QxV5NlS43TarJTEGAz29Pc_JvnBgqbSWNRm7cF7mQaCYzUCKXUgKHadCnGA9etM2-LhL7dHs-DkJ-dANfQBH_FUvtht4D6U03Yuqz4YWaWNxaSsAGzfH0DjSEIsjjHlhWDntg", "payload": "" } 2026-05-01 13:39:06,633:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 824 2026-05-01 13:39:06,633:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:06 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKxEakLWmCJ55al0EY_qN5-qHFLgVd3a7BJ9c0vNcEBfQ X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/Wt2IVg", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/o4em5g", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } ] } 2026-05-01 13:39:06,633:DEBUG:acme.client:Storing nonce: VJnpPdsKxEakLWmCJ55al0EY_qN5-qHFLgVd3a7BJ9c0vNcEBfQ 2026-05-01 13:39:09,637:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:09,639:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS3hFYWtMV21DSjU1YWwwRVlfcU41LXFIRkxnVmQzYTdCSjljMHZOY0VCZlEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "YILAfRiqU1duNsali0XKxJSAxe1_CtlZLlzE01eS_Bm9-iivPxpuPJZcUB4_oTw0L9MPbXjSDfeaEWVe00IW9MD5iIU5ihkRqik-ZrHY9VCTOq2Se8Uu98lQtLtZ82vhKXPFABeGD327dZT8YHa9gzNYuQbdoaAQMFYXgR8xroaqVPYoiJP--8WGB-KLikV7GsyxqFRpo8pysVCL1b9wH9HMgRi7kKJZ5GIdw4wuCOKaVGFEdETE9Yc75mdOAsAcfFjQluP6HHlVhVR5cOOCZCvIkfF9PBXzNEr1DkcvqH80FErEEFKOyfqd3xSpKU4Z1_VAsFAM37l_WgPJk1_s4g", "payload": "" } 2026-05-01 13:39:09,663:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 824 2026-05-01 13:39:09,663:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:09 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKIbSVlPuyNSZIFShK51U5cyJh6ZCxmE_daSt8Ddv2W7c X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/o4em5g", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/Wt2IVg", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } ] } 2026-05-01 13:39:09,663:DEBUG:acme.client:Storing nonce: VJnpPdsKIbSVlPuyNSZIFShK51U5cyJh6ZCxmE_daSt8Ddv2W7c 2026-05-01 13:39:12,667:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:12,668:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS0liU1ZsUHV5TlNaSUZTaEs1MVU1Y3lKaDZaQ3htRV9kYVN0OERkdjJXN2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "LLZVZGCrgFFZGPek6-FcTuZSDPgNcUYAq_JUhmple-DwgFUZHnWeUQhye-aAcMVUydf3GUvkuMTyOoAEiMHScj8dZUYjj38adIGQmzRg0JFay8xt7bpauXUeMsobaTCee2yATw7gmXqsQ616cml1dA78_QDBijSnLL43DXSLelQlKzG9o7N4c1R2oAlgAR8Q1NuyilPCqAH5bghUd1z4ULU1q5FfkDKe9TjqFqe4zagjop85ZVVUcm0hyLERwjXeV1L2374V43NDYO8WXKyfdJDxsIxoSwv9omRkZEoXjJdSj2pYtrRIxNlKrwLB5CK5nqft9aUAB8q4PpIJ7WtzgA", "payload": "" } 2026-05-01 13:39:12,688:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 824 2026-05-01 13:39:12,689:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:12 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKq3-YruG2r-Sx6DzPReSs_JPeiErg-GLCxiHy29s0ZEM X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/Wt2IVg", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/o4em5g", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } ] } 2026-05-01 13:39:12,689:DEBUG:acme.client:Storing nonce: VJnpPdsKq3-YruG2r-Sx6DzPReSs_JPeiErg-GLCxiHy29s0ZEM 2026-05-01 13:39:15,693:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:15,694:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS3EzLVlydUcyci1TeDZEelBSZVNzX0pQZWlFcmctR0xDeGlIeTI5czBaRU0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "gLx3Q0fQb0QenEbaY13LKwDBi4UtQNM3GgS0dv3APP6-8SrZGJ3q5KgWOt818yJ9YKutA_92giGT7cYiIbEv_dZ7Yxs0uwWeDZixLqfkkzyxE68jhyCVVIdbhNBxAXCzABYjHrV6Oe89_tNzNIPYXwrfv-j2OXM0Ztz87rmnqvbFQcWUG5K5UfU0Y0GLYFgVa5B7aS6LzDPJVIvM37Ac3Qnv2nCvpATB9xIBhwjobeUQ6h0-6A26zWhXje7jFCHpUoGrshYWtcvDx4GSm6Voo76Eb3DIxrpAkeheedvFVYimINV111nE34PDsylS1w02WW307VyJ9MXyQ2oaTroeLg", "payload": "" } 2026-05-01 13:39:15,727:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 824 2026-05-01 13:39:15,728:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:15 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 3A87yRk9k6TcbcCR4cj0Negjz4494hm_MFDfx24mu2KHMyMVTJI X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/o4em5g", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/Wt2IVg", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "pending", "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo" } ] } 2026-05-01 13:39:15,728:DEBUG:acme.client:Storing nonce: 3A87yRk9k6TcbcCR4cj0Negjz4494hm_MFDfx24mu2KHMyMVTJI 2026-05-01 13:39:18,729:DEBUG:acme.client:JWS payload: b'' 2026-05-01 