File: //var/log/letsencrypt/letsencrypt.log
2026-08-16 02:56:02,817:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-16 02:56:02,817:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-16 02:56:02,817:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-16 02:56:02,818:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-16 02:56:02,829:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-16 02:56:02,832:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-16 02:56:02,835:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-16 02:56:02,847:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-16 02:56:02,847:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-16 02:56:02,847:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-16 02:56:02,847:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7fcd6a544b80>
Prep: True
2026-08-16 02:56:02,847:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7fcd6a544b80> and installer None
2026-08-16 02:56:02,847:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-16 02:56:02,904:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-16 02:56:02,904:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-16 02:56:02,907:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-16 02:56:03,298:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-16 02:56:03,299:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 06:56:03 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"G2t_aU_TGE4": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-16 02:56:03,300:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-16 02:56:03,303:DEBUG:acme.client:Requesting fresh nonce
2026-08-16 02:56:03,303:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-16 02:56:03,426:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-16 02:56:03,427:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 06:56:03 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: G0CdongCeHzQlxAsowQ2JjCGsVCYlGp2SfiXpYoQafdsI_PMp0M
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-16 02:56:03,427:DEBUG:acme.client:Storing nonce: G0CdongCeHzQlxAsowQ2JjCGsVCYlGp2SfiXpYoQafdsI_PMp0M
2026-08-16 02:56:03,427:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-16 02:56:03,430:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHMENkb25nQ2VIelFseEFzb3dRMkpqQ0dzVkNZbEdwMlNmaVhwWW9RYWZkc0lfUE1wME0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "LJ-KW4xcG4uk92qMmnmyz6VOU5Ku8LX8BymbymgKlSD1E71aNYlJftram3x6XAreWYbPOxsiFHDOWLHNLIQriBn6SGhwOyyXwJmrtZ5bOBBGHWiro4un2yGRXiguNv7ybhgPL-8j2QD7rRTsCyJRuotavPR-boPpxKTyUcL7qMworWmDnM0IS50GggttPYVmujywk9UTDyCapfIw4GxMPk1wcw4aOvZIj1urKCqcpjPyGhHghMh_17UwRhSx1NqOyqYMnblrYlGTLpvh3y2t8Rg9t0oqG4XCe0GFhnGwwW4_65jeEjgAn3i_dJyN6wVwl9WHb-fH3rAGjmZkupgG5g",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-16 02:56:03,588:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-16 02:56:03,589:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 16 Aug 2026 06:56:03 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/545585124201
Replay-Nonce: G0CdongC17NJaLD4uw8_rEdA8RGXQdWNh-5jTKY3QTjQ052ue58
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-23T06:56:03Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760603927741"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/545585124201"
}
2026-08-16 02:56:03,589:DEBUG:acme.client:Storing nonce: G0CdongC17NJaLD4uw8_rEdA8RGXQdWNh-5jTKY3QTjQ052ue58
2026-08-16 02:56:03,589:DEBUG:acme.client:JWS payload:
b''
2026-08-16 02:56:03,591:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760603927741:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHMENkb25nQzE3TkphTEQ0dXc4X3JFZEE4UkdYUWRXTmgtNWpUS1kzUVRqUTA1MnVlNTgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwNjAzOTI3NzQxIn0",
"signature": "uotNi9o4olxiFGOHnwUiwxaCUNkoCqZg7V5fyR-LTU53pgRRJTtrQFnFp4xunQlhEHcgi-u1h7ab8MWeuX1C_xYIiRJ6EWR47A2kEwPCZAL9dwdTFJyYUqAxp3AWT73CxdzbYbJLCqYcynqaoUA3K_phiR3rLKGvZyJEl7EaeLsmHEK0KeICUEqOJL6hNpWENWU1TbYDyP9KALfHxj2lS1SKAF0HNFMAJ8GzSHeoNp8t83w0zl8OczXxfjP731sVuSqzeUIf0RRxTGpRARzhidZBmlgboNhEM6b2rlw63gECZBIfESKsIZhj3py-RVCwrs5Em_CQZK_d8vED2Gp5rw",
"payload": ""
}
2026-08-16 02:56:03,731:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760603927741 HTTP/1.1" 200 822
2026-08-16 02:56:03,732:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 06:56:03 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: huEC4XJSdnt-NvQRaPaJQ_aQytBl-vRJKazHqkMMShZsofhS3oM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-23T06:56:03Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/eoTFLQ",
"status": "pending",
"token": "aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/Vr5OGg",
"status": "pending",
"token": "aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/g2yA3A",
"status": "pending",
"token": "aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0"
}
]
}
2026-08-16 02:56:03,732:DEBUG:acme.client:Storing nonce: huEC4XJSdnt-NvQRaPaJQ_aQytBl-vRJKazHqkMMShZsofhS3oM
2026-08-16 02:56:03,732:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-16 02:56:03,732:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-16 02:56:03,732:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-16 02:56:03,733:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-16 02:56:03,734:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0
2026-08-16 02:56:03,735:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-16 02:56:03,736:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/eoTFLQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJodUVDNFhKU2RudC1OdlFSYVBhSlFfYVF5dEJsLXZSSkthekhxa01NU2hac29maFMzb00iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYwNjAzOTI3NzQxL2VvVEZMUSJ9",
"signature": "Rft8UEBNd-WZrB29T1eYtD2iasEf0fp7M5xdAtYfJbGW3GOimpZ1vLkZOciH5tM5NKnb_F1PTFZCunPay5SFTairIB5sLtNySGl4cH41ruw-wYMhkppqveJhQDYv9F65zANSc7rnsSAIfdM9hHqjR6VgiW5tyRJoOH-9-08xT159TeANQwDhMrNE2o-Fx0r5_Y0g2xyCFuLTl7MTNLxH6tJhUMA8-UX0l4u5688NAQ8d_bWXc2l92SnZOOMp2dhvq2JDHphndT7nTQ1zvGF0cPw9IF3uofcymM4NMHxXGlc9Ac-jtf3mkqGySMzo2ZlTU8rVmsNLvmEFsrvLbGlXkw",
"payload": "e30"
}
2026-08-16 02:56:03,865:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/760603927741/eoTFLQ HTTP/1.1" 200 195
2026-08-16 02:56:03,866:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 06:56:03 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760603927741>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/eoTFLQ
Replay-Nonce: G0CdongCcwGRealjUtGQuNOnhdH-mTJru__cT1DWsat6ufR-0Es
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/eoTFLQ",
"status": "pending",
