Acme.sh script can't sign CSR

[PsySc0rpi0n]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
I don't have a domain, rather is a DDNS service in noip.com
crypto4n4rk.ddns.net

I ran this command:

./acme.sh --signcsr --csr ec-csr.pem -w ~/Downloads/lnbits 

LNBits is a frontend web service to control a Lightning Network node. So, I'm not sure the argument for the -w parameter is correct!

It produced this output:

$ ../.acme.sh/./acme.sh --signcsr --csr ec-csr.pem -w ~/Downloads/lnbits/ --debug 2
[Sun 14 Nov 11:02:16 GMT 2021] Lets find script dir.
[Sun 14 Nov 11:02:16 GMT 2021] _SCRIPT_='../.acme.sh/./acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] _script='/home/psysc0rpi0n/.acme.sh/acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] _script_home='/home/psysc0rpi0n/.acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] Using default home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] LE_WORKING_DIR='/home/psysc0rpi0n/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.2
[Sun 14 Nov 11:02:16 GMT 2021] Running cmd: signcsr
[Sun 14 Nov 11:02:16 GMT 2021] _csrsubj='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:16 GMT 2021] _csrsubj='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:16 GMT 2021] _dnsAltnames
[Sun 14 Nov 11:02:16 GMT 2021] AltNames doesn't contain subject
[Sun 14 Nov 11:02:16 GMT 2021] _csrdomainlist
[Sun 14 Nov 11:02:16 GMT 2021] _outcsr='Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: C = AR, ST = test, L = BuenosAires, O = BitcoinMundialKnowledge, CN = crypto4n4rk.ddns.net, OU = BMK, emailAddress = crypto4n4rkmov@protonmail.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                pub:
                    04:01:b1:bc:5f:c6:ff:be:bc:00:0d:d3:93:bc:68:
                    2b:f3:45:ed:4e:33:f4:5a:c5:a7:44:80:ba:a9:e5:
                    e1:f8:93:4d:1e:e3:3d:da:58:f4:2d:e1:bb:65:6d:
                    f8:38:12:09:a4:55:03:d4:32:4d:d6:7f:96:99:4c:
                    1d:a3:98:c8:fd:f5:6f:01:e1:66:86:14:cc:3c:d5:
                    ec:08:20:31:d9:aa:90:58:d3:f9:a3:ca:62:45:b6:
                    aa:e2:77:56:17:75:ba:b5:7e:d2:2b:a9:58:89:c0:
                    ee:90:af:27:bc:f1:23:38:a5:c7:d5:a4:4d:1f:ed:
                    a0:2c:cf:11:68:46:be:45:b4:c8:a1:78:3b
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        Attributes:
            a0:00
    Signature Algorithm: ecdsa-with-SHA256
         30:81:88:02:42:01:cc:0c:d5:6f:fb:eb:db:1d:ed:d3:4e:f1:
         80:a0:55:2e:4c:bb:a6:74:0c:35:c7:d0:4b:b3:02:df:64:88:
         df:0d:4b:d2:67:5b:ec:cf:8f:f9:52:92:97:c3:e0:dd:a8:66:
         92:dc:44:73:3b:ec:6c:48:ff:1b:01:33:ed:00:d0:2f:a8:02:
         42:01:36:bc:21:6e:1b:fc:a3:cf:23:bd:33:6a:ea:fb:c8:8c:
         9b:c4:18:0f:2f:83:1a:80:04:45:8f:99:85:b3:b6:6f:b6:ff:
         6e:7e:0e:90:b4:84:5b:38:12:bc:99:ee:3e:dc:ae:8e:8e:c8:
         07:8d:1b:90:a2:e5:e2:bc:26:9d:b1:8a:2c'
[Sun 14 Nov 11:02:16 GMT 2021] ECC CSR
[Sun 14 Nov 11:02:16 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] default_acme_server
[Sun 14 Nov 11:02:16 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:16 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com'
[Sun 14 Nov 11:02:16 GMT 2021] _ACME_SERVER_PATH='v2/DV90'
[Sun 14 Nov 11:02:16 GMT 2021] DOMAIN_PATH='/home/psysc0rpi0n/.acme.sh/crypto4n4rk.ddns.net_ecc'
[Sun 14 Nov 11:02:17 GMT 2021] Copy csr to: /home/psysc0rpi0n/.acme.sh/crypto4n4rk.ddns.net_ecc/crypto4n4rk.ddns.net.csr
[Sun 14 Nov 11:02:17 GMT 2021] _main_domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:17 GMT 2021] _alt_domains
[Sun 14 Nov 11:02:17 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 11:02:17 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com'
[Sun 14 Nov 11:02:17 GMT 2021] _ACME_SERVER_PATH='v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'dns'
[Sun 14 Nov 11:02:17 GMT 2021] Le_NextRenewTime
[Sun 14 Nov 11:02:17 GMT 2021] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:17 GMT 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:17 GMT 2021] Retrying GET
[Sun 14 Nov 11:02:17 GMT 2021] GET
[Sun 14 Nov 11:02:17 GMT 2021] url='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] timeout=
[Sun 14 Nov 11:02:17 GMT 2021] displayError='1'
[Sun 14 Nov 11:02:17 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.jZ7KYjjUqF '
[Sun 14 Nov 11:02:19 GMT 2021] ret='0'
[Sun 14 Nov 11:02:19 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:19 GMT 2021] response='{
  "newNonce": "https://acme.zerossl.com/v2/DV90/newNonce",
  "newAccount": "https://acme.zerossl.com/v2/DV90/newAccount",
  "newOrder": "https://acme.zerossl.com/v2/DV90/newOrder",
  "revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert",
  "keyChange": "https://acme.zerossl.com/v2/DV90/keyChange",
  "meta": {
    "termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf",
    "website": "https://zerossl.com",
    "caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
    "externalAccountRequired": true
  }
}'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_AUTHZ
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:19 GMT 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:19 GMT 2021] _on_before_issue
[Sun 14 Nov 11:02:19 GMT 2021] _chk_main_domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:19 GMT 2021] _chk_alt_domains
[Sun 14 Nov 11:02:19 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'no'
[Sun 14 Nov 11:02:19 GMT 2021] Le_LocalAddress
[Sun 14 Nov 11:02:20 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] Check for domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 11:02:20 GMT 2021] d
[Sun 14 Nov 11:02:20 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'apache'
[Sun 14 Nov 11:02:20 GMT 2021] _saved_account_key_hash='V6tW0gEGvQo/bzlcA+laKjHsPJz92PU9Z0u8hq57IFE='
[Sun 14 Nov 11:02:20 GMT 2021] _saved_account_key_hash is not changed, skip register account.
[Sun 14 Nov 11:02:20 GMT 2021] Signing from existing CSR.
[Sun 14 Nov 11:02:20 GMT 2021] Getting domain auth token for each domain
[Sun 14 Nov 11:02:20 GMT 2021] _is_idn_d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] _idn_temp
[Sun 14 Nov 11:02:20 GMT 2021] d
[Sun 14 Nov 11:02:20 GMT 2021] _identifiers='{"type":"dns","value":"crypto4n4rk.ddns.net"}'
[Sun 14 Nov 11:02:20 GMT 2021] url='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:20 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"crypto4n4rk.ddns.net"}]}'
[Sun 14 Nov 11:02:20 GMT 2021] RSA key
[Sun 14 Nov 11:02:20 GMT 2021] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:20 GMT 2021] Retrying post
[Sun 14 Nov 11:02:20 GMT 2021] HEAD
[Sun 14 Nov 11:02:20 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:20 GMT 2021] body
[Sun 14 Nov 11:02:20 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:20 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT  -I  '
[Sun 14 Nov 11:02:22 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:22 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:22 GMT 2021] _headers='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:22 GMT
content-type: application/octet-stream
replay-nonce: maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:22 GMT 2021] _CACHED_NONCE='maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU'
[Sun 14 Nov 11:02:22 GMT 2021] nonce='maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU'
[Sun 14 Nov 11:02:22 GMT 2021] Retrying post
[Sun 14 Nov 11:02:22 GMT 2021] POST
[Sun 14 Nov 11:02:22 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:22 GMT 2021] body='{"protected": "eyJub25jZSI6ICJtYUZUYkdLTU8zRFdIWE12THIwUWg1MV9qdTFsWHZsdk1RRlVTSXZLS1ZVIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9uZXdPcmRlciIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS56ZXJvc3NsLmNvbS92Mi9EVjkwL2FjY291bnQvZWZCNmNMR0x6R2tlbkE4b2NaM2xJQSJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImNyeXB0bzRuNHJrLmRkbnMubmV0In1dfQ", "signature": "oKzDRkf0P_73Ya2zVHprZrbfIOTRQhu7GpyBbUWESJ-lBiyx7YmkAkSAOGbnvcYEyutfA5Kddmf3C9MXWQGHV9GbAS3h6v_2DDVu32vwdf6v8FaSd101flPLNMOlpDc2xfzcFKuaMyQaCLbmhdbNhVaRmTaSyEeGip-6UOZC8Y2le38qtQ5QJl8lo6tzabTDhH0zCkSaDuJbG2VhYFYijyHyCIpbAVy415GgNAgKXgmcSjyvD5P5Ey2d3wIjDYb5QPFftexujx1XbM-3VJRrGlb-EkTl_iU2Xsq02QiHFq4sMQ1YUj9XRRatVZHsXumwT69IFs3O8EDJ1ZjqIeRGbQ"}'
[Sun 14 Nov 11:02:22 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:22 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:22 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:24 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:24 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:24 GMT 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 14 Nov 2021 11:02:24 GMT