13:39:18,730:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696957522995: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOWs2VGNiY0NSNGNqME5lZ2p6NDQ5NGhtX01GRGZ4MjRtdTJLSE15TVZUSkkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2OTU3NTIyOTk1In0", "signature": "lBJi1Aote0NyvLE8ZhLj16jZntt66f632wo1qPeZZuaEjFNi6VLIu7wbqRozItL7mYnpf0Zagw9kKnOOyiUVTHDu904kcT4DhSY0DpC3-xelY2TiSII5el_WsWZrdx9tNleBjPRYh9yC5CprDobI_xaCxME2uEh32FaKdNLNMwrlBsHID0i2v-hWOl7l_zXwmBmuY2qG-j5efyFFEkZNd47Unb9rkER-igEJ1Rx04iT-YmB6fiHkKFkrHbz-inJ8DmADJVpKAWq1mZes6S2b_QrEKdp46aSOGou5VVevs_I9TBfeP5v9zb4jaG_PkhqPT8ws4V-rSi8NG9JrDh5MAg", "payload": "" } 2026-05-01 13:39:18,751:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696957522995 HTTP/1.1" 200 1096 2026-05-01 13:39:18,752:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 19:39:18 GMT Content-Type: application/json Content-Length: 1096 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKGSJxaqAl59xyGdAAr5KPSHwmW7W-GKXFhfUM-FssE8g X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "invalid", "expires": "2026-05-08T19:39:05Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696957522995/iMtyhQ", "status": "invalid", "validated": "2026-05-01T19:39:05Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo", "validationRecord": [ { "url": "http://zeta.validns.com/.well-known/acme-challenge/-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo", "hostname": "zeta.validns.com", "port": "80", "addressesResolved": [ "64.92.112.88" ], "addressUsed": "64.92.112.88" } ] } ] } 2026-05-01 13:39:18,752:DEBUG:acme.client:Storing nonce: VJnpPdsKGSJxaqAl59xyGdAAr5KPSHwmW7W-GKXFhfUM-FssE8g 2026-05-01 13:39:18,752:INFO:certbot._internal.auth_handler:Challenge failed for domain zeta.validns.com 2026-05-01 13:39:18,752:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 13:39:18,753:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: zeta.validns.com Type: connection Detail: During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo: Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet. 2026-05-01 13:39:18,754:DEBUG:certbot._internal.error_handler:Encountered exception: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 13:39:18,755:DEBUG:certbot._internal.error_handler:Calling registered functions 2026-05-01 13:39:18,755:INFO:certbot._internal.auth_handler:Cleaning up challenges 2026-05-01 13:39:18,755:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/-wm9769LojHoZnmybexpq7WFFCFV0YnwrjmGZTYu-fo 2026-05-01 13:39:18,755:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up 2026-05-01 13:39:18,756:ERROR:certbot._internal.renewal:Failed to renew certificate zeta.validns.com with error: Some challenges have failed. 2026-05-01 13:39:18,760:DEBUG:certbot._internal.renewal:Traceback was: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 485, in handle_renewal_request main.renew_cert(lineage_config, plugins, renewal_candidate) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1441, in renew_cert renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 127, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 345, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 424, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 476, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 13:39:18,760:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-01 13:39:18,760:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed: 2026-05-01 13:39:18,760:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/zeta.validns.com/fullchain.pem (failure) 2026-05-01 13:39:18,760:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-01 13:39:18,761:DEBUG:certbot._internal.log:Exiting abnormally: Traceback (most recent call last): File "/usr/bin/certbot", line 11, in load_entry_point('certbot==1.22.0', 'console_scripts', 'certbot')() File "/usr/lib/python3.6/site-packages/certbot/main.py", line 19, in main return internal_main.main(cli_args) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1632, in main return config.func(config, plugins) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1518, in renew renewal.handle_renewal_request(config) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 512, in handle_renewal_request len(renew_failures), len(parse_failures))) certbot.errors.Error: 1 renew failure(s), 0 parse failure(s) 2026-05-01 13:39:18,761:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)