"token": "aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0"
}
2026-08-16 02:56:03,866:DEBUG:acme.client:Storing nonce: G0CdongCcwGRealjUtGQuNOnhdH-mTJru__cT1DWsat6ufR-0Es
2026-08-16 02:56:03,867:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-16 02:56:04,868:DEBUG:acme.client:JWS payload:
b''
2026-08-16 02:56:04,869:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760603927741:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHMENkb25nQ2N3R1JlYWxqVXRHUXVOT25oZEgtbVRKcnVfX2NUMURXc2F0NnVmUi0wRXMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwNjAzOTI3NzQxIn0",
"signature": "ZyxV5JNhFuOYm69J2G9d2KD9pOEylChBHTrii4G1tn3qnVRB7WXINSXnOjz_zYyAQJfiP-wr2it0WY0OBM-7MtdEksYhmnm65oa2gC_i8bycBWQOhI5G2xiKd-TQM941jfpci3zUzGjjcrhwwJmlTV_ixz5JK-d9go9dM3Ezp331KhcQ2ZFNxYkzp8X-q2ltFZGn8sUPJyC-JndVfDVWsHu4QLq2A5qSFBhCHin6NRaQJn1PTQmIhPva3Q-fB_nzF61Ur85d1zNcS9tJ5Tc-CF9qdK_FLf3ykGP8XKCEj1pPdUwmVaqKKi62mAfkVSL91noKQOw-6LPRtlqx-b2u7g",
"payload": ""
}
2026-08-16 02:56:04,997:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760603927741 HTTP/1.1" 200 1032
2026-08-16 02:56:04,998:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 06:56:04 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: G0CdongCatyxWPi0-nmBuRxWT-ESA9Y0KvvKZMdM5FLYEJBWqzc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-23T06:56:03Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760603927741/eoTFLQ",
"status": "invalid",
"validated": "2026-08-16T06:56:03Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0: 404",
"status": 403
},
"token": "aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-16 02:56:04,998:DEBUG:acme.client:Storing nonce: G0CdongCatyxWPi0-nmBuRxWT-ESA9Y0KvvKZMdM5FLYEJBWqzc
2026-08-16 02:56:04,998:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-16 02:56:04,998:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-16 02:56:04,999:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-16 02:56:05,000:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 02:56:05,000:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-16 02:56:05,000:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-16 02:56:05,000:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/aKzbjdM1E6iBzIlXHqLmfHB5RJBJ6PeB_Qq5zEfL7I0
2026-08-16 02:56:05,000:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-16 02:56:05,001:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-16 02:56:05,006:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 02:56:05,008:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-16 02:56:05,008:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-16 02:56:05,008:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-16 02:56:05,008:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-16 02:56:05,008:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-16 02:56:05,009:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)
2026-08-16 09:23:02,747:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-16 09:23:02,747:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/letsencrypt
2026-08-16 09:23:02,747:DEBUG:certbot._internal.main:Arguments: ['--webroot', '-w', '/var/www/html', '--agree-tos', '-n', '--email', 'it66@golnoor.com', '-d', 'vps.espica.me']
2026-08-16 09:23:02,749:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-16 09:23:02,760:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-16 09:23:02,761:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-16 09:23:02,762:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f95287eefd0>
Prep: True
2026-08-16 09:23:02,762:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f95287eefd0> and installer None
2026-08-16 09:23:02,762:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-16 09:23:02,828:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-16 09:23:02,829:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-16 09:23:02,833:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-16 09:23:03,262:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-16 09:23:03,263:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 13:23:03 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"nUWe6IPDJi0": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-16 09:23:03,269:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for vps.espica.me
2026-08-16 09:23:03,271:DEBUG:acme.client:Requesting fresh nonce
2026-08-16 09:23:03,271:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-16 09:23:03,406:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-16 09:23:03,407:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 13:23:03 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: Gn__iRFmBzj_TOw6LbU7gNXm1OjAJo1u4649Imb5NS_ya53_cYY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-16 09:23:03,407:DEBUG:acme.client:Storing nonce: Gn__iRFmBzj_TOw6LbU7gNXm1OjAJo1u4649Imb5NS_ya53_cYY
2026-08-16 09:23:03,407:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "vps.espica.me"\n }\n ]\n}'
2026-08-16 09:23:03,409:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbUJ6al9UT3c2TGJVN2dOWG0xT2pBSm8xdTQ2NDlJbWI1TlNfeWE1M19jWVkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "LWAQuDUJM1V5Dj9RT1-bc0trNXkpcW3uTfCDgUa4Yy881YAgIfByIeDLGbQ5DL83BSdGKsCa1_BbWEo7vstv0gTyrO9C1J0Cg_TIdTKHkt4gUFS7UjYbQGlgIfR4pxrqo--hzVZ_58YArEzZuB8GDU6_87hZY1-pg5Itx9vo68rQ50oB_WE6pJn2JygNfVOSgOjsxUtGEQghZxSTcKPc_y10Qlpyph0_eFEwS6OiKVdMqAnjsGx6JaLi7sgHqRj4Kj-hNPbnEGMogDQjo4RhJh4bRPM3qE0qt0iiu6ga5D-GrsGk9zIHAE1s19Pfal4qQQrx38Cqpw1SJztcS32AOw",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInZwcy5lc3BpY2EubWUiCiAgICB9CiAgXQp9"
}
2026-08-16 09:23:03,664:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 347
2026-08-16 09:23:03,664:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 16 Aug 2026 13:23:03 GMT
Content-Type: application/json
Content-Length: 347
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/545689573451
Replay-Nonce: CcqwGXyVKP60lyPCCfzTiE6C62MywMEofAiywvzGwG4nU_AyP4A
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-23T13:23:03Z",
"identifiers": [
{
"type": "dns",
"value": "vps.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760772523231"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/545689573451"
}
2026-08-16 09:23:03,664:DEBUG:acme.client:Storing nonce: CcqwGXyVKP60lyPCCfzTiE6C62MywMEofAiywvzGwG4nU_AyP4A
2026-08-16 09:23:03,665:DEBUG:acme.client:JWS payload:
b''
2026-08-16 09:23:03,666:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760772523231:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VktQNjBseVBDQ2Z6VGlFNkM2Mk15d01Fb2ZBaXl3dnpHd0c0blVfQXlQNEEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwNzcyNTIzMjMxIn0",
