2026-05-01 01:52:02,855:DEBUG:certbot._internal.main:certbot version: 1.22.0 2026-05-01 01:52:02,856:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/letsencrypt 2026-05-01 01:52:02,856:DEBUG:certbot._internal.main:Arguments: ['--webroot', '-w', '/var/www/html', '--agree-tos', '-n', '--email', 'accounts@kionic.com', '-d', 'zeta.validns.com'] 2026-05-01 01:52:02,856:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-05-01 01:52:02,867:DEBUG:certbot._internal.log:Root logging level set at 30 2026-05-01 01:52:02,869:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2026-05-01 01:52:02,870:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: Authenticator, Plugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: Prep: True 2026-05-01 01:52:02,871:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2026-05-01 01:52:02,871:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2026-05-01 01:52:02,877:DEBUG:certbot._internal.main:Picked account: ), creation_host='zeta.validns.com', register_to_eff=None))> 2026-05-01 01:52:02,878:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2026-05-01 01:52:02,879:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2026-05-01 01:52:03,013:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033 2026-05-01 01:52:03,013:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:03 GMT Content-Type: application/json Content-Length: 1033 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "7brdWWj3xjc": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived", "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2026-05-01 01:52:03,026:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer 2026-05-01 01:52:03,033:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/zeta.validns.com/cert2.pem 2026-05-01 01:52:03,036:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-05-29 07:53:36 UTC. 2026-05-01 01:52:03,036:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing... 2026-05-01 01:52:03,036:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for zeta.validns.com 2026-05-01 01:52:03,184:DEBUG:certbot.crypto_util:Generating RSA key (2048 bits): /etc/letsencrypt/keys/0003_key-certbot.pem 2026-05-01 01:52:03,186:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0003_csr-certbot.pem 2026-05-01 01:52:03,186:DEBUG:acme.client:Requesting fresh nonce 2026-05-01 01:52:03,186:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2026-05-01 01:52:03,204:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2026-05-01 01:52:03,205:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:03 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 3A87yRk9Laz3HVMhNCDlBtVrWlPAffb6-puGZZuvdNuap1mocu4 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2026-05-01 01:52:03,205:DEBUG:acme.client:Storing nonce: 3A87yRk9Laz3HVMhNCDlBtVrWlPAffb6-puGZZuvdNuap1mocu4 2026-05-01 01:52:03,205:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "zeta.validns.com"\n }\n ]\n}' 2026-05-01 01:52:03,207:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOUxhejNIVk1oTkNEbEJ0VnJXbFBBZmZiNi1wdUdaWnV2ZE51YXAxbW9jdTQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "CJBeOtgkCJipneO76A_afZnFjpt-ADU7v1MPcy1AmmkHAE0UFUKAGrMSF7X3SKOtu-amtJQ8zOc1H7Qli0PWWU9tI0wpp7oe0aGWozWrrpJjiKPoNvaKHPipA2-_BpWFziSO22TuDcMBLP3wqWPKd30JC-mrkAz0G7DdP-uWAizg4zldraRzccAUYDekbg7P916gsjM3ucyn29Ee-5hJuLoLER-P5CzjFTz6zfhwK9RzajaLelA6L_JLQnOxzfcZolHho4anJ4b6LZoxX0khXNo4FNKkX5ga-2UpnBTfeaVPhMXq40LVnra9_K3LFHCpkv5E3G37mq-528ff1FRq3g", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInpldGEudmFsaWRucy5jb20iCiAgICB9CiAgXQp9" } 2026-05-01 01:52:03,292:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 350 2026-05-01 01:52:03,293:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Fri, 01 May 2026 07:52:03 GMT Content-Type: application/json Content-Length: 350 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/2915156736/506154303545 