content-type: application/json
content-length: 282
status: 
replay-nonce: GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
location: https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw
cache-control: max-age=-1
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:24 GMT 2021] code='201'
[Sun 14 Nov 11:02:24 GMT 2021] original='{"status":"pending","expires":"2022-02-12T11:02:24Z","identifiers":[{"type":"dns","value":"crypto4n4rk.ddns.net"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ"],"finalize":"https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize"}'
[Sun 14 Nov 11:02:24 GMT 2021] response='{"status":"pending","expires":"2022-02-12T11:02:24Z","identifiers":[{"type":"dns","value":"crypto4n4rk.ddns.net"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ"],"finalize":"https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize"}'
[Sun 14 Nov 11:02:24 GMT 2021] Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw'
[Sun 14 Nov 11:02:24 GMT 2021] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize'
[Sun 14 Nov 11:02:24 GMT 2021] _authorizations_seg='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] _authz_url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] payload
[Sun 14 Nov 11:02:24 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:25 GMT 2021] Use _CACHED_NONCE='GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk'
[Sun 14 Nov 11:02:25 GMT 2021] nonce='GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk'
[Sun 14 Nov 11:02:25 GMT 2021] Retrying post
[Sun 14 Nov 11:02:25 GMT 2021] POST
[Sun 14 Nov 11:02:25 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:25 GMT 2021] body='{"protected": "eyJub25jZSI6ICJHZlItcVJ2OVF1TDZwWjNzLVNXbWFEakhKdXlWX3lFWmViWjlvc3FrRVlrIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9hdXRoei9NWkw3d19ZNUp6Vk5EenBkLUNqbk5RIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "cSy83H2Y_hNj2rsPsCk4og2M6BjMOCUATVkTJg2c0MdBUCA3-83eO8JacZ6xU7RAkjhzUkY39RB8oCWF2TYpQyZjxfFfeZ2dx_azZslo34BA3L3EeZPYiqsCUO-eeSNmC5v2I4ClKYtmYdVFP1BD9ycfqIbthq9aBHZhVztB8MrmJfhmDBy2g9XWnIk2Y63ZiEJ2XjtdGC1S4rYE2HeZOW91g_oFuFoZmNY-Qpx3SN05heQLX8nc2AFegAxWfey3MjL8ZmWKhaTV5mILMEhc_UkOQ6tn3qCyBx0x-M7_iblhacoCyNfdYgjikfQEFTEMfNbk_WWbbNFYjtsRe09f5w"}'
[Sun 14 Nov 11:02:25 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:25 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:25 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:26 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:26 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:26 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:26 GMT
content-type: application/json
content-length: 450
replay-nonce: dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
retry-after: 5
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:26 GMT 2021] code='200'
[Sun 14 Nov 11:02:26 GMT 2021] original='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] _d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _authorizations_map='crypto4n4rk.ddns.net,{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}
'
[Sun 14 Nov 11:02:26 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] Getting webroot for domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _w='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] _is_idn_d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _idn_temp
[Sun 14 Nov 11:02:26 GMT 2021] _candidates='crypto4n4rk.ddns.net,{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] entry='"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"'
[Sun 14 Nov 11:02:26 GMT 2021] token='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE'
[Sun 14 Nov 11:02:26 GMT 2021] uri='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:26 GMT 2021] keyauthorization='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:26 GMT 2021] dvlist='crypto4n4rk.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] d
[Sun 14 Nov 11:02:26 GMT 2021] vlist='crypto4n4rk.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/psysc0rpi0n/Downloads/lnbits/,'
[Sun 14 Nov 11:02:26 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] ok, let's start to verify
[Sun 14 Nov 11:02:27 GMT 2021] Verifying: crypto4n4rk.ddns.net
[Sun 14 Nov 11:02:27 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 11:02:27 GMT 2021] keyauthorization='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:27 GMT 2021] uri='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 11:02:27 GMT 2021] wellknown_path='/home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge'
[Sun 14 Nov 11:02:27 GMT 2021] writing token:nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE to /home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge/nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE
[Sun 14 Nov 11:02:27 GMT 2021] Changing owner/group of .well-known to psysc0rpi0n:psysc0rpi0n
[Sun 14 Nov 11:02:27 GMT 2021] Trigger domain validation.
[Sun 14 Nov 11:02:27 GMT 2021] _t_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] _t_key_authz='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:27 GMT 2021] _t_vtype='http-01'
[Sun 14 Nov 11:02:27 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] payload='{}'
[Sun 14 Nov 11:02:27 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:27 GMT 2021] Use _CACHED_NONCE='dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs'
[Sun 14 Nov 11:02:27 GMT 2021] nonce='dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs'
[Sun 14 Nov 11:02:27 GMT 2021] Retrying post
[Sun 14 Nov 11:02:27 GMT 2021] POST
[Sun 14 Nov 11:02:27 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] body='{"protected": "eyJub25jZSI6ICJkUm5aOUF5MzdsMXBBRnloRjZFY1Z0enBMM2RDYUZYT2JCUFZiaUdNUmpzIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "e30", "signature": "lHpyBuo07Db92YBu1ei80lKQ6iQ2IwHTFuDqYXD4QQB2120zNvmnV5UvMCNTZLFhb5ActU2sxasxz_MfOCLqDBaUO0I1YY0nVAyvjWTH7Cq-aLV3Io0UdiuiofCoi7UsSJ6J2O_jad7aPV36YUKMTECYJhPqblxz9eibW8zEzCdOjGuwv6CrY966u9oOlE9NBfl8RK15kG2O008THlJ-ucKe51V12Ur-5MwY4Ajf9dSooO-NISkOVo94rx1JH5IeDqr3Cjx5kbRnAEn-HJSrVCJuMHE5j4aKuBlHD8VyLaOWM72T_xyQ3ZCMJB9d-FSrwGnZZitYf7oF5vZsC0U1YQ"}'
[Sun 14 Nov 11:02:27 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:27 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:27 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:28 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:28 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:28 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:28 GMT
content-type: application/json
content-length: 164
replay-nonce: ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:28 GMT 2021] code='200'
[Sun 14 Nov 11:02:28 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] trigger validation code: 200
[Sun 14 Nov 11:02:28 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] status='processing'
[Sun 14 Nov 11:02:28 GMT 2021] Processing, The CA is processing your order, please just wait. (1/5)
[Sun 14 Nov 11:02:29 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:31 GMT 2021] checking
[Sun 14 Nov 11:02:31 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:31 GMT 2021] payload
[Sun 14 Nov 11:02:31 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:31 GMT 2021] Use _CACHED_NONCE='ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc'
[Sun 14 Nov 11:02:31 GMT 2021] nonce='ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc'
[Sun 14 Nov 11:02:31 GMT 2021] Retrying post
[Sun 14 Nov 11:02:31 GMT 2021] POST
[Sun 14 Nov 11:02:31 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:31 GMT 2021] body='{"protected": "eyJub25jZSI6ICJaZnlNM0djTHI1X0VNYkxhcmdVazZrM284RmlhdWMwVS1Qc2VQSFl3Y1JjIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "YgyLJVZcWD8ojaLVgi9lCLLDSjRau67JtrBdo5cNqlI3apvZZr_OMZ7Zny75cRZ18WhudiWvUZcN5GWs6RLXBQy0zcq1H7I2WP2IYxLwNUxhrykH5TvveunBlZysUwZy1z60PKSv87BOUU2yo_cwrCDvZE9I71KZK0nnVoiNV7j9LBuzg8P8sdF-hDPCbTrwMD-J_ZM1gntxqKfAWUJim1DBE6BkHav-PFuWRMdIP3hTofEzedcJ9XEiwfzStGI7Tt2RR4aOhtccljxzztPwgs5OYfqhDxJc20vYAj4UfDw6JRZpfwsNZmfyxKPACA8CfoMWcfWfA7-k2W1Rs9Djeg"}'
[Sun 14 Nov 11:02:31 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:31 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:31 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:32 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:32 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:32 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:32 GMT
content-type: application/json
content-length: 164
replay-nonce: y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:32 GMT 2021] code='200'
