Acme.sh - Can not renew certificate. Could not get nonce

Inteli · January 15, 2021, 12:57pm

My domain is: eel.limtel.com,avatar.limtel.com,pubsub.limtel.com,eel-elastic.limtel.com

I ran this command: /root/.acme.sh/acme.sh --cron --home "/root/.acme.sh" --debug 2

It produced this output:

[Fri Jan 15 12:57:48 UTC 2021] Lets find script dir.
[Fri Jan 15 12:57:48 UTC 2021] _SCRIPT_='/root/.acme.sh/acme.sh'
[Fri Jan 15 12:57:48 UTC 2021] _script='/root/.acme.sh/acme.sh'
[Fri Jan 15 12:57:48 UTC 2021] _script_home='/root/.acme.sh'
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v2.8.9
[Fri Jan 15 12:57:48 UTC 2021] Running cmd: cron
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] default_acme_server
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] ===Starting cron===
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] _stopRenewOnError
[Fri Jan 15 12:57:48 UTC 2021] _set_level='2'
[Fri Jan 15 12:57:48 UTC 2021] di='/root/.acme.sh/cloud.limdesk.com/'
[Fri Jan 15 12:57:48 UTC 2021] d='cloud.limdesk.com'
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] DOMAIN_PATH='/root/.acme.sh/cloud.limdesk.com'
[Fri Jan 15 12:57:48 UTC 2021] Renew: 'cloud.limdesk.com'
[Fri Jan 15 12:57:48 UTC 2021] Le_API='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] Skip, Next renewal time is: Mon Jan 25 05:11:10 UTC 2021
[Fri Jan 15 12:57:48 UTC 2021] Add '--force' to force to renew.
[Fri Jan 15 12:57:48 UTC 2021] Return code: 2
[Fri Jan 15 12:57:48 UTC 2021] Skipped cloud.limdesk.com
[Fri Jan 15 12:57:48 UTC 2021] di='/root/.acme.sh/eel.limtel.com/'
[Fri Jan 15 12:57:48 UTC 2021] d='eel.limtel.com'
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] DOMAIN_PATH='/root/.acme.sh/eel.limtel.com'
[Fri Jan 15 12:57:48 UTC 2021] Renew: 'eel.limtel.com'
[Fri Jan 15 12:57:48 UTC 2021] Le_API='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:48 UTC 2021] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] _main_domain='eel.limtel.com'
[Fri Jan 15 12:57:48 UTC 2021] _alt_domains='avatar.limtel.com,pubsub.limtel.com,eel-elastic.limtel.com'
[Fri Jan 15 12:57:48 UTC 2021] 'dns_r53' does not contain 'dns'
[Fri Jan 15 12:57:48 UTC 2021] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org
[Fri Jan 15 12:57:48 UTC 2021] _init api for server: https://acme-v01.api.letsencrypt.org
[Fri Jan 15 12:57:48 UTC 2021] GET
[Fri Jan 15 12:57:48 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:48 UTC 2021] timeout=
[Fri Jan 15 12:57:48 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.D7VptlKIWJ  -g '
[Fri Jan 15 12:57:49 UTC 2021] ret='0'
[Fri Jan 15 12:57:49 UTC 2021] response='<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content=
  "width=device-width, initial-scale=1">

  <title>Boulder: The Let's Encrypt CA</title>
  <link href=
  "//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css"
  rel="stylesheet" type="text/css">
  <link href=
  "//maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css"
  rel="stylesheet" type="text/css">
</head>

<body>
  <div class="container-fluid">
    <div class="row">
      <div class="col-xs-6 text-right">
        <p style="font-size: 90px;">
        <i class="fa fa-barcode"></i></p>
      </div>

      <div class="col-xs-6 text-left">
        <h1>Boulder<br>
        <small>The Let's Encrypt CA</small></h1>
      </div>
    </div>

