2026-05-02 02:39:04,271:DEBUG:certbot._internal.main:certbot version: 1.22.0 2026-05-02 02:39:04,271:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot 2026-05-02 02:39:04,271:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew'] 2026-05-02 02:39:04,272:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-05-02 02:39:04,284:DEBUG:certbot._internal.log:Root logging level set at 30 2026-05-02 02:39:04,289:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/zeta.validns.com.conf 2026-05-02 02:39:04,301:DEBUG:certbot._internal.plugins.selection:Requested authenticator and installer 2026-05-02 02:39:04,314:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/zeta.validns.com/cert2.pem 2026-05-02 02:39:04,316:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-05-29 07:53:36 UTC. 2026-05-02 02:39:04,316:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing... 2026-05-02 02:39:04,317:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2026-05-02 02:39:04,318:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: Authenticator, Plugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: Prep: True 2026-05-02 02:39:04,319:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2026-05-02 02:39:04,319:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2026-05-02 02:39:04,326:DEBUG:certbot._internal.main:Picked account: ), creation_host='zeta.validns.com', register_to_eff=None))> 2026-05-02 02:39:04,327:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2026-05-02 02:39:04,329:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2026-05-02 02:39:04,368:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033 2026-05-02 02:39:04,369:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:04 GMT Content-Type: application/json Content-Length: 1033 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived", "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "oI3c07zI4VY": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2026-05-02 02:39:04,370:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for zeta.validns.com 2026-05-02 02:39:04,437:DEBUG:certbot.crypto_util:Generating RSA key (2048 bits): /etc/letsencrypt/keys/0005_key-certbot.pem 2026-05-02 02:39:04,439:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0005_csr-certbot.pem 2026-05-02 02:39:04,439:DEBUG:acme.client:Requesting fresh nonce 2026-05-02 02:39:04,439:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2026-05-02 02:39:04,445:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2026-05-02 02:39:04,446:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:04 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAphPST18w5yz9hP2CG6l7YBVTTEAMU_iu3EegFrfrS3s9Y X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2026-05-02 02:39:04,446:DEBUG:acme.client:Storing nonce: IhYmVAphPST18w5yz9hP2CG6l7YBVTTEAMU_iu3EegFrfrS3s9Y 2026-05-02 02:39:04,446:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "zeta.validns.com"\n }\n ]\n}' 2026-05-02 02:39:04,448:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaFBTVDE4dzV5ejloUDJDRzZsN1lCVlRURUFNVV9pdTNFZWdGcmZyUzNzOVkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "H4FFwywYQ4k9EnjBMDnFwEQgU_MFIv3urJong8RNmzIpLMmVMg7Y2skaxYR8ATd_d-FqdkazXwQxsA8iIZfyE-WEmYjIa0kd2CVQfJyHfIVjOy8RNvGy1rKmcxKZL80ZBQN292VH86hVNzrPK_75cLWjwOQQDLmpPwCRTN9L039CNwNzqiFq29LlZOQyJa7-lhaQ6KAj6dytNb47ZM8jQftxd2seUBuZC0hsl62WghdcJLh0T3PNcjtvO7jj-Sg6OnjWNcndP9rxtR5cUhQjk5GhkpEkEQ8QSUv_l2_s17_lXFmmMCYlxrjXUMc-pNmauVotVCMHbFNnXOlLWbS71g", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInpldGEudmFsaWRucy5jb20iCiAgICB9CiAgXQp9" } 2026-05-02 02:39:04,557:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 350 2026-05-02 02:39:04,557:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Sat, 02 May 2026 08:39:04 GMT Content-Type: application/json Content-Length: 350 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/2915156736/506502019835 Replay-Nonce: IhYmVAphBHFBBjyAp3EZYGFWr3T9XFgj4e9N3GbC7FF1uxChOGc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2026-05-09T08:39:04Z", "identifiers": [ { "type": "dns", "value": "zeta.validns.com" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2915156736/506502019835" } 2026-05-02 02:39:04,558:DEBUG:acme.client:Storing nonce: IhYmVAphBHFBBjyAp3EZYGFWr3T9XFgj4e9N3GbC7FF1uxChOGc 2026-05-02 02:39:04,558:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:04,559:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaEJIRkJCanlBcDNFWllHRldyM1Q5WEZnajRlOU4zR2JDN0ZGMXV4Q2hPR2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "iuyWzGYFj5xAndAdkC7UgurFnzE0SaTNCNoL-wz35-XGO9JTE9513a_GVzc7_3zSVGA6AMsYD7a9sghDP2VOqtDgtbuVsld3RHIllfM7rVBM-FkH-9azUZ2rBCATb4ubvm1VXhJm7GEVcEkV5zC1hblAqutYLeP6XGg6wcPa7EaxZJbstds6pQuUAjnqewt4EOPeyqVB3I0xXUoN-Zx1kj80heF1J_6wLpEMlu7o6o_ik01ErG7ptl08QG2enoI5kcMplRq5Qq99LV3vZfAxgazTTIpt6Xymt2FjuMdeseeQtHNMC_5tU-vDZUvXmTyOdpkwGUeZ6TTi6mXgMygPww", "payload": "" } 2026-05-02 02:39:04,567:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 824 2026-05-02 02:39:04,568:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:04 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAphsXH2Ni_HwOURNcG730HSw9A4pqG4hMjlwju4wFa9s1Y X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/pGqoag", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/2cfDhg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } ] } 2026-05-02 02:39:04,568:DEBUG:acme.client:Storing nonce: IhYmVAphsXH2Ni_HwOURNcG730HSw9A4pqG4hMjlwju4wFa9s1Y 2026-05-02 02:39:04,568:INFO:certbot._internal.auth_handler:Performing the following challenges: 2026-05-02 02:39:04,568:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-02 02:39:04,568:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains. 2026-05-02 02:39:04,569:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge 2026-05-02 02:39:04,570:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4 2026-05-02 02:39:04,571:DEBUG:acme.client:JWS payload: b'{}' 2026-05-02 02:39:04,572:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaHNYSDJOaV9Id09VUk5jRzczMEhTdzlBNHBxRzRoTWpsd2p1NHdGYTlzMVkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1L1ROdEpMZyJ9", "signature": "fjQ7O8bDADRKbiYd6Dc6zR4GAvv50ij_xkU0hKvLtt4Ci3G8N78fCgjozwdTX7lBXm6ppSyRoD4L3T19gXPR3OcXiKf5_fMDB4QQTVdcC0QcjDJpH0-DWlbdroSkeaLy3KdocbaXctvhEV4IqZ2zVHIxNYLsoczDrAN5Ecy33pVKGbgRaCFhdUYnJnourkHxLZxZWAGY8Aymv6f3tk-kLk-T9zsTImJULXdmdNxjX4A-Uk7Ui5GmlrcqV9tDdsf6inP_f0XfCF9GZtqHGgc_UT0179WHuwvEedZOUraRbhqU2cRHLsP6-q1BzpCczG79_Y4NtVJGtC9r1Bs6Y0RT1Q", "payload": "e30" } 2026-05-02 02:39:04,582:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2915156736/697257224105/TNtJLg HTTP/1.1" 200 195 2026-05-02 02:39:04,582:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:04 GMT Content-Type: application/json Content-Length: 195 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg Replay-Nonce: IhYmVAphavhDW04-hi21Sidy7mLNBxN_2Z3FgbBg3WydfyWohEQ X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } 2026-05-02 02:39:04,582:DEBUG:acme.client:Storing nonce: IhYmVAphavhDW04-hi21Sidy7mLNBxN_2Z3FgbBg3WydfyWohEQ 2026-05-02 02:39:04,583:INFO:certbot._internal.auth_handler:Waiting for verification... 2026-05-02 02:39:05,584:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:05,585:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaGF2aERXMDQtaGkyMVNpZHk3bUxOQnhOXzJaM0ZnYkJnM1d5ZGZ5V29oRVEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "cSuhsmyWeZNrD2C-u8miEfBnEqzh_LWrlruQnO1HqP4ccocVvCb8FqYrHgy7dWh32QyGxYNfmDvND3hDoVKh5M_mvGdZVVc9WLQxFtQkQhj7f5osCtzJxkm6p3zgZUa0CXIPAL2uA7G4GxbWfAb6IstMY7h4EWY1dZ_JhKdvBqqfj65vpXvkozevQvws1PGy3y-cGdjY3PMbn9Ilr3n_k3EpVWfu-V0deJdxqmvBBoRb6WPUHqn042TXU6aQYjP0e9S6yLw8jE-U725l94dGDMeVEbRBP5bjX1ImWetG8Mq_6WIVtzZ6dFVyH04XAjegCqzj7OKC_286MDLexHroGA", "payload": "" } 2026-05-02 02:39:05,594:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 824 2026-05-02 02:39:05,595:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:05 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVApht9lzlXLrmnRlEt1RYqY7wFJ4s0K8pZL6QIl7wghZQgM X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/2cfDhg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/pGqoag", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } ] } 