2026-05-01 00:36:34,297:DEBUG:certbot._internal.main:certbot version: 1.22.0 2026-05-01 00:36:34,298:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot 2026-05-01 00:36:34,298:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew'] 2026-05-01 00:36:34,299:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2026-05-01 00:36:34,311:DEBUG:certbot._internal.log:Root logging level set at 30 2026-05-01 00:36:34,313:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/zeta.validns.com.conf 2026-05-01 00:36:34,331:DEBUG:certbot._internal.plugins.selection:Requested authenticator and installer 2026-05-01 00:36:34,344:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/zeta.validns.com/cert2.pem 2026-05-01 00:36:34,346:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-05-29 07:53:36 UTC. 2026-05-01 00:36:34,346:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing... 2026-05-01 00:36:34,346:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2026-05-01 00:36:34,348:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: Authenticator, Plugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: Prep: True 2026-05-01 00:36:34,348:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2026-05-01 00:36:34,348:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2026-05-01 00:36:34,356:DEBUG:certbot._internal.main:Picked account: ), creation_host='zeta.validns.com', register_to_eff=None))> 2026-05-01 00:36:34,357:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2026-05-01 00:36:34,359:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2026-05-01 00:36:34,394:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033 2026-05-01 00:36:34,395:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:34 GMT Content-Type: application/json Content-Length: 1033 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "Z7erfUBsZSU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived", "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2026-05-01 00:36:34,396:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for zeta.validns.com 2026-05-01 00:36:34,538:DEBUG:certbot.crypto_util:Generating RSA key (2048 bits): /etc/letsencrypt/keys/0002_key-certbot.pem 2026-05-01 00:36:34,540:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0002_csr-certbot.pem 2026-05-01 00:36:34,541:DEBUG:acme.client:Requesting fresh nonce 2026-05-01 00:36:34,541:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2026-05-01 00:36:34,548:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2026-05-01 00:36:34,548:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:34 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89S31cP9VJQqj9r6_mobGbaDqYs3slTfR0HuslPQqHPTc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2026-05-01 00:36:34,548:DEBUG:acme.client:Storing nonce: upAtUo89S31cP9VJQqj9r6_mobGbaDqYs3slTfR0HuslPQqHPTc 2026-05-01 00:36:34,549:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "zeta.validns.com"\n }\n ]\n}' 2026-05-01 00:36:34,551:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OVMzMWNQOVZKUXFqOXI2X21vYkdiYURxWXMzc2xUZlIwSHVzbFBRcUhQVGMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "Bz3QwS9tgy8HJzyydsfFbEchD420pRgEljKqClq4DmfmJfTBhds2SX3Ol8MRpnLxJfY0DFRrFjrAR-sOdrKuukBCjDSf6zWuqu-pEPss6YvVyuynQdf30ZkPG9O-i8Hqv-T2VTR__fhEHpeq_ql8PY-oAsP9h7wKsP8bM-hz370jcHFeOdLD6UzMfe9hb4YF_djHmXOdJXHwV_LCD3izRdUzH_NX3-zQxdceQYzI0ATjzZ6Qtq2X_uXzO_gRW-pKJ4JFEDuHYd6OxRxVlWcsjCEg42UFU9rc52zTde4EaFUIwqpQ1ASkGT7cEJR9zn9SK6ccXqau1WSQ1wpCOnxUwQ", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInpldGEudmFsaWRucy5jb20iCiAgICB9CiAgXQp9" } 2026-05-01 00:36:34,659:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 350 2026-05-01 00:36:34,659:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Fri, 01 May 2026 06:36:34 GMT Content-Type: application/json Content-Length: 350 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/2915156736/506136722385 Replay-Nonce: upAtUo89uKBj56QU6XszwPb_vTredHVffH06g_W_Vb1lfITImvY X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2026-05-08T06:36:34Z", "identifiers": [ { "type": "dns", "value": "zeta.validns.com" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2915156736/506136722385" } 2026-05-01 00:36:34,659:DEBUG:acme.client:Storing nonce: upAtUo89uKBj56QU6XszwPb_vTredHVffH06g_W_Vb1lfITImvY 