    <div class="row">
      <div class="col-xs-8 col-xs-offset-2 text-center">
        <h3>This is an <a href="https://github.com/letsencrypt/acme-spec/">ACME</a> Certificate Authority running <a href="https://github.com/letsencrypt/boulder">Boulder</a>.</h3>
        <p>This is a <em>programmatic</em> endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See <a href="https://letsencrypt.org/"><tt>https://letsencrypt.org/</tt></a> for help.</p>
        <p>If you're trying to use this service, note that the starting point, <em>the directory</em>, is available at this URL: <a href="https://acme-v02.api.letsencrypt.org/directory"><tt>https://acme-v02.api.letsencrypt.org/directory</a></tt>.</p>
      </div>
    </div>
    <div class="row">
      <div class="col-xs-4 col-xs-offset-2 text-center">
        <p><a href="https://letsencrypt.status.io" title="Twitter">
          <i class="fa fa-area-chart"></i>
          Service Status (letsencrypt.status.io)
        </a></p>
      </div>
      <div class="col-xs-4 text-center">
        <p><a href="https://twitter.com/letsencrypt" title="Twitter">
          <i class="fa fa-twitter"></i>
          Check with us on Twitter
        </a></p>
      </div>
    </div> <!-- row -->
  </div>


</body>
</html>'
[Fri Jan 15 12:57:49 UTC 2021] ACME_KEY_CHANGE
[Fri Jan 15 12:57:49 UTC 2021] ACME_NEW_AUTHZ
[Fri Jan 15 12:57:49 UTC 2021] ACME_NEW_ORDER
[Fri Jan 15 12:57:49 UTC 2021] ACME_NEW_ACCOUNT
[Fri Jan 15 12:57:49 UTC 2021] ACME_REVOKE_CERT
[Fri Jan 15 12:57:49 UTC 2021] ACME_AGREEMENT
[Fri Jan 15 12:57:49 UTC 2021] ACME_NEW_NONCE
[Fri Jan 15 12:57:49 UTC 2021] ACME_VERSION
[Fri Jan 15 12:57:49 UTC 2021] Le_NextRenewTime='1609910019'
[Fri Jan 15 12:57:49 UTC 2021] Using CA: https://acme-v01.api.letsencrypt.org
[Fri Jan 15 12:57:49 UTC 2021] _on_before_issue
[Fri Jan 15 12:57:49 UTC 2021] _chk_main_domain='eel.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] _chk_alt_domains='avatar.limtel.com,pubsub.limtel.com,eel-elastic.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] 'dns_r53' does not contain 'no'
[Fri Jan 15 12:57:49 UTC 2021] Le_LocalAddress
[Fri Jan 15 12:57:49 UTC 2021] d='eel.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] Check for domain='eel.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] _currentRoot='dns_r53'
[Fri Jan 15 12:57:49 UTC 2021] d='avatar.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] Check for domain='avatar.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] _currentRoot='dns_r53'
[Fri Jan 15 12:57:49 UTC 2021] d='pubsub.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] Check for domain='pubsub.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] _currentRoot='dns_r53'
[Fri Jan 15 12:57:49 UTC 2021] d='eel-elastic.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] Check for domain='eel-elastic.limtel.com'
[Fri Jan 15 12:57:49 UTC 2021] _currentRoot='dns_r53'
[Fri Jan 15 12:57:49 UTC 2021] d
[Fri Jan 15 12:57:49 UTC 2021] 'dns_r53' does not contain 'apache'
[Fri Jan 15 12:57:49 UTC 2021] _saved_account_key_hash='kv1mYs4K9+h9ZJgNvKM0VbO2K6PPOwNJHX204R7pA38='
[Fri Jan 15 12:57:49 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:57:49 UTC 2021] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:49 UTC 2021] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:49 UTC 2021] _init api for server: https://acme-v01.api.letsencrypt.org
[Fri Jan 15 12:57:49 UTC 2021] GET
[Fri Jan 15 12:57:49 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:49 UTC 2021] timeout=
[Fri Jan 15 12:57:49 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.nYk3vptTXb  -g '
[Fri Jan 15 12:57:50 UTC 2021] ret='0'
[Fri Jan 15 12:57:50 UTC 2021] response='<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content=
  "width=device-width, initial-scale=1">