2026-05-02 02:39:05,595:DEBUG:acme.client:Storing nonce: IhYmVApht9lzlXLrmnRlEt1RYqY7wFJ4s0K8pZL6QIl7wghZQgM 2026-05-02 02:39:08,599:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:08,601:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaHQ5bHpsWExybW5SbEV0MVJZcVk3d0ZKNHMwSzhwWkw2UUlsN3dnaFpRZ00iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "EaCN0kh-4d1yHVoe5XFjjeTEFoKj2ewG1gBUP4nWCBJvUFEYd8BOQTdnXYmglM1f0ElqkBPrBtyE7WRBRwCafsSrk6YG2TDXIrNTe1OIjZ-WrQMsSXoInfWL5p8PXd1MOGevhmANTgLvhSBTCzGXdiFHW3muJHwNdfyF_EYp6yok5ZInREwrhwcNuIjB9g6athSOFLqQ7EX1_nr33lGxGWRY-3gpAWWH2Sokz9eLxx6nb0Uqx0ia9fDq3-dM9uJXoYUGFbnAPA1tiqeYRXkSVDDJ_7E43WuQ9OXAntmH4sHRvM3ing_mDLchWv-IRyWUfiF_nKla9CKlLxDBVod0RQ", "payload": "" } 2026-05-02 02:39:08,610:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 824 2026-05-02 02:39:08,611:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:08 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89z62Mf38wViFbPLIAacUYvH3d8jHEokvGl_juAn6yIoI X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/pGqoag", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/2cfDhg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } ] } 2026-05-02 02:39:08,611:DEBUG:acme.client:Storing nonce: upAtUo89z62Mf38wViFbPLIAacUYvH3d8jHEokvGl_juAn6yIoI 2026-05-02 02:39:11,613:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:11,614:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OXo2Mk1mMzh3VmlGYlBMSUFhY1VZdkgzZDhqSEVva3ZHbF9qdUFuNnlJb0kiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "YI4pMUbNcJLj7hmB5qzuBoBNVufussZykKj_PFl2p48-fGq3YpSklw1H3qYa0sU0gKuloJ09MPXg7lWwr1eeUSnQm3MiHrjVoXc5FFjcig_QFsHyOQq-SGjwbP7sCmqG-CxPKSLQbexXDI6_LtAr5VizbfC6KZyhcRLZ-PI5FTZXCPUj7J63PZobeq_idgGpazgds6aWzc1spfcYQBT5P-j0SXWraVr5YC4o_EnNs_THVH-1CcH2WlcmMxdoLfYglAJfqVDrzf5WF8PRTOr-niKBlyR8uEyXfoJT52iE_oidk1XMlxtI08ta8dr7VlMnz2r_QmaSWGTkc1KtpFA48w", "payload": "" } 2026-05-02 02:39:11,623:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 824 2026-05-02 02:39:11,624:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:11 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAphOumth2vSBoUFQacg4qeKaEobneu_oGaATrjkbiKVU6A X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/2cfDhg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/pGqoag", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } ] } 2026-05-02 02:39:11,624:DEBUG:acme.client:Storing nonce: IhYmVAphOumth2vSBoUFQacg4qeKaEobneu_oGaATrjkbiKVU6A 2026-05-02 02:39:14,628:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:14,629:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaE91bXRoMnZTQm9VRlFhY2c0cWVLYUVvYm5ldV9vR2FBVHJqa2JpS1ZVNkEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "XnVmcUaC9zqKOahmrNrRSHcM1jzIFZbhuUwk9v_z6ajt9qaif_jRUytsQbNb0yN1hVBuTkuy871r9qEQr932Hrrmy4HX7uy1N2W2rNR8hDV1pGsl5MovBgzcohdE37zk7pYCyzVoaVjQiTbtoQisnQA8i_6hD0nzV1SrAF7DRMMjJU5PQ8pzdoiwG7_yySXtqtKxbGwZKFebDEQzo22wzQVoVdGru1q8vH2zkMaPdL-2FhZaHB2AiEwG6-9gGw_xSZj04wkL-J_85IRf9GDQ9wkYwLpcp_feiApOkE4kVoqZHcVYRTeT7P6xAXtVVjXV0IzCu1PMhD2inUasEO9t5Q", "payload": "" } 2026-05-02 02:39:14,638:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 824 2026-05-02 02:39:14,639:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:14 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAph0zNN8BofzQ5Km0SONgpiMGGDTW-0ysbjV8BbKkC75tc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/pGqoag", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/2cfDhg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "pending", "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4" } ] } 2026-05-02 02:39:14,639:DEBUG:acme.client:Storing nonce: IhYmVAph0zNN8BofzQ5Km0SONgpiMGGDTW-0ysbjV8BbKkC75tc 2026-05-02 02:39:17,642:DEBUG:acme.client:JWS payload: b'' 2026-05-02 02:39:17,643:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/697257224105: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaDB6Tk44Qm9melE1S20wU09OZ3BpTUdHRFRXLTB5c2JqVjhCYktrQzc1dGMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk3MjU3MjI0MTA1In0", "signature": "ij14b-w5k8pkjz2Af0NNlX0g35ur78EqPrH-LN6DIHkNoXa4KwGZ2_E3Qa7iYf4Xz9lebFYwBuls54gM8J099EMQPzWzWGi_z8ZksodeSo-1HbnzJpD2usjIaLEA2GzsJ-ujF4oMDYSaXGQAwi1OuvZw65RyJuk1-ad35H3rPCnYPpP9lmJeAG8KRpny2m3IpobNTkM3sJJCXWVkm8kGfqvIvs2Upk7534f1L8ySVpOfUd4_jTScg-fB7EwlKylu6mh3-Hb61nFHdJoyJmj0mpLo-pQ7LPW6XWbythCBmd6L5E8Dd-576JcVDlE0JlvoJOc6VRaKiMONhzCDyYsb5Q", "payload": "" } 