Replay-Nonce: 3A87yRk9WibsgLu-5Kc7WFRb190WqHvVVmBFBrmEeimjV6H3T5o X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2026-05-08T07:52:03Z", "identifiers": [ { "type": "dns", "value": "zeta.validns.com" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2915156736/506154303545" } 2026-05-01 01:52:03,293:DEBUG:acme.client:Storing nonce: 3A87yRk9WibsgLu-5Kc7WFRb190WqHvVVmBFBrmEeimjV6H3T5o 2026-05-01 01:52:03,293:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:03,295:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOVdpYnNnTHUtNUtjN1dGUmIxOTBXcUh2VlZtQkZCcm1FZWltalY2SDNUNW8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "B3adGM7cHwkrY5JdfYHe2N-3-yt26mKCVqIploahsRKN4bk3VcqLKtJYOK0frp1pvGlahTqTZEC0tE30ddN4007ZMtt6lCzAGOBkpo95IDHoKJQSc9zq5ZIGXaYeCE0OlvjaksYrrLe3Si3fWOnhBWUlezVW_-oIbSE68WQLCwoqwRm28QHR3swdQFwqjHdfxSQSq-An4MktKHQdAYDW5mJUXzmx-xCILJ_wD0zHxNrDlFNoqP2EXQpnKyTfSNZYQBHTc5i_2aZQTirjw_8BU8l9VmwLCuTlpHcXHp-Aya0yOQ6w9gupcKJt8FVQ9OVvJdjvEDjLQIKYdzSinTtbKw", "payload": "" } 2026-05-01 01:52:03,316:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 824 2026-05-01 01:52:03,317:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:03 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKwJ-YLxk0YnjbZj7tZxIKXmEgCbxKnuHVGUU6yo1HUtE X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/HsvlEg", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/mWx6vA", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } ] } 2026-05-01 01:52:03,317:DEBUG:acme.client:Storing nonce: VJnpPdsKwJ-YLxk0YnjbZj7tZxIKXmEgCbxKnuHVGUU6yo1HUtE 2026-05-01 01:52:03,317:INFO:certbot._internal.auth_handler:Performing the following challenges: 2026-05-01 01:52:03,317:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 01:52:03,318:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains. 2026-05-01 01:52:03,318:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge 2026-05-01 01:52:03,319:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8 2026-05-01 01:52:03,320:DEBUG:acme.client:JWS payload: b'{}' 2026-05-01 01:52:03,321:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS3dKLVlMeGswWW5qYlpqN3RaeElLWG1FZ0NieEtudUhWR1VVNnlvMUhVdEUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1LzlJd1kzZyJ9", "signature": "guK8j9dp4ydNeEiPNhB53rKq-S6FbRCKa4ImrGcudsbe1vHH-P5QFJwStZJtuuiG2QT8p4E9ZUl6ZC8TsLdR-0iHKWLQGaNS-nZEIHKT981LSz4eWQKOH1pzbJomeaS7oQFn4BbuDr4lhF2e8rfzZvjRSDNZ6-5yl2DruPr41qKlkg8pkkt49dQ9MoLfVXfOp3JSv496IpEZ90M7_t0jK39_aOVXJ_0j4IU5YF-8RgV7BiFv-U0ZDTncbeqYllxCN_vJpQzU9ukJX0foXHumUvkkXr-H1VmYzRWVapyiz56wY00zLxBP4HDJ1nfWQ3m9T5zm8ka2i9CMqVgnU_ddRQ", "payload": "e30" } 2026-05-01 01:52:03,342:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2915156736/696703219765/9IwY3g HTTP/1.1" 200 195 2026-05-01 01:52:03,342:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:03 GMT Content-Type: application/json Content-Length: 195 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g Replay-Nonce: VJnpPdsK91ohbYGgCRo8f7lCdQaN8fC1yBTdiBirYzaGqNde_NM X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } 2026-05-01 01:52:03,342:DEBUG:acme.client:Storing nonce: VJnpPdsK91ohbYGgCRo8f7lCdQaN8fC1yBTdiBirYzaGqNde_NM 2026-05-01 01:52:03,342:INFO:certbot._internal.auth_handler:Waiting for verification... 