  <title>Boulder: The Let's Encrypt CA</title>
  <link href=
  "//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css"
  rel="stylesheet" type="text/css">
  <link href=
  "//maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css"
  rel="stylesheet" type="text/css">
</head>

<body>
  <div class="container-fluid">
    <div class="row">
      <div class="col-xs-6 text-right">
        <p style="font-size: 90px;">
        <i class="fa fa-barcode"></i></p>
      </div>

      <div class="col-xs-6 text-left">
        <h1>Boulder<br>
        <small>The Let's Encrypt CA</small></h1>
      </div>
    </div>

    <div class="row">
      <div class="col-xs-8 col-xs-offset-2 text-center">
        <h3>This is an <a href="https://github.com/letsencrypt/acme-spec/">ACME</a> Certificate Authority running <a href="https://github.com/letsencrypt/boulder">Boulder</a>.</h3>
        <p>This is a <em>programmatic</em> endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See <a href="https://letsencrypt.org/"><tt>https://letsencrypt.org/</tt></a> for help.</p>
        <p>If you're trying to use this service, note that the starting point, <em>the directory</em>, is available at this URL: <a href="https://acme-v02.api.letsencrypt.org/directory"><tt>https://acme-v02.api.letsencrypt.org/directory</a></tt>.</p>
      </div>
    </div>
    <div class="row">
      <div class="col-xs-4 col-xs-offset-2 text-center">
        <p><a href="https://letsencrypt.status.io" title="Twitter">
          <i class="fa fa-area-chart"></i>
          Service Status (letsencrypt.status.io)
        </a></p>
      </div>
      <div class="col-xs-4 text-center">
        <p><a href="https://twitter.com/letsencrypt" title="Twitter">
          <i class="fa fa-twitter"></i>
          Check with us on Twitter
        </a></p>
      </div>
    </div> <!-- row -->
  </div>