2026-05-02 02:39:17,652:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/697257224105 HTTP/1.1" 200 1096 2026-05-02 02:39:17,652:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 02 May 2026 08:39:17 GMT Content-Type: application/json Content-Length: 1096 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89P05Juc6tyo6IMhfk6x20olaWZa5iYUwxo6L2HDLHTvw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "invalid", "expires": "2026-05-09T08:39:04Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/697257224105/TNtJLg", "status": "invalid", "validated": "2026-05-02T08:39:04Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4", "validationRecord": [ { "url": "http://zeta.validns.com/.well-known/acme-challenge/D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4", "hostname": "zeta.validns.com", "port": "80", "addressesResolved": [ "64.92.112.88" ], "addressUsed": "64.92.112.88" } ] } ] } 2026-05-02 02:39:17,652:DEBUG:acme.client:Storing nonce: upAtUo89P05Juc6tyo6IMhfk6x20olaWZa5iYUwxo6L2HDLHTvw 2026-05-02 02:39:17,653:INFO:certbot._internal.auth_handler:Challenge failed for domain zeta.validns.com 2026-05-02 02:39:17,653:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-02 02:39:17,653:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: zeta.validns.com Type: connection Detail: During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4: Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet. 2026-05-02 02:39:17,654:DEBUG:certbot._internal.error_handler:Encountered exception: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-02 02:39:17,654:DEBUG:certbot._internal.error_handler:Calling registered functions 2026-05-02 02:39:17,654:INFO:certbot._internal.auth_handler:Cleaning up challenges 2026-05-02 02:39:17,654:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/D46CPNepC31ZFD0a_Ah9P943b4AT_bXL_bk8W61D-o4 2026-05-02 02:39:17,654:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up 2026-05-02 02:39:17,655:ERROR:certbot._internal.renewal:Failed to renew certificate zeta.validns.com with error: Some challenges have failed. 2026-05-02 02:39:17,660:DEBUG:certbot._internal.renewal:Traceback was: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 485, in handle_renewal_request main.renew_cert(lineage_config, plugins, renewal_candidate) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1441, in renew_cert renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 127, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 345, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 424, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 476, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-02 02:39:17,661:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-02 02:39:17,661:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed: 2026-05-02 02:39:17,661:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/zeta.validns.com/fullchain.pem (failure) 2026-05-02 02:39:17,661:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-02 02:39:17,661:DEBUG:certbot._internal.log:Exiting abnormally: Traceback (most recent call last): File "/usr/bin/certbot", line 11, in load_entry_point('certbot==1.22.0', 'console_scripts', 'certbot')() File "/usr/lib/python3.6/site-packages/certbot/main.py", line 19, in main return internal_main.main(cli_args) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1632, in main return config.func(config, plugins) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1518, in renew renewal.handle_renewal_request(config) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 512, in handle_renewal_request len(renew_failures), len(parse_failures))) certbot.errors.Error: 1 renew failure(s), 0 parse failure(s) 2026-05-02 02:39:17,662:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)