"signature": "XWuvrXc4Rl4RgFmVdAS2zDMn_usxcDQFSS2FHHxOiOZv6uhdRD2p6L2xLxfE8BcmEfRRkyatBo3LDgJkc6Q2edjguvkhUa6I8jnZ9Sedg85tPHUd1Mqo2SSClE4OjFcbAYDr7qQ4Eg4IT0ykNH3OcHzFgskihPofexKLhpN77CmIgkUpD5LJjNi7nqqnZxbcuG739zinAbG78Xd8w43yylRhC29suNdGRGfoHc-7X-Trb4DxyoUULsjhA-WiBBduENKcOdqkSMmqb8tf5NyVSSTJLwbS_Pu6msJxQsMHbTmI38LiTORJaIoNhIr9GgjJhn3a6PYiAgkLCHo3zIg5YA",
"payload": ""
}
2026-08-16 09:23:03,803:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760772523231 HTTP/1.1" 200 821
2026-08-16 09:23:03,804:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 13:23:03 GMT
Content-Type: application/json
Content-Length: 821
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyV9z7h3BZ9a7T8uBImQIWQl5wmUHmvH3ZrC6V6WKMHIgs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "vps.espica.me"
},
"status": "pending",
"expires": "2026-08-23T13:23:03Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/8t0R1w",
"status": "pending",
"token": "bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/3cufbA",
"status": "pending",
"token": "bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/1lnV5Q",
"status": "pending",
"token": "bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q"
}
]
}
2026-08-16 09:23:03,804:DEBUG:acme.client:Storing nonce: CcqwGXyV9z7h3BZ9a7T8uBImQIWQl5wmUHmvH3ZrC6V6WKMHIgs
2026-08-16 09:23:03,805:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-16 09:23:03,805:INFO:certbot._internal.auth_handler:http-01 challenge for vps.espica.me
2026-08-16 09:23:03,805:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-16 09:23:03,805:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-16 09:23:03,807:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q
2026-08-16 09:23:03,808:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-16 09:23:03,809:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/1lnV5Q:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5Vjl6N2gzQlo5YTdUOHVCSW1RSVdRbDV3bVVIbXZIM1pyQzZWNldLTUhJZ3MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYwNzcyNTIzMjMxLzFsblY1USJ9",
"signature": "qKo9rZHikyhgW3ohVnxTlt6T9RFLK1C_hyJFJ6uTu9HdwHuECiX9v6PGT146y8Z4EoxV4nrDKm-iFxMW2bFkpilAx3qw1Ksx1yHbHQOb0Bf0PIwDRr8yF3r37-QxfIQGgWPHCRLCxgpLX8SOcdDZwXJMhqKn38jp8hGchihkT9SU7C0P9K_boggnkX3tx5fykGCA5vNg4I-bofGvGgR3qUYFAV9AiE_N5dF4D5_fRgCNbIIiWCbzK_eOpOlWYiH5cVQ0y0rCXjkmCsA9R9IwfmfmirOznxjBP5_5rfcqb6GemPCVi8Bky4zvAu1-EdaPmt8MfLnzue49AT8asiLVgw",
"payload": "e30"
}
2026-08-16 09:23:03,949:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/760772523231/1lnV5Q HTTP/1.1" 200 195
2026-08-16 09:23:03,949:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 13:23:03 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760772523231>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/1lnV5Q
Replay-Nonce: Gn__iRFmwnZcmY9pg8gmTok45QB4IIUVXDmgCMC_pQcYa6pikwA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/1lnV5Q",
"status": "pending",
"token": "bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q"
}
2026-08-16 09:23:03,949:DEBUG:acme.client:Storing nonce: Gn__iRFmwnZcmY9pg8gmTok45QB4IIUVXDmgCMC_pQcYa6pikwA
2026-08-16 09:23:03,950:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-16 09:23:04,951:DEBUG:acme.client:JWS payload:
b''
2026-08-16 09:23:04,952:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760772523231:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbXduWmNtWTlwZzhnbVRvazQ1UUI0SUlVVlhEbWdDTUNfcFFjWWE2cGlrd0EiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwNzcyNTIzMjMxIn0",
"signature": "pKfEEBcdMwt-T2o1Mdf9EOmdtoctkUgLWHU3oJ_6JniR3tvt3Ip574cMxu5Cm0yPwK8JPxSyQ_8mtbJGxi1Z6nMfFH72GTLj7ouffsxuGCuvIyTpO1kl1atTJbbSAOCAV4eImqeyndFwWCXDKkyrNlrm1YOaC0wubEBCblc7POvGglj8ypG5prmO8_MB-BDOcLdsHE6__SLgqK0MZ8okiuhayiyhbax4J7lQ_kO5bHGmihmb9dbzK1reyy3JHFBvT-aYvJvu419B5YqWBa8eFoouzoUi4CEJpI5W_kC__ngvWnp-CJvBk2lNGlEqpOresW6lUC_gZiICXtfKdn_2Fg",
"payload": ""
}
2026-08-16 09:23:05,089:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760772523231 HTTP/1.1" 200 1028
2026-08-16 09:23:05,090:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 13:23:05 GMT
Content-Type: application/json
Content-Length: 1028
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVDSMXjRfxMrxszWfsOj8YbiGq0TnTfgClhe0pIEPALH4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "vps.espica.me"
},
"status": "invalid",
"expires": "2026-08-23T13:23:03Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760772523231/1lnV5Q",
"status": "invalid",
"validated": "2026-08-16T13:23:03Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://vps.espica.me/.well-known/acme-challenge/bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q: 404",
"status": 403
},
"token": "bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q",
"validationRecord": [
{
"url": "http://vps.espica.me/.well-known/acme-challenge/bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q",
"hostname": "vps.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-16 09:23:05,090:DEBUG:acme.client:Storing nonce: CcqwGXyVDSMXjRfxMrxszWfsOj8YbiGq0TnTfgClhe0pIEPALH4
2026-08-16 09:23:05,090:INFO:certbot._internal.auth_handler:Challenge failed for domain vps.espica.me
2026-08-16 09:23:05,090:INFO:certbot._internal.auth_handler:http-01 challenge for vps.espica.me
2026-08-16 09:23:05,091:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: vps.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://vps.espica.me/.well-known/acme-challenge/bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-16 09:23:05,092:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 09:23:05,092:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-16 09:23:05,092:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-16 09:23:05,092:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/bo11XUB2o42e2Gnr3PA_LxeBNhsT3MOEWTIpgbWgZ8Q
2026-08-16 09:23:05,093:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-16 09:23:05,093:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/letsencrypt", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1579, in certonly
lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 142, in _get_and_save_cert
lineage = le_client.obtain_and_enroll_certificate(domains, certname)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 518, in obtain_and_enroll_certificate
cert, chain, key, _ = self.obtain_certificate(domains)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 09:23:05,098:ERROR:certbot._internal.log:Some challenges have failed.