</body>
</html>'
[Fri Jan 15 12:57:50 UTC 2021] ACME_KEY_CHANGE
[Fri Jan 15 12:57:50 UTC 2021] ACME_NEW_AUTHZ
[Fri Jan 15 12:57:50 UTC 2021] ACME_NEW_ORDER
[Fri Jan 15 12:57:50 UTC 2021] ACME_NEW_ACCOUNT
[Fri Jan 15 12:57:50 UTC 2021] ACME_REVOKE_CERT
[Fri Jan 15 12:57:50 UTC 2021] ACME_AGREEMENT
[Fri Jan 15 12:57:50 UTC 2021] ACME_NEW_NONCE
[Fri Jan 15 12:57:50 UTC 2021] ACME_VERSION
[Fri Jan 15 12:57:50 UTC 2021] RSA key
[Fri Jan 15 12:57:50 UTC 2021] Registering account: https://acme-v01.api.letsencrypt.org
[Fri Jan 15 12:57:50 UTC 2021] url
[Fri Jan 15 12:57:50 UTC 2021] payload='{"resource": "new-account", "terms-of-service-agreed": true, "agreement": ""}'
[Fri Jan 15 12:57:50 UTC 2021] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key
[Fri Jan 15 12:57:50 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:50 UTC 2021] GET
[Fri Jan 15 12:57:50 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:50 UTC 2021] timeout=
[Fri Jan 15 12:57:50 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.XNp8Xhg0f5  -g '
[Fri Jan 15 12:57:51 UTC 2021] ret='0'
[Fri Jan 15 12:57:51 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:36 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:57:51 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:57:51 UTC 2021] nonce
[Fri Jan 15 12:57:51 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:57:54 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:54 UTC 2021] GET
[Fri Jan 15 12:57:54 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:54 UTC 2021] timeout=
[Fri Jan 15 12:57:54 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.nk2KkUXtRe  -g '
[Fri Jan 15 12:57:55 UTC 2021] ret='0'
[Fri Jan 15 12:57:55 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:40 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:27:07 GMT
Connection: keep-alive
ETag: "5f7b9dbb-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:57:55 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:57:55 UTC 2021] nonce
[Fri Jan 15 12:57:55 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:57:58 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:58 UTC 2021] GET
[Fri Jan 15 12:57:58 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:57:58 UTC 2021] timeout=
[Fri Jan 15 12:57:58 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.nmUE6yz4Fx  -g '
[Fri Jan 15 12:57:58 UTC 2021] ret='0'
[Fri Jan 15 12:57:58 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:44 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Wed, 09 Oct 2019 18:16:22 GMT
Connection: keep-alive
ETag: "5d9e23f6-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:57:58 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:57:58 UTC 2021] nonce
[Fri Jan 15 12:57:58 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:01 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:01 UTC 2021] GET
[Fri Jan 15 12:58:01 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:01 UTC 2021] timeout=
[Fri Jan 15 12:58:01 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.jpo8EIJIZp  -g '
[Fri Jan 15 12:58:02 UTC 2021] ret='0'
[Fri Jan 15 12:58:02 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:47 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 25 Feb 2019 19:57:39 GMT
Connection: keep-alive
ETag: "5c7448b3-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:02 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:02 UTC 2021] nonce
[Fri Jan 15 12:58:02 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:05 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:05 UTC 2021] GET
[Fri Jan 15 12:58:05 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:05 UTC 2021] timeout=
[Fri Jan 15 12:58:05 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.1ezsnHL5nC  -g '
[Fri Jan 15 12:58:06 UTC 2021] ret='0'
[Fri Jan 15 12:58:06 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:51 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:06 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:06 UTC 2021] nonce
[Fri Jan 15 12:58:06 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:09 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:09 UTC 2021] GET
[Fri Jan 15 12:58:09 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:09 UTC 2021] timeout=
[Fri Jan 15 12:58:09 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.ZtJEGiw417  -g '
[Fri Jan 15 12:58:09 UTC 2021] ret='0'
[Fri Jan 15 12:58:09 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:55 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:27:07 GMT
Connection: keep-alive
ETag: "5f7b9dbb-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:09 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:09 UTC 2021] nonce
[Fri Jan 15 12:58:09 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:12 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:13 UTC 2021] GET
[Fri Jan 15 12:58:13 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:13 UTC 2021] timeout=
[Fri Jan 15 12:58:13 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.vlzQtfV4ZX  -g '
[Fri Jan 15 12:58:13 UTC 2021] ret='0'
[Fri Jan 15 12:58:13 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:55:59 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:27:07 GMT
Connection: keep-alive
ETag: "5f7b9dbb-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:13 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:13 UTC 2021] nonce
[Fri Jan 15 12:58:13 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:16 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:16 UTC 2021] GET
[Fri Jan 15 12:58:16 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:16 UTC 2021] timeout=
[Fri Jan 15 12:58:16 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.cjEA6ueAZY  -g '
[Fri Jan 15 12:58:17 UTC 2021] ret='0'
[Fri Jan 15 12:58:17 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:02 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Wed, 09 Oct 2019 18:16:22 GMT
Connection: keep-alive
ETag: "5d9e23f6-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:17 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:17 UTC 2021] nonce
[Fri Jan 15 12:58:17 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:20 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:20 UTC 2021] GET
[Fri Jan 15 12:58:20 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:20 UTC 2021] timeout=
[Fri Jan 15 12:58:20 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.wzfKgFnqac  -g '
[Fri Jan 15 12:58:21 UTC 2021] ret='0'
[Fri Jan 15 12:58:21 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:06 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 25 Feb 2019 19:57:39 GMT
Connection: keep-alive
ETag: "5c7448b3-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:21 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:21 UTC 2021] nonce
[Fri Jan 15 12:58:21 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:24 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:24 UTC 2021] GET
[Fri Jan 15 12:58:24 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:24 UTC 2021] timeout=
[Fri Jan 15 12:58:24 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.YuHeUcOhhF  -g '
[Fri Jan 15 12:58:24 UTC 2021] ret='0'