[Sun 14 Nov 11:02:32 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] status='processing'
[Sun 14 Nov 11:02:32 GMT 2021] Processing, The CA is processing your order, please just wait. (2/5)
[Sun 14 Nov 11:02:32 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:34 GMT 2021] checking
[Sun 14 Nov 11:02:34 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:34 GMT 2021] payload
[Sun 14 Nov 11:02:34 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:34 GMT 2021] Use _CACHED_NONCE='y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok'
[Sun 14 Nov 11:02:34 GMT 2021] nonce='y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok'
[Sun 14 Nov 11:02:34 GMT 2021] Retrying post
[Sun 14 Nov 11:02:34 GMT 2021] POST
[Sun 14 Nov 11:02:34 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:34 GMT 2021] body='{"protected": "eyJub25jZSI6ICJ5NlFabEJLMF9mZklMZ3JwelNkZl9wX1lqZTB2UThjX2hUeEp4X2lPQW9rIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "wZCICQPdSQCVXqyaHs9lxKyH20I1b1euCxzRGTmpm3JhPRyz17Km4T7S_HxvqF3CN9Za2dpUosm5HGgLnXLNT1W-fcmElKGPmGkYcThQR8qCtzBlQXKHflZJ23UsmNJZ7F5xCe17S5X1ue75aO25pAgMxAQge8ZQYbmhmWeJvEWAn9oHtHAKO3zJaGppuzpan2SKmL1u0W4zGC1T4DZ2INzcN1QEZPfGO_w4DER6-LyWPZMO1SiNS1XIem7cBYdjXHPn5AetrBZHZzpE9ScEf42LnVERbp2ZY4QAbbwWrvgonety2t4VYd7ae54sP4dQMQqE7EwFWk_D27_WMdL2vw"}'
[Sun 14 Nov 11:02:34 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:34 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:34 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:35 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:35 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:35 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:35 GMT
content-type: application/json
content-length: 164
replay-nonce: 18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:35 GMT 2021] code='200'
[Sun 14 Nov 11:02:35 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:35 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] status='processing'
[Sun 14 Nov 11:02:36 GMT 2021] Processing, The CA is processing your order, please just wait. (3/5)
[Sun 14 Nov 11:02:36 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:38 GMT 2021] checking
[Sun 14 Nov 11:02:38 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:38 GMT 2021] payload
[Sun 14 Nov 11:02:38 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:38 GMT 2021] Use _CACHED_NONCE='18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA'
[Sun 14 Nov 11:02:38 GMT 2021] nonce='18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA'
[Sun 14 Nov 11:02:38 GMT 2021] Retrying post
[Sun 14 Nov 11:02:38 GMT 2021] POST
[Sun 14 Nov 11:02:38 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:38 GMT 2021] body='{"protected": "eyJub25jZSI6ICIxOG1FWWVTZ3VsNFFHcjhhVHJsRWxLWXZ3R0xfRXpvRFJBNEFLLVlYeEZBIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "emrtlHuqXDtw5oQwZCBqDVuCXsqYKMe-qQM_k9A0unubjIY1VpfubgAG06pniP7qTKOW8FoGzysupy8ywEZozSqQWNBeaf-5Hb4hwMpejWHBYfzJxJ84esFQHQksOCHCaEYr8vaaWYFofPCpqRLLHbQ3G27rSilgtiem-LrxIif02n9k4EIsagvEQCcDTpMvIVBcLaubXkVltDv_ivtng7b2Vk79bOwvcBKZ4dA92olG92F27Z_jezf8w9XONyoe6wRyw4_bPXxgmQpZG_-qfAHa4u6pWXGoVntC_cOJXATYtnYg6YskNf1ydoFl_OG1LScyn-wvKZmb7e5VnJTUWA"}'
[Sun 14 Nov 11:02:38 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:38 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:38 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:39 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:39 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:39 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:39 GMT
content-type: application/json
content-length: 164
replay-nonce: RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:39 GMT 2021] code='200'
[Sun 14 Nov 11:02:39 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] status='processing'
[Sun 14 Nov 11:02:39 GMT 2021] Processing, The CA is processing your order, please just wait. (4/5)
[Sun 14 Nov 11:02:39 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:41 GMT 2021] checking
[Sun 14 Nov 11:02:41 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:41 GMT 2021] payload
[Sun 14 Nov 11:02:41 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:41 GMT 2021] Use _CACHED_NONCE='RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs'
[Sun 14 Nov 11:02:41 GMT 2021] nonce='RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs'
[Sun 14 Nov 11:02:42 GMT 2021] Retrying post
[Sun 14 Nov 11:02:42 GMT 2021] POST
[Sun 14 Nov 11:02:42 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:42 GMT 2021] body='{"protected": "eyJub25jZSI6ICJSQ2FVQjduVG5VZ2kwTzNVZzRiS0Y5QW1SYlhFQ28xdzE3NkhIWmxlNVpzIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "RMCgfkNSlinPxtKv237UKITUlOJTmFimqS_PP6UtQHwZMv_WyaIU8IFsYfYR_GbMzYKzok5Q-h7jt-8K5-8woo9-5MkYyDT-t2OBFS5HvsGOVDIBccw-xC-CsVHljk1r_YyZs1o2HagLUZ5R-JL36tsfI602MZHJBuEaFUTD8xJeWkJGyOz80NL2nFGvfJdk9hnS3NXRymQQxuDWGMHPEGmuCxoJA94zqs6yCT8TRwayTHWQ779GOLxxKtsY2qoCZftQiejlu7nO4moWPvwIKODzCe1ANOMuI_OlCxXMxkj44Y35MvNLv6iJi47f1mii6OjNsNv0xLqcw-U6g4WXyg"}'
[Sun 14 Nov 11:02:42 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:42 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:42 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:43 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:43 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:43 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:43 GMT
content-type: application/json
content-length: 164
replay-nonce: Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:43 GMT 2021] code='200'
[Sun 14 Nov 11:02:43 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:43 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:43 GMT 2021] crypto4n4rk.ddns.net:Timeout
[Sun 14 Nov 11:02:43 GMT 2021] Debugging, skip removing: /home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge/nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE
[Sun 14 Nov 11:02:43 GMT 2021] pid
[Sun 14 Nov 11:02:43 GMT 2021] No need to restore nginx, skip.
[Sun 14 Nov 11:02:43 GMT 2021] _clearupdns
[Sun 14 Nov 11:02:43 GMT 2021] dns_entries
[Sun 14 Nov 11:02:43 GMT 2021] skip dns.
[Sun 14 Nov 11:02:43 GMT 2021] _on_issue_err
[Sun 14 Nov 11:02:43 GMT 2021] Please add '--debug' or '--log' to check more details.
[Sun 14 Nov 11:02:43 GMT 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Sun 14 Nov 11:02:43 GMT 2021] _chk_vlist='crypto4n4rk.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/psysc0rpi0n/Downloads/lnbits/,'
[Sun 14 Nov 11:02:43 GMT 2021] start to deactivate authz
[Sun 14 Nov 11:02:43 GMT 2021] Trigger domain validation.
[Sun 14 Nov 11:02:43 GMT 2021] _t_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] _t_key_authz='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:43 GMT 2021] _t_vtype
[Sun 14 Nov 11:02:43 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] payload='{}'
[Sun 14 Nov 11:02:43 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:43 GMT 2021] Use _CACHED_NONCE='Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM'
[Sun 14 Nov 11:02:43 GMT 2021] nonce='Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM'
[Sun 14 Nov 11:02:43 GMT 2021] Retrying post
[Sun 14 Nov 11:02:43 GMT 2021] POST
[Sun 14 Nov 11:02:43 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] body='{"protected": "eyJub25jZSI6ICJJbXo4emY3dEZNbFhrZnV5Y1REVW5ubUNBbGhGbVlBUnFjN1FnVzlMSklNIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "e30", "signature": "ja9AxZGQa-QD2_CDtjBDukszxBNUR4tHcTSc_gpwWxtIG7hbPw6RRvawIC2_KpTKp7ri1uwWgO-6utIIT6cgaxwP8i3lZ8a-vE5HxR2VO9gSNAsHENVmayWBtrJKOcMtOxNnJ9Ere_2nBhFC9KwZ1UfemQragEZtCVWRzaSJ85y1rOAITvWuSHewdJtjdz8x7JRLvDuiRshfNVEXR4pqZ0kTzSisoR3Vt0Y7wSCVOzMJyMpgbl02bALA3yXHPoGG5tCyTcMENnrs2p9KodUoBTzE9AE2uEiEg7lVUX32FD88sTHYoSWq1vbYI9_bDZx81V2ICurRqdkBmzIk1_JBsw"}'
[Sun 14 Nov 11:02:43 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 11:02:44 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:44 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:45 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:45 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:45 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:45 GMT
content-type: application/json
content-length: 164
replay-nonce: Zg717LkI7AP_5PKYsgBjZpn-MOfx9erI0N193I1CI-g
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:45 GMT 2021] code='200'
[Sun 14 Nov 11:02:45 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:45 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:45 GMT 2021] socat doesn't exist.
[Sun 14 Nov 11:02:45 GMT 2021] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1k  25 Mar 2021
apache:
apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
$