2026-08-16 14:44:05,919:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-16 14:44:05,919:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-16 14:44:05,919:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-16 14:44:05,921:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-16 14:44:05,934:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-16 14:44:05,937:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-16 14:44:05,941:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-16 14:44:05,958:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-16 14:44:05,958:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-16 14:44:05,958:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-16 14:44:05,958:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f7b94c25b80>
Prep: True
2026-08-16 14:44:05,959:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f7b94c25b80> and installer None
2026-08-16 14:44:05,959:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-16 14:44:06,022:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-16 14:44:06,022:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-16 14:44:06,024:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-16 14:44:06,451:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-16 14:44:06,452:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 18:44:06 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"PDWA6PbLnvA": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-16 14:44:06,454:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-16 14:44:06,457:DEBUG:acme.client:Requesting fresh nonce
2026-08-16 14:44:06,457:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-16 14:44:06,591:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-16 14:44:06,591:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 18:44:06 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: Gn__iRFmzroRaLv7BGGc6jLCrtwDyTrOzHeDS1i_hixVaTE_m34
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-16 14:44:06,592:DEBUG:acme.client:Storing nonce: Gn__iRFmzroRaLv7BGGc6jLCrtwDyTrOzHeDS1i_hixVaTE_m34
2026-08-16 14:44:06,592:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-16 14:44:06,595:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbXpyb1JhTHY3QkdHYzZqTENydHdEeVRyT3pIZURTMWlfaGl4VmFURV9tMzQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "ev_acY1tSQE3xFMKphO8MGzgrdXdgr02tx5kUI-zP1uC4x2t_yJ26kfQWD26yrBLhH_JgP63Bl8eKPG8mLOE_-0TxcKvFkJ83fYXZpDU-pOknxCN3tqPeC09xlafD_7CwK_eDHDPxTkR7bBo-nWzqzun5F2aj1sY-hiLsHf1UkffMoHYbafO90jsgGKSDn9dwAtFH3fB0sIh6a4cxvJCFwo_wEih9d0KSLmCOT0zLN34mSLCLjJ_T7UOcEXbJvgt1d3c6lQCY9cocwTH6YzWLAWl1yU87kftd4sIcb_LdMptSBPkc956p-viC2J0GJFe-ckG3Jlja_srCes5nMbxhg",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-16 14:44:06,840:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-16 14:44:06,841:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 16 Aug 2026 18:44:06 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/545777283491
Replay-Nonce: Gn__iRFm5TCUmDK_Ac8BjGzX6GYHY4JlV25kXZN4pI4PsuVyiFs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-23T18:44:06Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760914972601"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/545777283491"
}
2026-08-16 14:44:06,842:DEBUG:acme.client:Storing nonce: Gn__iRFm5TCUmDK_Ac8BjGzX6GYHY4JlV25kXZN4pI4PsuVyiFs
2026-08-16 14:44:06,844:DEBUG:acme.client:JWS payload:
b''
2026-08-16 14:44:06,849:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760914972601:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbTVUQ1VtREtfQWM4QmpHelg2R1lIWTRKbFYyNWtYWk40cEk0UHN1VnlpRnMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwOTE0OTcyNjAxIn0",
"signature": "hD3ftjD5v2mbPJVc45eyDpVtDSwnUnMiX7OYBHiyJEtrMmhouMuQPwDzCvzBAz5vkCvuUxUP2qrmQSXJT2an4SabRoJqp5ZMQzM1tLiE6LVu8JhOMRTRVhB90Md83KZ1Xz2yPakUhop2CB8pUoOb5K5Swtg9YKLSxuZF6QLtgHvC1KtufgWJx834CRdQOlCJ9dKO-z-Hg6JIdnorywfUCiE6-JfOnT8vkcSDD3LzcN6TZsPC4vXrzeE9bHgANdNeqgcUp06Qk1NkopT3B87MzDt3mHKbe17utdRtoncswzDgJZPlXP1xodWXfmdsHUF_ox7Vcmy7oysvjm7Aui-xnA",
"payload": ""
}
2026-08-16 14:44:06,986:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760914972601 HTTP/1.1" 200 822
2026-08-16 14:44:06,987:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 18:44:06 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVua86IrbutZFB4emFIN0ZdfjnRccaqVu_DKEeZ6G-BDE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-23T18:44:06Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/818CPA",
"status": "pending",
"token": "6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/709SCA",
"status": "pending",
"token": "6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/cXHKEg",
"status": "pending",
"token": "6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM"
}
]
}
2026-08-16 14:44:06,988:DEBUG:acme.client:Storing nonce: CcqwGXyVua86IrbutZFB4emFIN0ZdfjnRccaqVu_DKEeZ6G-BDE
2026-08-16 14:44:06,988:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-16 14:44:06,988:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-16 14:44:06,988:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-16 14:44:06,988:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-16 14:44:06,991:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM
2026-08-16 14:44:06,994:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-16 14:44:06,996:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/818CPA:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VnVhODZJcmJ1dFpGQjRlbUZJTjBaZGZqblJjY2FxVnVfREtFZVo2Ry1CREUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYwOTE0OTcyNjAxLzgxOENQQSJ9",
"signature": "nYsD8NJkymp3jlSwdvL7XqycPiDwEggXijvGJqLw5XJHwpm_bj-_kjwwra3o_MqoHrkqTiht4udzKZsEANio5qE-_UkrrDZbFuix-xlICssxZFm-WoXrqR_4o8NSb0yWJ8JyQbKPWSRC-TQKDen161s_RO_glSKZ6Zz0_QUzwveKynlHIstXrbsn76tN2pPaj2YQzzIeB5SpaFhiX-c1DduOOxJtRvnnzPKEPpj0uM4VHiDSmkZE-loYpmg7nRB-o7V8llDcMCMam1WNHoT5iRSNxdz3CzuClYolJLQBbQYrQpImSCCY3RWlAIajkC5fNkgAhg9k2pj3jBvcK7zkAg",
"payload": "e30"
}
2026-08-16 14:44:07,134:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/760914972601/818CPA HTTP/1.1" 200 195
2026-08-16 14:44:07,134:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 18:44:07 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760914972601>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/818CPA
Replay-Nonce: Gn__iRFmIIMswfIgxfY2doZ1bQQ_dN68Asx08-XPv5TbxSY1wVQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/818CPA",
"status": "pending",
"token": "6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM"
}
2026-08-16 14:44:07,135:DEBUG:acme.client:Storing nonce: Gn__iRFmIIMswfIgxfY2doZ1bQQ_dN68Asx08-XPv5TbxSY1wVQ
2026-08-16 14:44:07,135:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-16 14:44:08,136:DEBUG:acme.client:JWS payload:
b''
2026-08-16 14:44:08,138:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/760914972601:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbUlJTXN3ZklneGZZMmRvWjFiUVFfZE42OEFzeDA4LVhQdjVUYnhTWTF3VlEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYwOTE0OTcyNjAxIn0",
"signature": "YkiUJ52w9atKLion7gTzFFGyvoV12JpE7wsnTH-2eR6An71As6qNx4olpo5ymNsKvB2hsXca793vnThmiMkc5ijpcnuUvvxIv6uz-nZbbXlM0KA_ghii1lS-YpFpM46EoW6YB_SBc2eZ8AKoaI9aoZIs9AWF9-NVg1anupaoo6CoCHSXDk5xPhlq4PUNWHy4OKc1C9kOkwU8aSgnWqcPuHzoGUdxYiiJX2LIHoIyEcBQ5UoOClLc_m5B7Dc6NN0tFUnIxUew4kRbQoHO0Hlf68EiSsjBa99ZYSyRtFuFoXuw_13ITuOLtWVV37EEWTNWT0c3THAHAZwbNzJNoOFsbg",
"payload": ""
}
2026-08-16 14:44:08,274:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/760914972601 HTTP/1.1" 200 1032