[Fri Jan 15 12:58:24 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:10 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:24 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:24 UTC 2021] nonce
[Fri Jan 15 12:58:24 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:27 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:27 UTC 2021] GET
[Fri Jan 15 12:58:27 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:27 UTC 2021] timeout=
[Fri Jan 15 12:58:27 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.F8OyDfGIVD  -g '
[Fri Jan 15 12:58:28 UTC 2021] ret='0'
[Fri Jan 15 12:58:28 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:13 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 25 Feb 2019 20:15:27 GMT
Connection: keep-alive
ETag: "5c744cdf-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:28 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:28 UTC 2021] nonce
[Fri Jan 15 12:58:28 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:31 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:31 UTC 2021] GET
[Fri Jan 15 12:58:31 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:31 UTC 2021] timeout=
[Fri Jan 15 12:58:31 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.5cUdNPFJJC  -g '
[Fri Jan 15 12:58:32 UTC 2021] ret='0'
[Fri Jan 15 12:58:32 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:17 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Wed, 09 Oct 2019 18:16:22 GMT
Connection: keep-alive
ETag: "5d9e23f6-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:32 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:32 UTC 2021] nonce
[Fri Jan 15 12:58:32 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:35 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:35 UTC 2021] GET
[Fri Jan 15 12:58:35 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:35 UTC 2021] timeout=
[Fri Jan 15 12:58:35 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.vSg9MFypef  -g '
[Fri Jan 15 12:58:35 UTC 2021] ret='0'
[Fri Jan 15 12:58:35 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:21 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:35 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:35 UTC 2021] nonce
[Fri Jan 15 12:58:35 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:38 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:38 UTC 2021] GET
[Fri Jan 15 12:58:38 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:38 UTC 2021] timeout=
[Fri Jan 15 12:58:38 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.99mqqy1RJG  -g '
[Fri Jan 15 12:58:39 UTC 2021] ret='0'
[Fri Jan 15 12:58:39 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:25 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 25 Feb 2019 20:15:27 GMT
Connection: keep-alive
ETag: "5c744cdf-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:39 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:39 UTC 2021] nonce
[Fri Jan 15 12:58:39 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:42 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:42 UTC 2021] GET
[Fri Jan 15 12:58:42 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:42 UTC 2021] timeout=
[Fri Jan 15 12:58:42 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.n9VU4v2BTf  -g '
[Fri Jan 15 12:58:43 UTC 2021] ret='0'
[Fri Jan 15 12:58:43 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:28 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:27:07 GMT
Connection: keep-alive
ETag: "5f7b9dbb-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:43 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:43 UTC 2021] nonce
[Fri Jan 15 12:58:43 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:46 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:46 UTC 2021] GET
[Fri Jan 15 12:58:46 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:46 UTC 2021] timeout=
[Fri Jan 15 12:58:46 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.4qzQ3zOnac  -g '
[Fri Jan 15 12:58:47 UTC 2021] ret='0'
[Fri Jan 15 12:58:47 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:32 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:27:07 GMT
Connection: keep-alive
ETag: "5f7b9dbb-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:47 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:47 UTC 2021] nonce
[Fri Jan 15 12:58:47 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:50 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:50 UTC 2021] GET
[Fri Jan 15 12:58:50 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:50 UTC 2021] timeout=
[Fri Jan 15 12:58:50 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.7fidK3sNaI  -g '
[Fri Jan 15 12:58:50 UTC 2021] ret='0'
[Fri Jan 15 12:58:50 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:36 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Wed, 09 Oct 2019 18:16:23 GMT
Connection: keep-alive
ETag: "5d9e23f7-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:50 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:50 UTC 2021] nonce
[Fri Jan 15 12:58:50 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:53 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:53 UTC 2021] GET
[Fri Jan 15 12:58:53 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:53 UTC 2021] timeout=
[Fri Jan 15 12:58:53 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.yPAC4AB30D  -g '
[Fri Jan 15 12:58:54 UTC 2021] ret='0'
[Fri Jan 15 12:58:54 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:40 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:54 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:54 UTC 2021] nonce
[Fri Jan 15 12:58:54 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:58:57 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:57 UTC 2021] GET
[Fri Jan 15 12:58:57 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:58:57 UTC 2021] timeout=
[Fri Jan 15 12:58:57 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.kC10kNM2IJ  -g '
[Fri Jan 15 12:58:58 UTC 2021] ret='0'
[Fri Jan 15 12:58:58 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:43 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:58:58 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:58:58 UTC 2021] nonce
[Fri Jan 15 12:58:58 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:59:01 UTC 2021] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:01 UTC 2021] GET
[Fri Jan 15 12:59:01 UTC 2021] url='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:01 UTC 2021] timeout=
[Fri Jan 15 12:59:01 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.LmT1S4GN0q  -g '
[Fri Jan 15 12:59:01 UTC 2021] ret='0'
[Fri Jan 15 12:59:01 UTC 2021] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:56:47 GMT
Content-Type: text/html
Content-Length: 2174
Last-Modified: Mon, 05 Oct 2020 22:28:10 GMT
Connection: keep-alive
ETag: "5f7b9dfa-87e"
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
'
[Fri Jan 15 12:59:01 UTC 2021] _CACHED_NONCE
[Fri Jan 15 12:59:01 UTC 2021] nonce
[Fri Jan 15 12:59:01 UTC 2021] Could not get nonce, let's try again.
[Fri Jan 15 12:59:04 UTC 2021] Giving up sending to CA server after 20 retries.
[Fri Jan 15 12:59:04 UTC 2021] Register account Error: <!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content=
  "width=device-width, initial-scale=1">