My web server is (include version):
nginx/1.18.0

The operating system my web server runs on is (include version):
Linux rockpro64 5.10.0-8-arm64 #1 SMP Debian 5.10.46-4 (2021-08-03) aarch64 GNU/Linux

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
yes, I have ssh access and root previleges.

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The site is LNbits frontend itself

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
I'm using acme.sh script downloaded from github

$ ../.acme.sh/./acme.sh --version
https://github.com/acmesh-official/acme.sh
v3.0.2

Note:
I created the private key and the CSR using openssl, with the following commands:

openssl ecparam -genkey -name secp521r1 -out ec-priv-key.pem
openssl req -new -key ec-priv-key.pem -out ec-csr.pem -subj "/C=AR/ST=test/L=BuenosAires/O=BitcoinMundialKnowledge/CN=bitcoinbeachportugal.pt/OU=BMK/emailAddress=crypto4n4rkmov@protonmail.com"

[Osiris]

If you're having trouble getting a ZeroSSL certificate (as that's what you're doing now), please open a ticket at ZeroSSL support.

If you're wishing to get a Let's Encrypt certificate please see Server · acmesh-official/acme.sh Wiki · GitHub to change the CA from ZeroSSL to Let's Encrypt.

[Nummer378]

Also note that if you switch to Let's Encrypt, the choosen EC curve secp521r1 is unsupported by Let's Encrypt (it's also unsupported in major webbrowsers such as Google Chrome).

Your manually generated CSR also seems to have no value, as you could have done the same thing with acme.sh without generating a CSR manually.

[PsySc0rpi0n]

@Osiris I just changed the default CA to letsencrypt. That's what I want to do. Use letsencrypt CA.

@Nummer378 ok, I didn't know about that. I'll create a new CSR with maybe ssecp256k1.
However, I'm not sure what you mean by my CSR have no value. I wanted to generate the certificate by hand, experiment a little with openssl, etc! Could you please let me know where might have I gone wrong generating the CSR manually?

Edited;
I just created a new CSR using secp256k1 and tried to sign it with acme.sh.
This is now the result:

$ ../.acme.sh/./acme.sh --signcsr --csr ec-csr.pem -w ~/Downloads/lnbits/ --debug 2
[Sun 14 Nov 14:45:34 GMT 2021] Lets find script dir.
[Sun 14 Nov 14:45:34 GMT 2021] _SCRIPT_='../.acme.sh/./acme.sh'
[Sun 14 Nov 14:45:34 GMT 2021] _script='/home/psysc0rpi0n/.acme.sh/acme.sh'
[Sun 14 Nov 14:45:34 GMT 2021] _script_home='/home/psysc0rpi0n/.acme.sh'
[Sun 14 Nov 14:45:34 GMT 2021] Using default home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:34 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:34 GMT 2021] LE_WORKING_DIR='/home/psysc0rpi0n/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.2
[Sun 14 Nov 14:45:34 GMT 2021] Running cmd: signcsr
[Sun 14 Nov 14:45:35 GMT 2021] _csrsubj='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:35 GMT 2021] _csrsubj='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:35 GMT 2021] _dnsAltnames
[Sun 14 Nov 14:45:35 GMT 2021] AltNames doesn't contain subject
[Sun 14 Nov 14:45:35 GMT 2021] _csrdomainlist
[Sun 14 Nov 14:45:35 GMT 2021] _outcsr='Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: C = AR, ST = test, L = BuenosAires, O = BitcoinMundialKnowledge, CN = crypto4n4rk.ddns.net, OU = BMK, emailAddress = crypto4n4rkmov@protonmail.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:e3:8f:f0:a7:62:ab:da:2b:a5:a3:60:1b:03:90:
                    d3:e0:33:4e:5e:ae:59:f0:71:3e:0e:e0:07:27:de:
                    81:64:af:28:db:64:f3:85:62:16:07:aa:88:0e:e1:
                    91:9a:5d:06:42:96:42:a9:02:83:c2:81:ee:4e:5e:
                    f4:5a:77:2f:10
                ASN1 OID: secp256k1
        Attributes:
            a0:00
    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:36:26:17:72:48:36:f7:67:ac:2a:4f:0b:13:f6:
         cd:7b:91:5b:a4:0f:ef:13:88:b8:0e:a4:3b:a2:cc:d0:10:7d:
         02:21:00:db:47:06:9e:09:2b:8a:51:33:bb:52:7a:39:3f:0d:
         6f:e5:02:8f:59:f8:2f:3b:24:4a:81:11:f5:8e:a9:07:cb'
[Sun 14 Nov 14:45:35 GMT 2021] ECC CSR
[Sun 14 Nov 14:45:35 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:35 GMT 2021] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:35 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:35 GMT 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun 14 Nov 14:45:35 GMT 2021] _ACME_SERVER_PATH='directory'
[Sun 14 Nov 14:45:35 GMT 2021] DOMAIN_PATH='/home/psysc0rpi0n/.acme.sh/crypto4n4rk.ddns.net_ecc'
[Sun 14 Nov 14:45:35 GMT 2021] Copy csr to: /home/psysc0rpi0n/.acme.sh/crypto4n4rk.ddns.net_ecc/crypto4n4rk.ddns.net.csr
[Sun 14 Nov 14:45:35 GMT 2021] _main_domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:35 GMT 2021] _alt_domains
[Sun 14 Nov 14:45:35 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:35 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:35 GMT 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun 14 Nov 14:45:35 GMT 2021] _ACME_SERVER_PATH='directory'
[Sun 14 Nov 14:45:35 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'dns'
[Sun 14 Nov 14:45:35 GMT 2021] Le_NextRenewTime
[Sun 14 Nov 14:45:35 GMT 2021] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sun 14 Nov 14:45:35 GMT 2021] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun 14 Nov 14:45:35 GMT 2021] Retrying GET
[Sun 14 Nov 14:45:35 GMT 2021] GET
[Sun 14 Nov 14:45:35 GMT 2021] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:35 GMT 2021] timeout=
[Sun 14 Nov 14:45:35 GMT 2021] displayError='1'
[Sun 14 Nov 14:45:35 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.VKhw2g9XxL '
[Sun 14 Nov 14:45:36 GMT 2021] ret='0'
[Sun 14 Nov 14:45:36 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:36 GMT 2021] response='{
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "p2DgEeonWJw": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_NEW_AUTHZ
[Sun 14 Nov 14:45:36 GMT 2021] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Sun 14 Nov 14:45:36 GMT 2021] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun 14 Nov 14:45:37 GMT 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Sun 14 Nov 14:45:37 GMT 2021] _on_before_issue
[Sun 14 Nov 14:45:37 GMT 2021] _chk_main_domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:37 GMT 2021] _chk_alt_domains
[Sun 14 Nov 14:45:37 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'no'
[Sun 14 Nov 14:45:37 GMT 2021] Le_LocalAddress
[Sun 14 Nov 14:45:37 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:37 GMT 2021] Check for domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:37 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 14:45:37 GMT 2021] d
[Sun 14 Nov 14:45:37 GMT 2021] '/home/psysc0rpi0n/Downloads/lnbits/' does not contain 'apache'
[Sun 14 Nov 14:45:37 GMT 2021] config file is empty, can not read CA_KEY_HASH
[Sun 14 Nov 14:45:37 GMT 2021] _saved_account_key_hash
[Sun 14 Nov 14:45:37 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:37 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:37 GMT 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun 14 Nov 14:45:37 GMT 2021] _ACME_SERVER_PATH='directory'
[Sun 14 Nov 14:45:37 GMT 2021] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun 14 Nov 14:45:37 GMT 2021] Use default length 2048
[Sun 14 Nov 14:45:37 GMT 2021] length='2048'
[Sun 14 Nov 14:45:37 GMT 2021] Using config home:/home/psysc0rpi0n/.acme.sh
[Sun 14 Nov 14:45:37 GMT 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun 14 Nov 14:45:37 GMT 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun 14 Nov 14:45:37 GMT 2021] _ACME_SERVER_PATH='directory'
[Sun 14 Nov 14:45:37 GMT 2021] _createkey for file:/home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:37 GMT 2021] Use length 2048
[Sun 14 Nov 14:45:38 GMT 2021] Using RSA: 2048
[Sun 14 Nov 14:45:38 GMT 2021] Create account key ok.
[Sun 14 Nov 14:45:38 GMT 2021] RSA key
[Sun 14 Nov 14:45:38 GMT 2021] config file is empty, can not read CA_EAB_KEY_ID
[Sun 14 Nov 14:45:38 GMT 2021] config file is empty, can not read CA_EAB_HMAC_KEY
[Sun 14 Nov 14:45:38 GMT 2021] Registering account: https://acme-v02.api.letsencrypt.org/directory
[Sun 14 Nov 14:45:38 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun 14 Nov 14:45:38 GMT 2021] payload='{"contact": ["mailto:crypto4n4rkmov@protonmail.com"], "termsOfServiceAgreed": true}'
[Sun 14 Nov 14:45:38 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:38 GMT 2021] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun 14 Nov 14:45:38 GMT 2021] Retrying post
[Sun 14 Nov 14:45:38 GMT 2021] HEAD
[Sun 14 Nov 14:45:38 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun 14 Nov 14:45:38 GMT 2021] body
[Sun 14 Nov 14:45:38 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:38 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd  -I  '
[Sun 14 Nov 14:45:39 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:39 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:39 GMT 2021] _headers='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 14:45:39 GMT
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0102IKEi0fbZS51DYHxUJsejuezBIr7FBoq_0Ln24XR6FhY
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:39 GMT 2021] _CACHED_NONCE='0102IKEi0fbZS51DYHxUJsejuezBIr7FBoq_0Ln24XR6FhY'
[Sun 14 Nov 14:45:39 GMT 2021] nonce='0102IKEi0fbZS51DYHxUJsejuezBIr7FBoq_0Ln24XR6FhY'
[Sun 14 Nov 14:45:39 GMT 2021] Retrying post
[Sun 14 Nov 14:45:39 GMT 2021] POST
[Sun 14 Nov 14:45:39 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun 14 Nov 14:45:39 GMT 2021] body='{"protected": "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", "payload": "eyJjb250YWN0IjogWyJtYWlsdG86Y3J5cHRvNG40cmttb3ZAcHJvdG9ubWFpbC5jb20iXSwgInRlcm1zT2ZTZXJ2aWNlQWdyZWVkIjogdHJ1ZX0", "signature": "SR-CQWBaKVU50SItioWWon5cJjCv5zEALEgE-CecfdQo71w_j9Po_khRmHEkdbAA43Cl_x4csLjkSQsg1lYQqa7YZcUIkpTULajMaK71anLp7xj8AYoRBPNOOPFC4Og1uk759TVQCzja5BRsVZKFiRZIYORuwBxwgRVJSMLvGmeqSzo9uDLnIZUl5b70bHcmB7j04MUVjrbGezyNmWO4MB8FR2mZ7YSckYRQuGQWnPJ8s_9WdDeAJGkp0FG7ykrzAF6BoMfsLS5sJ6LgD8UP_jxFudwViNWK4l7_xB5Lacd5sXXL_4D1M7eDWGvva5dfs4d_Y-FZeGa_sW4f54yFGA"}'
[Sun 14 Nov 14:45:39 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:39 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:39 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:40 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:40 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:40 GMT 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 14 Nov 2021 14:45:40 GMT
content-type: application/json
content-length: 595
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel="terms-of-service"
location: https://acme-v02.api.letsencrypt.org/acme/acct/280381760
replay-nonce: 01027VsZCcFFQj__HmQF2ZXResFkfaxyf8MMoatkPPyCG-Q
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:40 GMT 2021] code='201'
[Sun 14 Nov 14:45:40 GMT 2021] original='{
  "key": {
    "kty": "RSA",
    "n": "qV1n88eXqD3DW17vl4mZeYl1O98Ejy2LMbJIET18CMLwFxE4tZkbzcKqbz5prvnLs_6B1aSqvbsrI5LAQYCtPzgkwnrXBQJFEz6Ubx__F1k5Hwl9T6o9it-jAC93yjSqoGbcYodnidn_ne3kTrgKuDwpWL4hg8Ksxgpt7-Z-nm_FE75X5bC1bjCvB0uj08xEc4HymG6dRlNOVnw-4IFR4b7hdRJSRO-RrC2JVkxbL3NVgT0oDod4Nq2DSBYnuBfQy8Gg1XnsLHguTxljJ9kV-jtvoGDKimW4qMAEUqQzFzeIrVNvrpNvpLYCxXDLjcl9m5HJLJyxIy-kX2AmOFClZw",
    "e": "AQAB"
  },
  "contact": [
    "mailto:crypto4n4rkmov@protonmail.com"
  ],
  "initialIp": "2001:8a0:e151:6600:478:7dff:fe45:a43d",
  "createdAt": "2021-11-14T14:45:40.43654569Z",
  "status": "valid"
}'
[Sun 14 Nov 14:45:40 GMT 2021] response='{"key":{"kty":"RSA","n":"qV1n88eXqD3DW17vl4mZeYl1O98Ejy2LMbJIET18CMLwFxE4tZkbzcKqbz5prvnLs_6B1aSqvbsrI5LAQYCtPzgkwnrXBQJFEz6Ubx__F1k5Hwl9T6o9it-jAC93yjSqoGbcYodnidn_ne3kTrgKuDwpWL4hg8Ksxgpt7-Z-nm_FE75X5bC1bjCvB0uj08xEc4HymG6dRlNOVnw-4IFR4b7hdRJSRO-RrC2JVkxbL3NVgT0oDod4Nq2DSBYnuBfQy8Gg1XnsLHguTxljJ9kV-jtvoGDKimW4qMAEUqQzFzeIrVNvrpNvpLYCxXDLjcl9m5HJLJyxIy-kX2AmOFClZw","e":"AQAB"},"contact":["mailto:crypto4n4rkmov@protonmail.com"],"initialIp":"2001:8a0:e151:6600:478:7dff:fe45:a43d","createdAt":"2021-11-14T14:45:40.43654569Z","status":"valid"}'
[Sun 14 Nov 14:45:40 GMT 2021] Registered
[Sun 14 Nov 14:45:40 GMT 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 14 Nov 2021 14:45:40 GMT
content-type: application/json
content-length: 595