2026-08-16 14:44:08,275:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 16 Aug 2026 18:44:08 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVUECfiI1BtUK1w0Fl-RG1MvspP2WQ1l30JT3DMDysOBw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-23T18:44:06Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/760914972601/818CPA",
"status": "invalid",
"validated": "2026-08-16T18:44:07Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM: 404",
"status": 403
},
"token": "6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-16 14:44:08,275:DEBUG:acme.client:Storing nonce: CcqwGXyVUECfiI1BtUK1w0Fl-RG1MvspP2WQ1l30JT3DMDysOBw
2026-08-16 14:44:08,275:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-16 14:44:08,275:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-16 14:44:08,276:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-16 14:44:08,278:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 14:44:08,278:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-16 14:44:08,278:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-16 14:44:08,278:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/6sD2UsLQ_juR8uWl8rPccM3DazBHIjW5kCf1zx4zTlM
2026-08-16 14:44:08,279:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-16 14:44:08,279:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-16 14:44:08,283:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-16 14:44:08,284:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-16 14:44:08,285:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-16 14:44:08,285:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-16 14:44:08,285:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-16 14:44:08,285:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-16 14:44:08,286:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)
2026-08-17 02:21:33,866:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-17 02:21:33,867:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-17 02:21:33,867:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-17 02:21:33,868:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-17 02:21:33,881:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-17 02:21:33,883:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-17 02:21:33,885:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-17 02:21:33,899:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-17 02:21:33,899:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-17 02:21:33,899:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-17 02:21:33,899:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f43cfcfeb80>
Prep: True
2026-08-17 02:21:33,900:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f43cfcfeb80> and installer None
2026-08-17 02:21:33,900:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-17 02:21:33,954:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-17 02:21:33,955:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-17 02:21:33,957:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-17 02:21:34,383:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-17 02:21:34,384:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 06:21:34 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"pT8c4XnWEJg": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-17 02:21:34,385:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-17 02:21:34,387:DEBUG:acme.client:Requesting fresh nonce
2026-08-17 02:21:34,387:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-17 02:21:34,521:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-17 02:21:34,522:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 06:21:34 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: Gn__iRFmnzJVag34t0d9CAtMd7o9P6b_91UoGHfGhZuFEiCKRZI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-17 02:21:34,522:DEBUG:acme.client:Storing nonce: Gn__iRFmnzJVag34t0d9CAtMd7o9P6b_91UoGHfGhZuFEiCKRZI
2026-08-17 02:21:34,522:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-17 02:21:34,524:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbW56SlZhZzM0dDBkOUNBdE1kN285UDZiXzkxVW9HSGZHaFp1RkVpQ0tSWkkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "t53poWN0yGX-P-i0-UoleXxYdBSVzEeB-X_V5Y01UJbdoJz1SYWmqTCUYdk4WfiEY27Eor1mvAbj7UfY4rvWdcbZ_2OqvN4aoddBjFGJSHKevWc64_Rgtuhgf4MqHzmni2sLjPXAqGSuzCjR7DhrLzZ4N-ZM8Vn7xBNwpG0vufM63HeOq1fV6HsX6G6Vxr0FHil2haSYXJXkl7iElLmw5lDANjlrxWzFKzkaP_NtJn7z1zRSmEyFWGun1UXaXI6yc-UoRgBRc3_uR6KSjumEVPejmiS0WYhVEVC5I-ezuTZSXLcSDb4tn_gMKR4i_E5D9QU_CvQKSdBlluer3P_j7Q",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-17 02:21:34,766:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-17 02:21:34,766:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Mon, 17 Aug 2026 06:21:34 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/545974161021
Replay-Nonce: CcqwGXyV7gbr7TpAP1bnDS-TLQYOPTcix0J_LsgRUYll9s7-NYs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-24T06:21:34Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761231244961"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/545974161021"
}
2026-08-17 02:21:34,767:DEBUG:acme.client:Storing nonce: CcqwGXyV7gbr7TpAP1bnDS-TLQYOPTcix0J_LsgRUYll9s7-NYs
2026-08-17 02:21:34,767:DEBUG:acme.client:JWS payload:
b''
2026-08-17 02:21:34,769:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761231244961:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VjdnYnI3VHBBUDFibkRTLVRMUVlPUFRjaXgwSl9Mc2dSVVlsbDlzNy1OWXMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxMjMxMjQ0OTYxIn0",
"signature": "efewCZzW2l3fR-tmYCqyYdy9cSYv5rzIcHmobagjpLwGGp-AI505OHeFE_3CNrHEx8gXNJ-WZCRdFYRokHU9AOKtEe8eKcJIGVbFh9bvZDMN8Dy5l_jBMVdx3QYFkYxSsQiILwMrMxuXXCAoom6mRb_3bJQXaVZpe5KAu3zED940rl7iNG3VJDf6VYvxN3BXS2GjjofBsec4Kq7_e0vh0tpCuC8TrvSXfK2iWqx2okn_ZkHIo7OjgCJBPsHNVlV0eLlUHQwDy29_kXBHr0hAUgZuZMrK3sJfQ0GM498_ZdrWvXIYcMaCCwkaN6onmUNyTLRCR597vLobb4SXLF1dQQ",
"payload": ""
}
2026-08-17 02:21:34,922:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761231244961 HTTP/1.1" 200 822
2026-08-17 02:21:34,923:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 06:21:34 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVBm-9xpfUolFY58W3PcxL1gKFoYhGdvZBfsVw_1WAN1g
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-24T06:21:34Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/92Df2g",
"status": "pending",
"token": "TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/6bxRVQ",
"status": "pending",
"token": "TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/sIhVtQ",
"status": "pending",
"token": "TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts"
}
]
}
2026-08-17 02:21:34,923:DEBUG:acme.client:Storing nonce: CcqwGXyVBm-9xpfUolFY58W3PcxL1gKFoYhGdvZBfsVw_1WAN1g
2026-08-17 02:21:34,924:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-17 02:21:34,924:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-17 02:21:34,924:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-17 02:21:34,924:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-17 02:21:34,927:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts
2026-08-17 02:21:34,929:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-17 02:21:34,931:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/92Df2g:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VkJtLTl4cGZVb2xGWTU4VzNQY3hMMWdLRm9ZaEdkdlpCZnNWd18xV0FOMWciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYxMjMxMjQ0OTYxLzkyRGYyZyJ9",