  <title>Boulder: The Let's Encrypt CA</title>
  <link href=
  "//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css"
  rel="stylesheet" type="text/css">
  <link href=
  "//maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css"
  rel="stylesheet" type="text/css">
</head>

<body>
  <div class="container-fluid">
    <div class="row">
      <div class="col-xs-6 text-right">
        <p style="font-size: 90px;">
        <i class="fa fa-barcode"></i></p>
      </div>

      <div class="col-xs-6 text-left">
        <h1>Boulder<br>
        <small>The Let's Encrypt CA</small></h1>
      </div>
    </div>

    <div class="row">
      <div class="col-xs-8 col-xs-offset-2 text-center">
        <h3>This is an <a href="https://github.com/letsencrypt/acme-spec/">ACME</a> Certificate Authority running <a href="https://github.com/letsencrypt/boulder">Boulder</a>.</h3>
        <p>This is a <em>programmatic</em> endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See <a href="https://letsencrypt.org/"><tt>https://letsencrypt.org/</tt></a> for help.</p>
        <p>If you're trying to use this service, note that the starting point, <em>the directory</em>, is available at this URL: <a href="https://acme-v02.api.letsencrypt.org/directory"><tt>https://acme-v02.api.letsencrypt.org/directory</a></tt>.</p>
      </div>
    </div>
    <div class="row">
      <div class="col-xs-4 col-xs-offset-2 text-center">
        <p><a href="https://letsencrypt.status.io" title="Twitter">
          <i class="fa fa-area-chart"></i>
          Service Status (letsencrypt.status.io)
        </a></p>
      </div>
      <div class="col-xs-4 text-center">
        <p><a href="https://twitter.com/letsencrypt" title="Twitter">
          <i class="fa fa-twitter"></i>
          Check with us on Twitter
        </a></p>
      </div>
    </div> <!-- row -->
  </div>