2026-05-01 00:36:34,660:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:34,661:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OXVLQmo1NlFVNlhzendQYl92VHJlZEhWZmZIMDZnX1dfVmIxbGZJVEltdlkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "A33H9spATis7IPUGA3GllXyIvVHlRq7H2pj0pnNMRXK8mHtQ6Wu3YcQIu1y6Dpiw44f_Xbvy6AxBGKu-W-zK8xzyiqcoMH8BBUR5UOT2Ue1yrle-tVDUlYiJ6bPQc0EAGTeovil7vEbzSz0OJkf-tIfY23SrN5-mSmVowwcJVRfDcERnhdqF1oM0BiB6yOlCv0Z5sU5lckgSAR5Oc4O3S5pfWrbjIgOW9jZ0Y9D7EsG9Ua3A1sV0_ZIoSjd-9zSkngVlbYuJgv9TR9GQN1NwzrtmiVU4E4-SFQSxWDEQ6L4Aql5o5Yud6NTP2dmHpkKANyCpB5SI94d2x2ZCWzAvaA", "payload": "" } 2026-05-01 00:36:34,668:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 824 2026-05-01 00:36:34,669:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:34 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89KyMnhUbiDNK9a0R57rNPBBplH98pidDpN7x7bU5xF1s X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/KnIaUA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/qfW9iA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } ] } 2026-05-01 00:36:34,669:DEBUG:acme.client:Storing nonce: upAtUo89KyMnhUbiDNK9a0R57rNPBBplH98pidDpN7x7bU5xF1s 2026-05-01 00:36:34,669:INFO:certbot._internal.auth_handler:Performing the following challenges: 2026-05-01 00:36:34,670:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 00:36:34,670:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains. 2026-05-01 00:36:34,670:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge 2026-05-01 00:36:34,671:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI 2026-05-01 00:36:34,672:DEBUG:acme.client:JWS payload: b'{}' 2026-05-01 00:36:34,673:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OUt5TW5oVWJpRE5LOWEwUjU3ck5QQkJwbEg5OHBpZERwTjd4N2JVNXhGMXMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1LzB4SUtlZyJ9", "signature": "LzF9iam86WFX9kxDHliNmaabSOGRm6iqTKCUWsl5J1P--iMXVrqasJ7mhcmANM9N3o2CLj-M-Vh5dUeo1qrL3dyIpaSMV0ibO_1nw86781iUkYEg8_QnfPRmDiZgp8qLpOspmOatcjx4KK6tQ0Fm8-QcOSwraNk0rux1g2LDweBM2feO7BDDZEGmtcXtf5IYfLf_oK7zYzBCm2cP8RPN4_G66p-JDeCfLNgppYfYQfLjISkH4e4Pm4okl6UFQBid7u73yFrVqw9mrkpjPSFFiI4pOU-gOpOlKv1vObCGZqh63mCdO8dxwxW1lD6NZDMxE7O_7N17iO0QJ8fKXQFjmQ", "payload": "e30" } 2026-05-01 00:36:34,683:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2915156736/696675346475/0xIKeg HTTP/1.1" 200 195 2026-05-01 00:36:34,684:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:34 GMT Content-Type: application/json Content-Length: 195 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg Replay-Nonce: upAtUo89BEOEZqWix2lMWH3HA_R80OEk0lUIMxvco10PKIik1jo X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } 2026-05-01 00:36:34,684:DEBUG:acme.client:Storing nonce: upAtUo89BEOEZqWix2lMWH3HA_R80OEk0lUIMxvco10PKIik1jo 2026-05-01 00:36:34,684:INFO:certbot._internal.auth_handler:Waiting for verification... 2026-05-01 00:36:35,685:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:35,687:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OUJFT0VacVdpeDJsTVdIM0hBX1I4ME9FazBsVUlNeHZjbzEwUEtJaWsxam8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "LxTHfF7YeUPaJybAS6mq1iOGJZtwAWr7WW_b_xEdXigVDEt-d0Ct2cXsclhvkf0akJ4BA5jpsWI8zIqrlI0aPL4LwL7rHQL-ssqckT5doM-0yWqd5iRX5lWDf3Mec1PpYgcrzd8j3NoJoOKBgm5lQs-wFz-KMOB6gJKIHi_zoT0qbr3KTlGnmyX6bvE_UDqKNpI63iYWYUwcZf50dMsV6UJ4DxDwxmy7q3CIblCmyRo9-EwSbxTMvqCyBkeL1FVyISBbXYov-DOTqw0qfIztbqU8pvRtE4alSbdzYExAlTngvt_nBX04M8HSGVhnv3nG6AWVKj-equMhYNgrw21yyA", "payload": "" } 2026-05-01 00:36:35,696:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 824 2026-05-01 00:36:35,696:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:35 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAph6VKCenwhE-N-Gh3o5JzlKt1egQCkoWCf5-nA3W8L4uw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/qfW9iA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/KnIaUA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } ] } 2026-05-01 00:36:35,697:DEBUG:acme.client:Storing nonce: IhYmVAph6VKCenwhE-N-Gh3o5JzlKt1egQCkoWCf5-nA3W8L4uw 2026-05-01 