2026-05-01 01:52:04,344:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:04,345:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzSzkxb2hiWUdnQ1JvOGY3bENkUWFOOGZDMXlCVGRpQmlyWXphR3FOZGVfTk0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "IoHRvzLtJ73SSbgeALBGswSFiTMHTMVTSiYrvSyfDMlxOILhQ_4C9xvJtDDAq4OkbeuP-k3Tk--8EHi-f6c_ueseU6YcJaFmGv3LbH9PSoMz8iINNW8lexfjwMFabbu0eb0165du0EJl255RcQpzUpscEkkggbA8Z3YfoHxHRnU5rl6JnUFE3CAEYFccgLe08351tilSscHWAESx1wkVStMS1UtdN-gMmf7OCVzHDFohkNUMXV0VrHIB3g86E_4kWOGUAWxbh1rGv4JpigOOcEXpWTp0j8wPh7iugrENWCSOmK8kEIHIegSWxIwrF74hFJ5TuLP-S9nvRIagRoHD2w", "payload": "" } 2026-05-01 01:52:04,367:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 824 2026-05-01 01:52:04,368:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:04 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKTXATTj_MvfYnHte9lFEMPBeHsT_3-sQ3ejmdZDt1XBs X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/mWx6vA", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/HsvlEg", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } ] } 2026-05-01 01:52:04,368:DEBUG:acme.client:Storing nonce: VJnpPdsKTXATTj_MvfYnHte9lFEMPBeHsT_3-sQ3ejmdZDt1XBs 2026-05-01 01:52:07,372:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:07,374:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS1RYQVRUal9NdmZZbkh0ZTlsRkVNUEJlSHNUXzMtc1EzZWptZFpEdDFYQnMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "PZAxY6OndVTqFhriNSfKY4f4dz1PVJ8NwqptxbxncFGdNORhDDAfDawQk3dECtbgypOXFKmekPR-arSKf7eb-cxrcBL7-ZBTCo740Qb9-E-bydjQFgtOTricuxmO1U37E_9pgwDhFXkUSj-50GkeQo49AhYgbDKPA2C_mqaR4TqMveuA7LhJtc_KOCKtqbtEw3gLHneoVc0GHWLUgtrmzPLVUf6J9nL36-1Y36BtHcgel1j5s1i-kvYc7VZvJmHuvua9nRCU0XHfh5_geH4Y1xdC31pNrPiY3_b5v3ahpqNry3kWRVjBPwuFLu-BeJYoOf81IW6XZ77FK1mqrMDxEA", "payload": "" } 2026-05-01 01:52:07,392:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 824 2026-05-01 01:52:07,393:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:07 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKIGq-E71IO15ViN4HhC_8e1_AS9Lp4EdTVLqOp3YFDbw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/mWx6vA", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/HsvlEg", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } ] } 2026-05-01 01:52:07,393:DEBUG:acme.client:Storing nonce: VJnpPdsKIGq-E71IO15ViN4HhC_8e1_AS9Lp4EdTVLqOp3YFDbw 2026-05-01 01:52:10,397:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:10,399:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS0lHcS1FNzFJTzE1VmlONEhoQ184ZTFfQVM5THA0RWRUVkxxT3AzWUZEYnciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "eTx_ke6nKNPz1IMdCVybmFNAXErorDpX8qmV9ulqKM8NjBdOIJszXXjV0_taQRzQvEV4jBrDoj2lKB5RBFOT3tbG0zFsVMRfNiu4gjLWNoD38Wdil-x02RqJ1nyKCGKIrOQsHL9oCyF_CpVispNJCx6ukflpotAuI9KaYMYB5PfHT1lYBFVAHgRP06cJ2MtPuvjA9RkQSaoFBaI9jLF-qjhHjVpKmrdLpxgWiXS-XHGDmXWXaFT1zAba8u-QY2LO1TxakPh-b5Y699lU6zsknQMmjZTkCJrI1mfQoBotLQvdE-eMmVY9WLjENKcbLkceYYXpRyOwHjWE3enPaL_Uag", "payload": "" } 2026-05-01 01:52:10,432:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 824 2026-05-01 01:52:10,433:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:10 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 3A87yRk9MP3ocyLocElY_m7PCtHAerXbAoicXFW0MIcMYM7jKp8 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/mWx6vA", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/HsvlEg", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } ] } 2026-05-01 01:52:10,433:DEBUG:acme.client:Storing nonce: 3A87yRk9MP3ocyLocElY_m7PCtHAerXbAoicXFW0MIcMYM7jKp8 2026-05-01 01:52:13,435:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:13,436:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICIzQTg3eVJrOU1QM29jeUxvY0VsWV9tN1BDdEhBZXJYYkFvaWNYRlcwTUljTVlNN2pLcDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "B5z5RlW9wHGuzbwV6PvxyDm0HZMDxwUZ_oQtgRfe-T_HF7Fr4-VWGXuM2qd4aB4sjk9f4Ut8zHmQHfFl-ebOlh59AiJlgcfha2j-zNpdY_Hf_P_7QpmPwK1p0UOmEZJ__Nk9VaVhcbcdClzsP1LKbQaFpgPu0id2K0fSjsTPijFefYq7PI9eeIBXsk9JVOcdAWzAp0cE43DJ5SacbOzuubSn28yw8z8JfDOfx4rD3BXyDRIvj-Bn875uQkbWYY0HMef7yZh04f8GG7t-dPVvkJ0Np2VS8wMBnAWx7kgAtuGMVsvpSxO2xI4-ndfWLJQvxdLoGNwN43hpMQ-h9yyRsA", "payload": "" } 2026-05-01 01:52:13,535:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 824 2026-05-01 01:52:13,535:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:13 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: VJnpPdsKAWRifwkTudLyiBxnqF2Q98_JyWSeBq2HMVzAtXqCUIE