</body>
</html>
[Fri Jan 15 12:59:04 UTC 2021] _on_issue_err
[Fri Jan 15 12:59:04 UTC 2021] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Fri Jan 15 12:59:04 UTC 2021] _chk_vlist
[Fri Jan 15 12:59:04 UTC 2021] 'dns_r53' does not contain 'dns'
[Fri Jan 15 12:59:04 UTC 2021] socat doesn't exist.
[Fri Jan 15 12:59:04 UTC 2021] Diagnosis versions: 
openssl:openssl
OpenSSL 1.0.1f 6 Jan 2014
apache:
apache doesn't exist.
nginx:
nginx version: nginx/1.4.6 (Ubuntu)
built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04.3) 
TLS SNI support enabled
configure arguments: --with-cc-opt='-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-ipv6 --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_addition_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_spdy_module --with-http_sub_module --with-http_xslt_module --with-mail --with-mail_ssl_module
socat:
[Fri Jan 15 12:59:04 UTC 2021] Return code: 1
[Fri Jan 15 12:59:04 UTC 2021] Error renew eel.limtel.com.
[Fri Jan 15 12:59:04 UTC 2021] di='/root/.acme.sh/limdesk.limpbx.pl/'
[Fri Jan 15 12:59:04 UTC 2021] d='limdesk.limpbx.pl'
[Fri Jan 15 12:59:05 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:59:05 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:59:05 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] DOMAIN_PATH='/root/.acme.sh/limdesk.limpbx.pl'
[Fri Jan 15 12:59:05 UTC 2021] Renew: 'limdesk.limpbx.pl'
[Fri Jan 15 12:59:05 UTC 2021] Le_API='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:59:05 UTC 2021] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] Skip, Next renewal time is: Sat Feb  6 05:11:10 UTC 2021
[Fri Jan 15 12:59:05 UTC 2021] Add '--force' to force to renew.
[Fri Jan 15 12:59:05 UTC 2021] Return code: 2
[Fri Jan 15 12:59:05 UTC 2021] Skipped limdesk.limpbx.pl
[Fri Jan 15 12:59:05 UTC 2021] di='/root/.acme.sh/socket.limdesk.com/'
[Fri Jan 15 12:59:05 UTC 2021] d='socket.limdesk.com'
[Fri Jan 15 12:59:05 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:59:05 UTC 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Jan 15 12:59:05 UTC 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] DOMAIN_PATH='/root/.acme.sh/socket.limdesk.com'
[Fri Jan 15 12:59:05 UTC 2021] Renew: 'socket.limdesk.com'
[Fri Jan 15 12:59:05 UTC 2021] Le_API='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] Using config home:/root/.acme.sh
[Fri Jan 15 12:59:05 UTC 2021] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'
[Fri Jan 15 12:59:05 UTC 2021] Skip, Next renewal time is: Sun Jan 17 05:11:11 UTC 2021
[Fri Jan 15 12:59:05 UTC 2021] Add '--force' to force to renew.
[Fri Jan 15 12:59:05 UTC 2021] Return code: 2
[Fri Jan 15 12:59:05 UTC 2021] Skipped socket.limdesk.com
[Fri Jan 15 12:59:05 UTC 2021] _error_level='1'
[Fri Jan 15 12:59:05 UTC 2021] _set_level='2'
[Fri Jan 15 12:59:05 UTC 2021] The NOTIFY_HOOK is empty, just return.
[Fri Jan 15 12:59:05 UTC 2021] ===End cron===

The operating system my web server runs on is: Ubuntu
I can login to a root shell on my machine: yes
I'm using a control panel to manage my site: no
The version of my client is: https://github.com/acmesh-official/acme.sh v2.8.9

Additional commands:

# curl -I https://acme-v01.api.letsencrypt.org/directory
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:51:33 GMT
Content-Type: application/json
Content-Length: 658
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: ---redacted-by-me---
X-Frame-Options: DENY

# curl -I https://acme-v02.api.letsencrypt.org/directory
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Jan 2021 12:52:41 GMT
Content-Type: application/json
Content-Length: 658
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: ---redacted-by-me---
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

I use route53 to validate certs.

griffin · January 15, 2021, 1:42pm

Welcome to the Let's Encrypt Community

Your ACME client has the ACMEv1 webroot as the directory endpoint in some of your renewal configuration files. Change those to the ACMEv2 directory endpoint and you should be fine.