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel="terms-of-service"
location: https://acme-v02.api.letsencrypt.org/acme/acct/280381760
replay-nonce: 01027VsZCcFFQj__HmQF2ZXResFkfaxyf8MMoatkPPyCG-Q
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:40 GMT 2021] _accUri='https://acme-v02.api.letsencrypt.org/acme/acct/280381760'
[Sun 14 Nov 14:45:40 GMT 2021] Calc CA_KEY_HASH='F70bLjVYYwjEBvd8fcYpQtFTDFy2iBPvgC1NI3Lu+oA='
[Sun 14 Nov 14:45:40 GMT 2021] ACCOUNT_THUMBPRINT='7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo'
[Sun 14 Nov 14:45:40 GMT 2021] Signing from existing CSR.
[Sun 14 Nov 14:45:41 GMT 2021] Getting domain auth token for each domain
[Sun 14 Nov 14:45:41 GMT 2021] _is_idn_d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:41 GMT 2021] _idn_temp
[Sun 14 Nov 14:45:41 GMT 2021] d
[Sun 14 Nov 14:45:41 GMT 2021] _identifiers='{"type":"dns","value":"crypto4n4rk.ddns.net"}'
[Sun 14 Nov 14:45:41 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 14 Nov 14:45:41 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"crypto4n4rk.ddns.net"}]}'
[Sun 14 Nov 14:45:41 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:41 GMT 2021] Use _CACHED_NONCE='01027VsZCcFFQj__HmQF2ZXResFkfaxyf8MMoatkPPyCG-Q'
[Sun 14 Nov 14:45:41 GMT 2021] nonce='01027VsZCcFFQj__HmQF2ZXResFkfaxyf8MMoatkPPyCG-Q'
[Sun 14 Nov 14:45:41 GMT 2021] Retrying post
[Sun 14 Nov 14:45:41 GMT 2021] POST
[Sun 14 Nov 14:45:41 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun 14 Nov 14:45:41 GMT 2021] body='{"protected": "eyJub25jZSI6ICIwMTAyN1ZzWkNjRkZRal9fSG1RRjJaWFJlc0ZrZmF4eWY4TU1vYXRrUFB5Q0ctUSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8yODAzODE3NjAifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImNyeXB0bzRuNHJrLmRkbnMubmV0In1dfQ", "signature": "lGzqCArh3QSJNHSSP8fxe7PkyBqZwGkqfh4ZESNNhwo7JyXNc5RAXYB4ujNI9XNq_0mtxYhxu_d_dO2Bu3AOTEiHMPpNPQsDc3HXH3pxBHeI46avZIzn18aI6DjE2Jd9zJZKu_7YMlHMOH2IlvvUQK7jrNqqew0CmIhXFllwBeFR77o0budayjWBy6ZT0P5a8z9Ox4gG7KbcrFoZ3ZryaFO1G-S5OuDMhhaP3xclyDbwdOHt4mau0onyXi8mgiqtvKvYWETF8WwNHJ_GJ4AVTRkRz-i3hX7kgn1u63C3PQMuRyn1szNIfb29N0ocVbhd3da27dyXiif3ME5yduWtsg"}'
[Sun 14 Nov 14:45:41 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:41 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:41 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:42 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:42 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:42 GMT 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 14 Nov 2021 14:45:42 GMT
content-type: application/json
content-length: 343
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
location: https://acme-v02.api.letsencrypt.org/acme/order/280381760/39604606540
replay-nonce: 0101Q9VpldJlbwWmckvLu5Yo3EbiFmZZ0s8x2aW-8sVXbKI
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:42 GMT 2021] code='201'
[Sun 14 Nov 14:45:42 GMT 2021] original='{
  "status": "pending",
  "expires": "2021-11-21T14:45:42Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "crypto4n4rk.ddns.net"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/280381760/39604606540"
}'
[Sun 14 Nov 14:45:42 GMT 2021] response='{"status":"pending","expires":"2021-11-21T14:45:42Z","identifiers":[{"type":"dns","value":"crypto4n4rk.ddns.net"}],"authorizations":["https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900"],"finalize":"https://acme-v02.api.letsencrypt.org/acme/finalize/280381760/39604606540"}'
[Sun 14 Nov 14:45:42 GMT 2021] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/280381760/39604606540'
[Sun 14 Nov 14:45:42 GMT 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/280381760/39604606540'
[Sun 14 Nov 14:45:42 GMT 2021] _authorizations_seg='https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900'
[Sun 14 Nov 14:45:42 GMT 2021] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900'
[Sun 14 Nov 14:45:42 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900'
[Sun 14 Nov 14:45:42 GMT 2021] payload
[Sun 14 Nov 14:45:42 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:42 GMT 2021] Use _CACHED_NONCE='0101Q9VpldJlbwWmckvLu5Yo3EbiFmZZ0s8x2aW-8sVXbKI'
[Sun 14 Nov 14:45:42 GMT 2021] nonce='0101Q9VpldJlbwWmckvLu5Yo3EbiFmZZ0s8x2aW-8sVXbKI'
[Sun 14 Nov 14:45:42 GMT 2021] Retrying post
[Sun 14 Nov 14:45:42 GMT 2021] POST
[Sun 14 Nov 14:45:42 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900'
[Sun 14 Nov 14:45:42 GMT 2021] body='{"protected": "eyJub25jZSI6ICIwMTAxUTlWcGxkSmxid1dtY2t2THU1WW8zRWJpRm1aWjBzOHgyYVctOHNWWGJLSSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvNDkyMTE4ODU5MDAiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzI4MDM4MTc2MCJ9", "payload": "", "signature": "exp8Py-grnDXCVgAs-2iA-y99VMNrCKBhOClGqdoaZK18hunjkchVQUfkjFVkp_9tePe5KG3U9fciBFKTBv5OScKUEkcEYFyQpNDbUZyBL5hEcf8Neex27iEBleicmw4gw-b3sNEbFuZfEgm7wEHVyVoYiNfSLwZ3vkFPZpoZV1wyvk8XEYnKrtuNnx0QHDDwdmYL2f30zrN7zmXlUcoZjMnpRmDq5x2R8iM7u7CJYn_H5jQAbwqpWbeQDkLIMwbf4dufG3FfKv3RcXqkCb-v03VWRlC1jOP3I4koevid16g7vh_0CYwCFL57BVzeBHk86YrVUI_fWEdQIwM8Bj7gg"}'
[Sun 14 Nov 14:45:43 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:43 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:43 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:43 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:43 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:43 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 14:45:43 GMT
content-type: application/json
content-length: 801
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 010232uyAQt_VmH57aUqIu0hBZfyBJEv9ovX-HapLN9ZE2Y
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:43 GMT 2021] code='200'
[Sun 14 Nov 14:45:43 GMT 2021] original='{
  "identifier": {
    "type": "dns",
    "value": "crypto4n4rk.ddns.net"
  },
  "status": "pending",
  "expires": "2021-11-21T14:45:42Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA",
      "token": "OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ",
      "token": "OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q",
      "token": "OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"
    }
  ]
}'
[Sun 14 Nov 14:45:43 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-11-21T14:45:42Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}]}'
[Sun 14 Nov 14:45:43 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-11-21T14:45:42Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}]}'
[Sun 14 Nov 14:45:43 GMT 2021] _d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:43 GMT 2021] _authorizations_map='crypto4n4rk.ddns.net,{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-11-21T14:45:42Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}]}
'
[Sun 14 Nov 14:45:44 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:44 GMT 2021] Getting webroot for domain='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:44 GMT 2021] _w='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 14:45:44 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 14:45:44 GMT 2021] _is_idn_d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:44 GMT 2021] _idn_temp
[Sun 14 Nov 14:45:44 GMT 2021] _candidates='crypto4n4rk.ddns.net,{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-11-21T14:45:42Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}]}'
[Sun 14 Nov 14:45:44 GMT 2021] response='{"identifier":{"type":"dns","value":"crypto4n4rk.ddns.net"},"status":"pending","expires":"2021-11-21T14:45:42Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/P0xmoQ","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/7Eqz7Q","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}]}'
[Sun 14 Nov 14:45:44 GMT 2021] entry='"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"'
[Sun 14 Nov 14:45:44 GMT 2021] token='OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE'
[Sun 14 Nov 14:45:44 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:44 GMT 2021] keyauthorization='OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo'
[Sun 14 Nov 14:45:44 GMT 2021] dvlist='crypto4n4rk.ddns.net#OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo#https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA#http-01#/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 14:45:44 GMT 2021] d
[Sun 14 Nov 14:45:44 GMT 2021] vlist='crypto4n4rk.ddns.net#OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo#https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA#http-01#/home/psysc0rpi0n/Downloads/lnbits/,'
[Sun 14 Nov 14:45:44 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:44 GMT 2021] ok, let's start to verify
[Sun 14 Nov 14:45:44 GMT 2021] Verifying: crypto4n4rk.ddns.net
[Sun 14 Nov 14:45:44 GMT 2021] d='crypto4n4rk.ddns.net'
[Sun 14 Nov 14:45:44 GMT 2021] keyauthorization='OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo'
[Sun 14 Nov 14:45:44 GMT 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:44 GMT 2021] _currentRoot='/home/psysc0rpi0n/Downloads/lnbits/'
[Sun 14 Nov 14:45:44 GMT 2021] wellknown_path='/home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge'
[Sun 14 Nov 14:45:44 GMT 2021] writing token:OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE to /home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE
[Sun 14 Nov 14:45:44 GMT 2021] Changing owner/group of .well-known to psysc0rpi0n:psysc0rpi0n
[Sun 14 Nov 14:45:44 GMT 2021] Trigger domain validation.
[Sun 14 Nov 14:45:44 GMT 2021] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:44 GMT 2021] _t_key_authz='OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo'
[Sun 14 Nov 14:45:44 GMT 2021] _t_vtype='http-01'
[Sun 14 Nov 14:45:44 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:44 GMT 2021] payload='{}'
[Sun 14 Nov 14:45:44 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:45 GMT 2021] Use _CACHED_NONCE='010232uyAQt_VmH57aUqIu0hBZfyBJEv9ovX-HapLN9ZE2Y'
[Sun 14 Nov 14:45:45 GMT 2021] nonce='010232uyAQt_VmH57aUqIu0hBZfyBJEv9ovX-HapLN9ZE2Y'
[Sun 14 Nov 14:45:45 GMT 2021] Retrying post
[Sun 14 Nov 14:45:45 GMT 2021] POST