"signature": "VMoS-F0pEKRnZ7d4mJyUUrRzaDImGLjJ9eEW6ewDT1aQqWCkHrCobFx3qFNGho39a2VRyp-25kOKgqzAdkhiWwyTpq0I6N26Z3GUDdb-DGp_SbaB2zaVRJoNwRUTFxodP_5Vto8eejlwcJDUVJ1136y08ja_vkSXBT2HZy-pFHoXSRG5UkiXLW7YekHqzBscfCoAvQCJ9vfGXOcGTmExcPS7aE8U_v7g7GqQoApy-BhqpLt6sNManc_jpsyBlNvndH3vXqDIpVEK57tCeUlMH2g1NjsikL6dTyd4B7wxXtB_Tkdpzv9ddoKg-dgqr-DN_PqnEgpCmq-2FZFl4g6Lqg",
"payload": "e30"
}
2026-08-17 02:21:35,071:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/761231244961/92Df2g HTTP/1.1" 200 195
2026-08-17 02:21:35,071:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 06:21:35 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761231244961>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/92Df2g
Replay-Nonce: CcqwGXyVckchDXnJIkD1SAXYQErIureGQYsqUWCfcROtDKY6DvM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/92Df2g",
"status": "pending",
"token": "TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts"
}
2026-08-17 02:21:35,072:DEBUG:acme.client:Storing nonce: CcqwGXyVckchDXnJIkD1SAXYQErIureGQYsqUWCfcROtDKY6DvM
2026-08-17 02:21:35,072:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-17 02:21:36,073:DEBUG:acme.client:JWS payload:
b''
2026-08-17 02:21:36,076:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761231244961:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VmNrY2hEWG5KSWtEMVNBWFlRRXJJdXJlR1FZc3FVV0NmY1JPdERLWTZEdk0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxMjMxMjQ0OTYxIn0",
"signature": "lie-JxMJYeTFtpwaVtmMki6KtwtWubuGPuqKxOnS7-8WHdg_tprtUDxUXB8Gz9cesoviNJuQoDI9z3SIjCkT7Ru3Cd7dczg7TQNXBYhex1EmkjdqfmKdKrutMkS8IYLyU7-863OO27sRe3SzjlehnA84TU_sy7MKdq_LPDdGaMOxY5e6U9vD4JAE-qcm7FdbrH7CGSle_IqClod6tsv32PT5gPK260apVClF5wR9eiCCPa9HuIu7ZOeFBRdkUOSwLP_lc5-eoUBWrPfk3dulcUTsLiw667he-VjrN8ZtIaFAMOSkWAf16kSUqpqcejHzrPH9JjtXVYKipqUdrB2lDg",
"payload": ""
}
2026-08-17 02:21:36,215:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761231244961 HTTP/1.1" 200 1032
2026-08-17 02:21:36,217:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 06:21:36 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: Gn__iRFmwFQVg58t1ig7-vkIWExJIkYKMieTaS-nFMVKpUPtL8o
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-24T06:21:34Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761231244961/92Df2g",
"status": "invalid",
"validated": "2026-08-17T06:21:35Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts: 404",
"status": 403
},
"token": "TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-17 02:21:36,217:DEBUG:acme.client:Storing nonce: Gn__iRFmwFQVg58t1ig7-vkIWExJIkYKMieTaS-nFMVKpUPtL8o
2026-08-17 02:21:36,217:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-17 02:21:36,218:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-17 02:21:36,218:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-17 02:21:36,219:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-17 02:21:36,220:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-17 02:21:36,220:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-17 02:21:36,220:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/TuvghxR_lRkjN2KqcfeYiXQ-ee5kHNqfwTqSXy9XHts
2026-08-17 02:21:36,220:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-17 02:21:36,221:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-17 02:21:36,226:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-17 02:21:36,228:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-17 02:21:36,228:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-17 02:21:36,228:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-17 02:21:36,228:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-17 02:21:36,228:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-17 02:21:36,229:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)
2026-08-17 14:44:05,012:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-17 14:44:05,013:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-17 14:44:05,013:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-17 14:44:05,014:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-17 14:44:05,026:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-17 14:44:05,029:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-17 14:44:05,031:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-17 14:44:05,047:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-17 14:44:05,047:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-17 14:44:05,048:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-17 14:44:05,048:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f1f74cd1b80>
Prep: True
2026-08-17 14:44:05,048:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f1f74cd1b80> and installer None
2026-08-17 14:44:05,048:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-17 14:44:05,111:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-17 14:44:05,112:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-17 14:44:05,113:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-17 14:44:05,539:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-17 14:44:05,539:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 18:44:05 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"7ppbBZp3UqI": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-17 14:44:05,541:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-17 14:44:05,543:DEBUG:acme.client:Requesting fresh nonce
2026-08-17 14:44:05,543:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-17 14:44:05,676:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-17 14:44:05,676:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 18:44:05 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVQPxYePklVRas3PYBPdHJEwQdijH7VHWPA6t1mdBe1-U
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-17 14:44:05,677:DEBUG:acme.client:Storing nonce: CcqwGXyVQPxYePklVRas3PYBPdHJEwQdijH7VHWPA6t1mdBe1-U
2026-08-17 14:44:05,677:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-17 14:44:05,679:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VlFQeFllUGtsVlJhczNQWUJQZEhKRXdRZGlqSDdWSFdQQTZ0MW1kQmUxLVUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "pxALGP_boHoJTEpxu2k1-33hO7-_H7dLqzjrBBt0a-OzPvQlhoWKvlXIF7YMBEDA9nf513YmJzZuRbCfVfB1uhhVmLxCqNMnruw77CKLgqkutw4zc5oq4OP1uIJzYb27kIk25rigTz2mx5pYpU1_D1_DZSQ00gTXTnx8ASHlhpspzps8W4m3N1tYkFp1a0w5PAtyiXoNrRIEBUOev3hGMRy2hsl8L_GY8ELCucX1T0FzqHi7XlT1BlaQdUwBCsrrDwbQpY7rpWFJDMVxlsvZm0YhSIrVuGmrXEOHQLmopvUIkgHqOAJ2dS6Ae9xQWk3EHWft3_9gfxWj39a19cTzYw",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-17 14:44:05,932:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-17 14:44:05,933:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Mon, 17 Aug 2026 18:44:05 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/546178692191
Replay-Nonce: Gn__iRFmmRfSsQreq4pYbpxIwqJ3XnBgL5P0BOAu5ICNxNmSfTw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-24T18:44:05Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761559385821"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/546178692191"
}
2026-08-17 14:44:05,933:DEBUG:acme.client:Storing nonce: Gn__iRFmmRfSsQreq4pYbpxIwqJ3XnBgL5P0BOAu5ICNxNmSfTw
2026-08-17 14:44:05,933:DEBUG:acme.client:JWS payload:
b''
2026-08-17 14:44:05,935:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761559385821:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbW1SZlNzUXJlcTRwWWJweEl3cUozWG5CZ0w1UDBCT0F1NUlDTnhObVNmVHciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxNTU5Mzg1ODIxIn0",