Inteli · January 15, 2021, 2:11pm

Thanks for response!

At this moment I guess it's latest acme.sh version.
I upgraded it yesterday.

There is any guide how to move old certs in acme.sh to use apiv2?

griffin · January 15, 2021, 2:18pm

The more I look at your output, I keep thinking that your acme.sh might just have the ACMEv1 directory endpoint wrong in the renewal configuration files for certain domain names.

sahsanu · January 15, 2021, 2:18pm

@Inteli, pay attention to all @griffin said in his post because acme-v1 api version is being deprecated (it still works or at least it should for renewals) but you should migrate to acme-v2 api now to avoid these and new problems till June 1st when acme-v1 api will turn off completely and you won't be able to renew your certs.

Migrating to acme-v2 with acme.sh should be as easy as replacing in your domains conf (example: /root/.acme.sh/eel.limtel.com/eel.limtel.com.conf)

Le_API='https://acme-v01.api.letsencrypt.org'

to

Le_API='https://acme-v02.api.letsencrypt.org/directory'

and then renew your cert: acme.sh --renew -d eel.limtel.com

Before doing anything, please, backup the entire directory /root/.acme.sh just in case.

Cheers,
sahsanu

Inteli · January 15, 2021, 2:53pm

Thanks and also thanks @griffin

I renewed this cert using apiv2 and force renewed other files with apiv2.
I'll update my config in few another virtual machines.

Thanks a lot!

griffin · January 15, 2021, 2:56pm

You're quite welcome!

Thanks for bringing this to our attention!

Osiris · January 15, 2021, 5:44pm

I'm curious, how did you reach that conclusion?

All I'm seeing is a misconfigured client: it's requesting the directory at https://acme-v01.api.letsencrypt.org which should have been https://acme-v01.api.letsencrypt.org/directory. (Well, actually it should have been the ACMEv2 API of course, but even so..)

To me, this doesn't indicate to the brownout. You can check the outputs of both URI's in your browser yourself.

griffin · January 15, 2021, 7:10pm

@Osiris

Yeah, I figured that out after some additional checking (hence the last line of my initial post and my later post). I should have just cleaned up the mess (like I just did) rather than augmenting my initial response.

jsha · January 15, 2021, 7:21pm

For any other @lestaff that received a notification, this is the correct thread. @griffin tagged us in this post suggesting the ACMEv1 brownout didn't end when we intended it to end.

griffin later edited the post to remove that section, presumably because the issue turned out not to be the ACMEv1 brownout but some odd misconfiguration of the API endpoint for ACMEv1 (note the missing /directory) endpoint.

[Fri Jan 15 12:57:48 UTC 2021] Renew: 'cloud.limdesk.com'
[Fri Jan 15 12:57:48 UTC 2021] Le_API='https://acme-v01.api.letsencrypt.org'

So, no worries, go about your business.

griffin · January 15, 2021, 7:24pm

@jsha

Sorry for the confusion.

I should have removed the staff call once I fully realized what was happening.

Osiris · January 15, 2021, 7:31pm

Ah, I missed both of those

That probably wouldn't have retracted the e-mails send out to all the LE staff members

griffin · January 15, 2021, 7:35pm

Yeah, quite so. jsha made me keenly aware of that. Not one of the finer moments in my response history.

system · February 14, 2021, 7:35pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Neither renewal nor issue works: acme.sh on debian8 Help	4	1098	September 10, 2021
Can't renew certificate. acme.sh Help	8	403	September 30, 2023
My certificate expired and I can not get acme.sh to renew it Help	21	7589	September 12, 2021
Acme.sh --renew timeout Help	7	3715	February 10, 2019
Acme.sh can't get a certificate because the existing certificate is self signed Help	6	7686	March 17, 2017

Acme.sh - Can not renew certificate. Could not get nonce

Related topics