[Sun 14 Nov 14:45:45 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:45 GMT 2021] body='{"protected": "eyJub25jZSI6ICIwMTAyMzJ1eUFRdF9WbUg1N2FVcUl1MGhCWmZ5QkpFdjlvdlgtSGFwTE45WkUyWSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvNDkyMTE4ODU5MDAvWlluMVdBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8yODAzODE3NjAifQ", "payload": "e30", "signature": "iCqL8qUrjgdfhKn7PCYYUXrU6QiT1TRyLjhOUZ7xB_2WMBN5ipRnnu-oKi6BB5o82Yo62oaQkzpwKAxQYidV_X82ma61qE-0-hQAIkF0WFMmYS_zfU0crQcsik8h_vw63cxnN5BzObOd_JbNMMJYdKi7lfc7oVTcKj6eLVqrUHMJqcVwjoGWwGeKJr_Mlm-Q5MfypagiTRGYHD9igjWNuxrUydfIU1R8sEmueydarS1jDZCMsMJxrBIZILID-bVO3oTBr_zTvNFY3hrPyq61Ljh11g3-ZinStLFt8LoIFz9BR8mAAIl2WXuPgpFk0anzYY-hXd2QWGDrzH_d6LN0BA"}'
[Sun 14 Nov 14:45:45 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:45 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:45 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:45 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:45 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:46 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 14:45:45 GMT
content-type: application/json
content-length: 186
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA
replay-nonce: 0101GT4XCfAvt5E4YayrpRuxwlHXN59f5kd_7gykH7WwSGo
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:46 GMT 2021] code='200'
[Sun 14 Nov 14:45:46 GMT 2021] original='{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA",
  "token": "OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"
}'
[Sun 14 Nov 14:45:46 GMT 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}'
[Sun 14 Nov 14:45:46 GMT 2021] trigger validation code: 200
[Sun 14 Nov 14:45:46 GMT 2021] original='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}'
[Sun 14 Nov 14:45:46 GMT 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE"}'
[Sun 14 Nov 14:45:46 GMT 2021] status='pending'
[Sun 14 Nov 14:45:46 GMT 2021] Pending, The CA is processing your order, please just wait. (1/5)
[Sun 14 Nov 14:45:46 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 14:45:48 GMT 2021] checking
[Sun 14 Nov 14:45:48 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:48 GMT 2021] payload
[Sun 14 Nov 14:45:48 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:48 GMT 2021] Use _CACHED_NONCE='0101GT4XCfAvt5E4YayrpRuxwlHXN59f5kd_7gykH7WwSGo'
[Sun 14 Nov 14:45:48 GMT 2021] nonce='0101GT4XCfAvt5E4YayrpRuxwlHXN59f5kd_7gykH7WwSGo'
[Sun 14 Nov 14:45:48 GMT 2021] Retrying post
[Sun 14 Nov 14:45:48 GMT 2021] POST
[Sun 14 Nov 14:45:48 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:48 GMT 2021] body='{"protected": "eyJub25jZSI6ICIwMTAxR1Q0WENmQXZ0NUU0WWF5cnBSdXh3bEhYTjU5ZjVrZF83Z3lrSDdXd1NHbyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvNDkyMTE4ODU5MDAvWlluMVdBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8yODAzODE3NjAifQ", "payload": "", "signature": "PQqfZU3vvBl7BNz_CR3jNG8yCC-FnHxmXc5xzd-dNIQhRQGj98k2_xPtRAZNIU3lJEz9B9YMsRVzHCjg0EMxcuqvPx8nJN-_v8OkROUijSgd76BB4T_lbDP8D-jRwXNi11JeWVeKyV9bLJf6wReU08mbk9HS4NTKSmfw29D7WT1VWHesGapN_e60J9jvAyMjtlYAkD6TLYXfUoylQJmVUdY5wpUh_NX7oyJPW4IG7OUd92qFsccfNYCvOlevDTFLrvoSsEgpMUTUFsw21QRYJ_T__AgW0q_-Jcj04vGQz5g4GgSp72NCcTQwskh9Cdafo1jlZEml8P7MZgeBW6R9rQ"}'
[Sun 14 Nov 14:45:48 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:48 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:48 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:49 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:49 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:49 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 14:45:49 GMT
content-type: application/json
content-length: 774
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/49211885900>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA
replay-nonce: 000291tZIs5HN4wf5jwYCuEDJy0PFnNe0fRIC1mUFSHyF6U
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun 14 Nov 14:45:49 GMT 2021] code='200'
[Sun 14 Nov 14:45:49 GMT 2021] original='{
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:ietf:params:acme:error:connection",
    "detail": "Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused",
    "status": 400
  },
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA",
  "token": "OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE",
  "validationRecord": [
    {
      "url": "http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE",
      "hostname": "crypto4n4rk.ddns.net",
      "port": "80",
      "addressesResolved": [
        "2.81.171.222"
      ],
      "addressUsed": "2.81.171.222"
    }
  ],
  "validated": "2021-11-14T14:45:45Z"
}'
[Sun 14 Nov 14:45:49 GMT 2021] response='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","validationRecord":[{"url":"http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","hostname":"crypto4n4rk.ddns.net","port":"80","addressesResolved":["2.81.171.222"],"addressUsed":"2.81.171.222"}],"validated":"2021-11-14T14:45:45Z"}'
[Sun 14 Nov 14:45:49 GMT 2021] original='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","validationRecord":[{"url":"http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","hostname":"crypto4n4rk.ddns.net","port":"80","addressesResolved":["2.81.171.222"],"addressUsed":"2.81.171.222"}],"validated":"2021-11-14T14:45:45Z"}'
[Sun 14 Nov 14:45:49 GMT 2021] response='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA","token":"OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","validationRecord":[{"url":"http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE","hostname":"crypto4n4rk.ddns.net","port":"80","addressesResolved":["2.81.171.222"],"addressUsed":"2.81.171.222"}],"validated":"2021-11-14T14:45:45Z"}'
[Sun 14 Nov 14:45:49 GMT 2021] status='invalid'
[Sun 14 Nov 14:45:49 GMT 2021] error='"error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused","status": 400'
[Sun 14 Nov 14:45:49 GMT 2021] errordetail='Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused'
[Sun 14 Nov 14:45:49 GMT 2021] crypto4n4rk.ddns.net:Verify error:Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused
[Sun 14 Nov 14:45:49 GMT 2021] Debug: get token url.
[Sun 14 Nov 14:45:49 GMT 2021] Retrying GET
[Sun 14 Nov 14:45:49 GMT 2021] GET
[Sun 14 Nov 14:45:49 GMT 2021] url='http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE'
[Sun 14 Nov 14:45:49 GMT 2021] timeout=1
[Sun 14 Nov 14:45:49 GMT 2021] displayError='1'
[Sun 14 Nov 14:45:49 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:49 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd  --connect-timeout 1'
<h1>Forbidden</h1>Rejected request from RFC1918 IP to public server address[Sun 14 Nov 14:45:50 GMT 2021] ret='0'
[Sun 14 Nov 14:45:50 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:50 GMT 2021] Debugging, skip removing: /home/psysc0rpi0n/Downloads/lnbits//.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE
[Sun 14 Nov 14:45:50 GMT 2021] pid
[Sun 14 Nov 14:45:50 GMT 2021] No need to restore nginx, skip.
[Sun 14 Nov 14:45:50 GMT 2021] _clearupdns
[Sun 14 Nov 14:45:50 GMT 2021] dns_entries
[Sun 14 Nov 14:45:50 GMT 2021] skip dns.
[Sun 14 Nov 14:45:50 GMT 2021] _on_issue_err
[Sun 14 Nov 14:45:50 GMT 2021] Please add '--debug' or '--log' to check more details.
[Sun 14 Nov 14:45:50 GMT 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Sun 14 Nov 14:45:50 GMT 2021] _chk_vlist='crypto4n4rk.ddns.net#OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo#https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA#http-01#/home/psysc0rpi0n/Downloads/lnbits/,'
[Sun 14 Nov 14:45:50 GMT 2021] start to deactivate authz
[Sun 14 Nov 14:45:50 GMT 2021] Trigger domain validation.
[Sun 14 Nov 14:45:50 GMT 2021] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:50 GMT 2021] _t_key_authz='OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE.7PBqWhIOWXL86pHH4KHOEr3rlZU7LvaTge3EK-ybrfo'
[Sun 14 Nov 14:45:50 GMT 2021] _t_vtype
[Sun 14 Nov 14:45:50 GMT 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:50 GMT 2021] payload='{}'
[Sun 14 Nov 14:45:50 GMT 2021] Use cached jwk for file: /home/psysc0rpi0n/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun 14 Nov 14:45:50 GMT 2021] Use _CACHED_NONCE='000291tZIs5HN4wf5jwYCuEDJy0PFnNe0fRIC1mUFSHyF6U'
[Sun 14 Nov 14:45:50 GMT 2021] nonce='000291tZIs5HN4wf5jwYCuEDJy0PFnNe0fRIC1mUFSHyF6U'
[Sun 14 Nov 14:45:50 GMT 2021] Retrying post
[Sun 14 Nov 14:45:50 GMT 2021] POST
[Sun 14 Nov 14:45:50 GMT 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/49211885900/ZYn1WA'
[Sun 14 Nov 14:45:50 GMT 2021] body='{"protected": "eyJub25jZSI6ICIwMDAyOTF0WklzNUhONHdmNWp3WUN1RURKeTBQRm5OZTBmUklDMW1VRlNIeUY2VSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvNDkyMTE4ODU5MDAvWlluMVdBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8yODAzODE3NjAifQ", "payload": "e30", "signature": "BCj7PUh8jlp2B11lS8xWQuMMvEh7ysp9D64-y4ErKxf2z9V7xz-b1obz48ZUiUlOmfYGx8moboc3pBP4HzMv_v7JQ7mMAOfWvqYaVOonZvpr-g-VYgee7dqeBctWE6M5BmVX2UvfDuu7LrmkdPkN-kto14aXhNiMTeBf4iDMcESBanOr3BfIPJhcsFrOxJG5UJyP6RJ-dIlhpfFpRghBvolc4csAW-xNvYp02JFQgmhKTjCt-vcMeuXqxGWrXYA-V6bJaHzzLT-3p0cX-XX598qPfNFl1gKpv-jthoIT_9iJzk23dptxJet9i_eG3ZvZL7nMnmr9SktD_2fSz6P1xA"}'
[Sun 14 Nov 14:45:50 GMT 2021] _postContentType='application/jose+json'
[Sun 14 Nov 14:45:50 GMT 2021] Http already initialized.
[Sun 14 Nov 14:45:50 GMT 2021] _CURL='curl --silent --dump-header /home/psysc0rpi0n/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.hi1AxIINcd '
[Sun 14 Nov 14:45:51 GMT 2021] _ret='0'
[Sun 14 Nov 14:45:51 GMT 2021] _hcode='0'
[Sun 14 Nov 14:45:51 GMT 2021] responseHeaders='HTTP/2 400 
server: nginx
date: Sun, 14 Nov 2021 14:45:51 GMT
content-type: application/problem+json
content-length: 144
boulder-requester: 280381760
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0002za5trUI8GIrrKZ9IYp9WMygWsb0JiUtWjX1FgmX-PBs
'
[Sun 14 Nov 14:45:51 GMT 2021] code='400'
[Sun 14 Nov 14:45:51 GMT 2021] original='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Sun 14 Nov 14:45:51 GMT 2021] response='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Sun 14 Nov 14:45:51 GMT 2021] socat doesn't exist.
[Sun 14 Nov 14:45:51 GMT 2021] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1k  25 Mar 2021
apache:
apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
$