"signature": "A8gAOVR-vk8NAXagAep8VbQHOaLbNxPwY9bRRPWMLvCOc5e6su0s9Za5QQjlvQja7nYpl5XPyQT_MmFAJgHXWgJJlzTmBzwvBYbT_vrc0HpPiVjT09uS_Y_u22XUPmeqKkDiQEQ0KrRkkIE4RghLYRiMFFtx-mBHhCWZy3oAnVf81Z82lU4H50RkPHZWbEGmW2XQtoZRgSTxPJ_ebAYIkTMHIaQbRWGkyOOYbFYjic7XyAODF2yA_VE-pP54ZtS21oXS_mKeSoAOhswppFMYc2u43EFVP0WJkAXCcfPlwoknbmS9IVZmHv9l6TfeuIM9qaSU3cooLJzatixpcKq0Zg",
"payload": ""
}
2026-08-17 14:44:06,070:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761559385821 HTTP/1.1" 200 822
2026-08-17 14:44:06,071:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 18:44:06 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: Gn__iRFm5F6NzwFKYbyrUHBTEtp3R7UcLtqUFV3kkesE3o45sgM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-24T18:44:05Z",
"challenges": [
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/mgdSsQ",
"status": "pending",
"token": "rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/skRWkA",
"status": "pending",
"token": "rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/zSd9cQ",
"status": "pending",
"token": "rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ"
}
]
}
2026-08-17 14:44:06,071:DEBUG:acme.client:Storing nonce: Gn__iRFm5F6NzwFKYbyrUHBTEtp3R7UcLtqUFV3kkesE3o45sgM
2026-08-17 14:44:06,072:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-17 14:44:06,072:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-17 14:44:06,073:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-17 14:44:06,073:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-17 14:44:06,076:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ
2026-08-17 14:44:06,078:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-17 14:44:06,081:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/zSd9cQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHbl9faVJGbTVGNk56d0ZLWWJ5clVIQlRFdHAzUjdVY0x0cVVGVjNra2VzRTNvNDVzZ00iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYxNTU5Mzg1ODIxL3pTZDljUSJ9",
"signature": "cW2kIjWD7tHKLGb4FKCiPp1aMkUxYvvAWCHNLjVmHF9O7L3_uZoDOcHQ8fH21_pqKNJnaSGZZnKR8_mmAQD6mNDc3Fczjc0WkLER_jhiVI7DF237chwsYol1KkXOvVFK29fcsEXS-8VnUW_Op_CP1SG2WcvA5c6md2CtF7SDqdfrcVEkw9rpObPkyA2blxepm9LZo9qVbNnnez77nMqp_6qe5XG-SkOgsyDiuRE9tcIH0Ei2Gys2wHjpB-HoeEvuDI0RGGi_F7mDXmtDwnQ402YKnd6spyHCPhY2PwXiPKyQ9rHzEyingtqIwu4zmWYjrrzFrMxv6fEqrJFwxXuV5Q",
"payload": "e30"
}
2026-08-17 14:44:06,235:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/761559385821/zSd9cQ HTTP/1.1" 200 195
2026-08-17 14:44:06,236:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 18:44:06 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761559385821>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/zSd9cQ
Replay-Nonce: CcqwGXyVc0rB-I8XiehPk8h5LAZPhFBgOv0Ii0dqIUFadVn7s6I
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/zSd9cQ",
"status": "pending",
"token": "rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ"
}
2026-08-17 14:44:06,236:DEBUG:acme.client:Storing nonce: CcqwGXyVc0rB-I8XiehPk8h5LAZPhFBgOv0Ii0dqIUFadVn7s6I
2026-08-17 14:44:06,236:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-17 14:44:07,237:DEBUG:acme.client:JWS payload:
b''
2026-08-17 14:44:07,239:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761559385821:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJDY3F3R1h5VmMwckItSThYaWVoUGs4aDVMQVpQaEZCZ092MElpMGRxSVVGYWRWbjdzNkkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxNTU5Mzg1ODIxIn0",
"signature": "JEkaqK5b_4SEXNa9a6DIiJ7NjKJ6MIo_88Ilv4l3Mbg-CcqvNn2CkWM7vx5K72EmhyHBtQbNfNTmyGl-Cqr2fmjhw7mFBbVi_pVLAXhAY22sUzfghZM-WC4ePisl10eBYjalO0OHJhJd5_8ovVl9hfMZP2oyJ2mR4LEwPV_8riEjySUMVTP9tT4XF388nh_F0opivY6pgziY7ps57cgz5gvC3peevGx3_1d3tqG61d6gVHBoNpBJGkQSN0_bbjMCG__CfpInOEpUWFOBbRo_coD5_LtA1U3pJUWM2bI3KJRlpS4KdntJYYiuvRi23YAXFX63xCven4TUeCXVjGRqhQ",
"payload": ""
}
2026-08-17 14:44:07,375:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761559385821 HTTP/1.1" 200 1032
2026-08-17 14:44:07,376:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 17 Aug 2026 18:44:07 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: CcqwGXyVZQZRZsWADZwIAcLb_VpXeUwPBaf2ZF13KSXsFFwg5Fs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-24T18:44:05Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761559385821/zSd9cQ",
"status": "invalid",
"validated": "2026-08-17T18:44:06Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ: 404",
"status": 403
},
"token": "rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-17 14:44:07,376:DEBUG:acme.client:Storing nonce: CcqwGXyVZQZRZsWADZwIAcLb_VpXeUwPBaf2ZF13KSXsFFwg5Fs
2026-08-17 14:44:07,377:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-17 14:44:07,377:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-17 14:44:07,377:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-17 14:44:07,378:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-17 14:44:07,378:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-17 14:44:07,378:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-17 14:44:07,378:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/rLoj2rN01l0WLeoIt7WwneMbdmFJx0RuA0fsOF-GQzQ
2026-08-17 14:44:07,379:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-17 14:44:07,379:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-17 14:44:07,385:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-17 14:44:07,385:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-17 14:44:07,386:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-17 14:44:07,386:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-17 14:44:07,386:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-17 14:44:07,386:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-17 14:44:07,387:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)
2026-08-18 00:18:00,038:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-18 00:18:00,039:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-18 00:18:00,039:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-18 00:18:00,040:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-18 00:18:00,052:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-18 00:18:00,057:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-18 00:18:00,061:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-18 00:18:00,083:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-18 00:18:00,084:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-18 00:18:00,084:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-18 00:18:00,084:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f56b6afeb80>
Prep: True
2026-08-18 00:18:00,085:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f56b6afeb80> and installer None
2026-08-18 00:18:00,085:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-18 00:18:00,140:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-18 00:18:00,141:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-18 00:18:00,143:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-18 00:18:00,536:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-18 00:18:00,536:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Tue, 18 Aug 2026 04:18:00 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"jVeduaIoDto": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-18 00:18:00,538:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-18 00:18:00,540:DEBUG:acme.client:Requesting fresh nonce
2026-08-18 00:18:00,540:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-18 00:18:00,663:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-18 00:18:00,664:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Tue, 18 Aug 2026 04:18:00 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: huEC4XJSzZnGHEhEopI10msLw-f1wtsEhtb3SaUFBUXQLLJz6gw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-18 00:18:00,664:DEBUG:acme.client:Storing nonce: huEC4XJSzZnGHEhEopI10msLw-f1wtsEhtb3SaUFBUXQLLJz6gw