X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/mWx6vA", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/HsvlEg", "status": "pending", "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8" } ] } 2026-05-01 01:52:13,535:DEBUG:acme.client:Storing nonce: VJnpPdsKAWRifwkTudLyiBxnqF2Q98_JyWSeBq2HMVzAtXqCUIE 2026-05-01 01:52:16,539:DEBUG:acme.client:JWS payload: b'' 2026-05-01 01:52:16,541:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696703219765: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJWSm5wUGRzS0FXUmlmd2tUdWRMeWlCeG5xRjJROThfSnlXU2VCcTJITVZ6QXRYcUNVSUUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2NzAzMjE5NzY1In0", "signature": "MMpLa_3xr1f7AKS47Dv3hPPeVeA9bAvtvooOI1cHhj3wHsHKkN5BbnVm8Asly7D5K5kmY4UD5lVRKXeIEcGORLIRv_aT7qRK2sY_fxmh0iVbKeWrR6cTdBlBZngyqQftCLfxJcZXp22ctGRQzYP1pMKY6QQuAqoQqWFZiwM2bltUSr6KBCtbcP651Bbl9ylEhT-ocs4-ZY2QKkNf7t_MPmoNSf5iB3cMCWywE2y-H6cCrnwZ__qWMyXJZsl1g0NFT4ynqALwrDzLln--8gWuw-WuTvRBo3OG0DHQbaJZ-sbJwco6LXnJXbiQS-npwYD4Oq2DWc0KqpjTDGaK--pScA", "payload": "" } 2026-05-01 01:52:16,574:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696703219765 HTTP/1.1" 200 1096 2026-05-01 01:52:16,574:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 07:52:16 GMT Content-Type: application/json Content-Length: 1096 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 3A87yRk9wIBSOPg0dPyO_JxcKHAcYpUoahzsIHNhOQ14jgyaLB0 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "invalid", "expires": "2026-05-08T07:52:03Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696703219765/9IwY3g", "status": "invalid", "validated": "2026-05-01T07:52:03Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8", "validationRecord": [ { "url": "http://zeta.validns.com/.well-known/acme-challenge/c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8", "hostname": "zeta.validns.com", "port": "80", "addressesResolved": [ "64.92.112.88" ], "addressUsed": "64.92.112.88" } ] } ] } 2026-05-01 01:52:16,575:DEBUG:acme.client:Storing nonce: 3A87yRk9wIBSOPg0dPyO_JxcKHAcYpUoahzsIHNhOQ14jgyaLB0 2026-05-01 01:52:16,575:INFO:certbot._internal.auth_handler:Challenge failed for domain zeta.validns.com 2026-05-01 01:52:16,575:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 01:52:16,575:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: zeta.validns.com Type: connection Detail: During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8: Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet. 2026-05-01 01:52:16,576:DEBUG:certbot._internal.error_handler:Encountered exception: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 01:52:16,576:DEBUG:certbot._internal.error_handler:Calling registered functions 2026-05-01 01:52:16,576:INFO:certbot._internal.auth_handler:Cleaning up challenges 2026-05-01 01:52:16,576:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/c0u5vPXbr1VIELdVJijWwhYFB3PMmF0bd2gpXEXmyz8 2026-05-01 01:52:16,576:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up 2026-05-01 01:52:16,576:DEBUG:certbot._internal.log:Exiting abnormally: Traceback (most recent call last): File "/usr/bin/letsencrypt", line 11, in load_entry_point('certbot==1.22.0', 'console_scripts', 'certbot')() File "/usr/lib/python3.6/site-packages/certbot/main.py", line 19, in main return internal_main.main(cli_args) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1632, in main return config.func(config, plugins) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1491, in certonly lineage = _get_and_save_cert(le_client, config, domains, certname, lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 127, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 345, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 424, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 476, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 01:52:16,578:ERROR:certbot._internal.log:Some challenges have failed.