00:36:38,698:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:38,700:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaDZWS0NlbndoRS1OLUdoM281SnpsS3QxZWdRQ2tvV0NmNS1uQTNXOEw0dXciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "BLrZZGfcxtGkOAkZwmVRoF9WUJa2k75b3xRh50ZeibEajKf414TfeVozW9X0wOp0KHQmEHpmIRA2wySNF6x49T-9hUcYSW6nol65VxK7aRaYMlIeSyQ3SZbkEp2y3zcswxGNO-iwx6UWjBT7OuG_JDhJA5LcN1t9PBTolxe3t2IhvTUBo5-W-hcCLMCDaQ_W8EwUScSEZHo_FZ2glafUO7gIVIH88JddUNAW3Z9zlAwadjKIfWOIWqeoRln7vhaWQFxveCh1NOETTePschcmW0oUsmXKyxTAdUhD2k8ttJS8fUWny3J8beepINbklk6kDlR8Qi_9bhsV_lAbr2r1Nw", "payload": "" } 2026-05-01 00:36:38,708:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 824 2026-05-01 00:36:38,709:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:38 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAphF0xDKupK7m6xHlbg_hAszy5hDynMi-55fLUry3tyDp8 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/KnIaUA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/qfW9iA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } ] } 2026-05-01 00:36:38,709:DEBUG:acme.client:Storing nonce: IhYmVAphF0xDKupK7m6xHlbg_hAszy5hDynMi-55fLUry3tyDp8 2026-05-01 00:36:41,713:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:41,714:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaEYweERLdXBLN202eEhsYmdfaEFzenk1aER5bk1pLTU1ZkxVcnkzdHlEcDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "ZdYsEVJmUg8bqjFV_2eAOhSCymStWCzC5FayMGHAR0XHEYv3Dik31Rhe0SlObmwWazPqyrWU9yAAHM4cXa_y1HnxtmNvcf6RwCfCsgnJFcl2FvnSERlvzpKzkK94Nr34h71WXzjKqFUOH704RdFg01aEgNd_eLtuS2UABWj6wTMJ4OgajvDw9GhXN1msRcxpRoN-7ocF9-RSKIwwqLkdUdmz8m3XMzCn9QQaoUGeNoOfRLG09Cl9z5zpJ8NLK2uJS8bD1OKCHX2IE7NSQsUOSeZOi3zzrNXJrOUahl2hwy3lIF69HrXVBUuZsz7UDGC0slNvLQAp4P4Qr4lsxcdiJQ", "payload": "" } 2026-05-01 00:36:41,735:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 824 2026-05-01 00:36:41,736:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:41 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: IhYmVAphTtHjIPTVEpOEPaObXDMokP4MUTirjEYQgtWiB7HB0UU X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/qfW9iA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/KnIaUA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } ] } 2026-05-01 00:36:41,736:DEBUG:acme.client:Storing nonce: IhYmVAphTtHjIPTVEpOEPaObXDMokP4MUTirjEYQgtWiB7HB0UU 2026-05-01 00:36:44,736:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:44,738:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJJaFltVkFwaFR0SGpJUFRWRXBPRVBhT2JYRE1va1A0TVVUaXJqRVlRZ3RXaUI3SEIwVVUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "HXTOLC0CEN5_wXtHk3gEwqwskVzXkzmZ8E3x8lMDZy-JIN0OuL5qYaFWdpQSQqyCh1LtsJRBvoMmI0EYpkZQ6unqmA18sfKsj9xkHVDpoQw3QI7i5ecd3EJ6TInRl6UJgAoRH4nVgi0ins3jkctLB3ERmSfYaTcQLejZ4HQ99zEQTdmhdyV08atYFOZ-sES7PvhDVfblSCK7p4i8UCpTQsjFh5EHRQBxR0-Xi_k1U5FCWjPo7-0He-qfbsY1FoyBHy2Ucaox1vhTyU2_guIaZs7QB89akeOHaqQyWc7w0HiBS0QmonzySr_aATBY4w6Kx1nXK8mEry4OHiE-USdb6A", "payload": "" } 2026-05-01 00:36:44,746:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 824 2026-05-01 00:36:44,747:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:44 GMT Content-Type: application/json Content-Length: 824 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89FyFkZB69FwL7NekD8a1QVUDKOK4sZI0VqJP-osnRnVk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "pending", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/KnIaUA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/qfW9iA", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "pending", "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI" } ] } 2026-05-01 00:36:44,747:DEBUG:acme.client:Storing nonce: upAtUo89FyFkZB69FwL7NekD8a1QVUDKOK4sZI0VqJP-osnRnVk 2026-05-01 00:36:47,750:DEBUG:acme.client:JWS payload: b'' 2026-05-01 00:36:47,751:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2915156736/696675346475: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkxNTE1NjczNiIsICJub25jZSI6ICJ1cEF0VW84OUZ5RmtaQjY5RndMN05la0Q4YTFRVlVES09LNHNaSTBWcUpQLW9zblJuVmsiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MTUxNTY3MzYvNjk2Njc1MzQ2NDc1In0", "signature": "NNItVW0JJDhqabk2l6MRMdDYtVcnCvRnnx_HxuiuD_K0sPpoLiJerWqa6F0oNgwhFVaAx8gul72gGN0odUuTub74kWaP-6eLe8leXN3UerikaYdo0zX38MjW1ERxosDsipcjWClHuh8wHCrvaTVKcMV1w8KgXR4p8uGBa6VUpWMTxcXMp_bhPM-edmL60-GpFCkVdRd6vUu1tyuIfqLpqOh0ZErjKOgFdU1s6VQyIU9I-8RIX4o5NcN9YNTRR0TUoyVq21c9epD3UBSr8s4JJjSczdVP7XoIIqoCQa24lXJE6RxkzBKdy499uaJDBJ1LOOxXUJgnPg6fqzzLR4Fuew", "payload": "" } 2026-05-01 00:36:47,785:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2915156736/696675346475 