2026-08-18 00:18:00,664:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-18 00:18:00,667:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJodUVDNFhKU3pabkdIRWhFb3BJMTBtc0x3LWYxd3RzRWh0YjNTYVVGQlVYUUxMSno2Z3ciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "epC_6Qo1nSOXV3PtNf1Mt3pnuOYznGHcWPAGSu6HtqbuvcVs57V33k6RoS2E8nafCjc9eF6gozMCIM357VUE_MTzFluchVpWua8yrToc_aorUMHNXv5WqjZiPhmtQ9AKQvC_g_HUZ9xi-LbCNhtkQIXvLzO5knaavFvfu18XeCDaemk4Za83isv9kKGSm0NBu3RGqSqLNaoZ4FkaekCm3xk6Z1BAJa9QQGLvoWz2Z7t2-Qju1le85EbqNsOA4wvvEYIX95sGJmRM2K4mYkMVIbxdXCL7CdpsQy5ViL5UAX3-w7pHkhDAPlRfDkye4SmMQZdiAakW01q1j5n_1yjhNA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-18 00:18:00,838:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-18 00:18:00,839:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Tue, 18 Aug 2026 04:18:00 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/546334271481
Replay-Nonce: huEC4XJSaIjLkUoxaT0BTQEsL7Q4-mn6uvV4YmMyeFlwKWIobCs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-25T04:18:00Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761813665441"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/546334271481"
}
2026-08-18 00:18:00,839:DEBUG:acme.client:Storing nonce: huEC4XJSaIjLkUoxaT0BTQEsL7Q4-mn6uvV4YmMyeFlwKWIobCs
2026-08-18 00:18:00,839:DEBUG:acme.client:JWS payload:
b''
2026-08-18 00:18:00,840:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761813665441:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJodUVDNFhKU2FJakxrVW94YVQwQlRRRXNMN1E0LW1uNnV2VjRZbU15ZUZsd0tXSW9iQ3MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxODEzNjY1NDQxIn0",
"signature": "mreX-fv13UVmSQESCLOvVJNuTw-6QmzfbJAEDyqFhcWDnYHo1Bodi_IeNshP65UJBO9n3ZeUtsHGYgzeaQtYBEQ9CGVanlxd4mGJCkSat9h0T8PD2ez2ir0am1O1Q2xzvWjK2YH14YCtq3Tqsn2SMPWYkwpR08b9yqAMpgB-dcmFJ0PEXvto10pL0v900AsBUYmsuH25Jka9Z3E__8dxlHQhbajgiOX-pcMbWjOnKtPebRRcX7Wl4jBzw5yZImbyvEMnH65cMMzpOkfL1G73dcMyVm0fHRnj7qDdeERZcX17M3M4FK-tBzXJjhmYihToYCx8Ih1hCJLsDhY6MZHGUw",
"payload": ""
}
2026-08-18 00:18:00,978:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761813665441 HTTP/1.1" 200 822
2026-08-18 00:18:00,979:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Tue, 18 Aug 2026 04:18:00 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: G0CdongCvVDBnIgN87mbDmlhiQu1svUKnKcB1Bp6QOAn33MTF0U
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-25T04:18:00Z",
"challenges": [
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/f1fcYQ",
"status": "pending",
"token": "4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/80-UcA",
"status": "pending",
"token": "4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/sZAqPw",
"status": "pending",
"token": "4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8"
}
]
}
2026-08-18 00:18:00,979:DEBUG:acme.client:Storing nonce: G0CdongCvVDBnIgN87mbDmlhiQu1svUKnKcB1Bp6QOAn33MTF0U
2026-08-18 00:18:00,980:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-18 00:18:00,980:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-18 00:18:00,980:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-18 00:18:00,981:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-18 00:18:00,983:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8
2026-08-18 00:18:00,984:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-18 00:18:00,986:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/sZAqPw:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJHMENkb25nQ3ZWREJuSWdOODdtYkRtbGhpUXUxc3ZVS25LY0IxQnA2UU9BbjMzTVRGMFUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzYxODEzNjY1NDQxL3NaQXFQdyJ9",
"signature": "otTzaZ0t2R8yk4ynbDMYlq4uPypII4BsbQVHIIdHI4Q9sgbyVe9sr2-qiVypXtuUdRu9L2ctF84tj-4gZsUFqu-tyjkKyeCQnXG5W1te5ohRc2JnlRabhYKw3L41HyOPH2T_Ogo60VcdJLVORgLkF2FzliRTrnwHUHh0FOS5EFVl5gQ3nDs7s_Oez0VolMHNm2VyBlXS2v81X7fBOyslsfu7FpyfisFo7KcYguqmAcg6SUF6dEwLW1LQP5J1JNA3kZqoQLr6TaEK01-bBYo0nwgXcoD2pxOFSxBCEDyvsUjXT2AJaVR24wBx2up3BwrcIK8pNi_w76e8t-RhN-0RBg",
"payload": "e30"
}
2026-08-18 00:18:01,126:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/761813665441/sZAqPw HTTP/1.1" 200 195
2026-08-18 00:18:01,127:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Tue, 18 Aug 2026 04:18:01 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761813665441>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/sZAqPw
Replay-Nonce: huEC4XJS_9lcq1n_V8KWIdWyZ2Sqn4NYhYDx044-6HZX7-ITdsM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/sZAqPw",
"status": "pending",
"token": "4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8"
}
2026-08-18 00:18:01,127:DEBUG:acme.client:Storing nonce: huEC4XJS_9lcq1n_V8KWIdWyZ2Sqn4NYhYDx044-6HZX7-ITdsM
2026-08-18 00:18:01,128:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-18 00:18:02,129:DEBUG:acme.client:JWS payload:
b''
2026-08-18 00:18:02,130:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/761813665441:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJodUVDNFhKU185bGNxMW5fVjhLV0lkV3laMlNxbjROWWhZRHgwNDQtNkhaWDctSVRkc00iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzYxODEzNjY1NDQxIn0",
"signature": "frcfZB1_WDIYQ7JufQqC4u3MJDInYXg3ecIaV5v2ModahybJVFzRSJMDXA_NReKR3k9wQAi3YpRCKzFV1DVqTGhVZHRJcEcD6LqLa32jghE6wCXRWEsQZI130vsMbshM9RSV1ZwJpZDUYzTHH8IUyMUlQ9ZNEE4TB0aUnna8iEyu5aKDiVKOf8JG6ckqYjwdoW6E1OCbOSLV_K3IbbQtWmVl3S6k3Ik0M9r7dci7fVqXUO8tBv6IJqHjffWShfA50p2ZlpE_3dG0-cxtQ4VvtCicc-UFyh2_4MlI89Jkwu1UJihnXHgK0tAkhHtCrlqTIFDMsXcPfG40AAyBLRCDuA",
"payload": ""
}
2026-08-18 00:18:02,258:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/761813665441 HTTP/1.1" 200 1032
2026-08-18 00:18:02,258:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Tue, 18 Aug 2026 04:18:02 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: G0CdongCxJ4FuD-3fTpqrpn6QKFvO6Iy2HcXa_gne8qiYBs1dJs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-25T04:18:00Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/761813665441/sZAqPw",
"status": "invalid",
"validated": "2026-08-18T04:18:01Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8: 404",
"status": 403
},
"token": "4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-18 00:18:02,258:DEBUG:acme.client:Storing nonce: G0CdongCxJ4FuD-3fTpqrpn6QKFvO6Iy2HcXa_gne8qiYBs1dJs
2026-08-18 00:18:02,259:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-18 00:18:02,259:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-18 00:18:02,259:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-18 00:18:02,260:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-18 00:18:02,260:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-18 00:18:02,260:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-18 00:18:02,260:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/4X1d3TVmrQHn7vi1NXX0bhBBe-boee3XeUPkGiJXWH8
2026-08-18 00:18:02,261:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-18 00:18:02,261:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-18 00:18:02,267:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-18 00:18:02,268:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-18 00:18:02,268:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-18 00:18:02,269:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-18 00:18:02,269:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-18 00:18:02,269:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-18 00:18:02,270:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)