HTTP/1.1" 200 1096 2026-05-01 00:36:47,785:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Fri, 01 May 2026 06:36:47 GMT Content-Type: application/json Content-Length: 1096 Connection: keep-alive Boulder-Requester: 2915156736 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: upAtUo89N1MnzUH_9baZYHWWus7Rji_3zHrnt10optfFR-EaulE X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "zeta.validns.com" }, "status": "invalid", "expires": "2026-05-08T06:36:34Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2915156736/696675346475/0xIKeg", "status": "invalid", "validated": "2026-05-01T06:36:34Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI", "validationRecord": [ { "url": "http://zeta.validns.com/.well-known/acme-challenge/LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI", "hostname": "zeta.validns.com", "port": "80", "addressesResolved": [ "64.92.112.88" ], "addressUsed": "64.92.112.88" } ] } ] } 2026-05-01 00:36:47,786:DEBUG:acme.client:Storing nonce: upAtUo89N1MnzUH_9baZYHWWus7Rji_3zHrnt10optfFR-EaulE 2026-05-01 00:36:47,786:INFO:certbot._internal.auth_handler:Challenge failed for domain zeta.validns.com 2026-05-01 00:36:47,786:INFO:certbot._internal.auth_handler:http-01 challenge for zeta.validns.com 2026-05-01 00:36:47,786:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: zeta.validns.com Type: connection Detail: During secondary validation: 64.92.112.88: Fetching http://zeta.validns.com/.well-known/acme-challenge/LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI: Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet. 2026-05-01 00:36:47,788:DEBUG:certbot._internal.error_handler:Encountered exception: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 00:36:47,788:DEBUG:certbot._internal.error_handler:Calling registered functions 2026-05-01 00:36:47,788:INFO:certbot._internal.auth_handler:Cleaning up challenges 2026-05-01 00:36:47,788:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/LhQz1nHDUtt7NkU7Ulz7DZBKtvvv-nK9cJOQkGGk3jI 2026-05-01 00:36:47,788:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up 2026-05-01 00:36:47,789:ERROR:certbot._internal.renewal:Failed to renew certificate zeta.validns.com with error: Some challenges have failed. 2026-05-01 00:36:47,794:DEBUG:certbot._internal.renewal:Traceback was: Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 485, in handle_renewal_request main.renew_cert(lineage_config, plugins, renewal_candidate) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1441, in renew_cert renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 127, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 345, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 424, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) File "/usr/lib/python3.6/site-packages/certbot/_internal/client.py", line 476, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 105, in handle_authorizations self._poll_authorizations(authzrs, max_retries, best_effort) File "/usr/lib/python3.6/site-packages/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2026-05-01 00:36:47,794:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-01 00:36:47,794:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed: 2026-05-01 00:36:47,794:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/zeta.validns.com/fullchain.pem (failure) 2026-05-01 00:36:47,794:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 2026-05-01 00:36:47,794:DEBUG:certbot._internal.log:Exiting abnormally: Traceback (most recent call last): File "/usr/bin/certbot", line 11, in load_entry_point('certbot==1.22.0', 'console_scripts', 'certbot')() File "/usr/lib/python3.6/site-packages/certbot/main.py", line 19, in main return internal_main.main(cli_args) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1632, in main return config.func(config, plugins) File "/usr/lib/python3.6/site-packages/certbot/_internal/main.py", line 1518, in renew renewal.handle_renewal_request(config) File "/usr/lib/python3.6/site-packages/certbot/_internal/renewal.py", line 512, in handle_renewal_request len(renew_failures), len(parse_failures))) certbot.errors.Error: 1 renew failure(s), 0 parse failure(s) 2026-05-01 00:36:47,795:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)