I'm not sure about the following but I was said that Let'sEncrypt doesn't support 3rd layer domains, so I'm not sure this is the problem!

[Nummer378]

@PsySc0rpi0n

However, I'm not sure what you mean by my CSR have no value. I wanted to generate the certificate by hand, experiment a little with openssl, etc! Could you please let me know where might have I gone wrong generating the CSR manually?

The CSR looks fine at first glance. I just wanted to note that it's usually much easier to handle renewals and stuff when not using a CSR (instead letting the acme client handle this - it is not necessary to supply CSR's manually). Much of your information entered into the CSR won't make it into the final certificate anyway.

However if you just want to play around, that's fine. But please remember to use the staging enviroment when testing (this will also avoid many rate limits). In acme.sh, staging can be enabled via the --test flag (--staging is the same thing). Contrary to certbot's --dry-run, acme.sh will by default handle staging certificate like live ones, e.g it will save and renew them like any other certificate.

@PsySc0rpi0n

CSR using secp256k1

That curve also won't work. For EC, use either prime256v1 (secp256r1) or secp384r1.

[PsySc0rpi0n]

I did an edit to my previous post. Maybe you want to have a look, as I tried to redo things with secp256k1 curve but still can't sign the certificate with acme.sh script.

Yes, for now I'm experimenting and when I get this signed, I'll probably generate a new CSR, sign it with all the correct information an will use it on LNBits frontend. But until then, I am just trying to figure out how to get my CSR signed by a trusted CA.

Edit;
oohhh ok, I'll change the curve then!

[Nummer378]

Well the error seems that LE can't connect to your webserver (the curve will also be an issue but validation needs to pass too):

[Sun 14 Nov 14:45:49 GMT 2021] original='{
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:ietf:params:acme:error:connection",
    "detail": "Fetching http://crypto4n4rk.ddns.net/.well-known/acme-challenge/OJxwNs9eAx9ijrsvB3TE6qCaj_pXmRno89L8UySXhjE: Connection refused",
    "status": 400
  },

I also get the same result:

curl -v http://crypto4n4rk.ddns.net
*   Trying 2.81.171.222:80...
* connect to 2.81.171.222 port 80 failed: Connection refused
* Failed to connect to crypto4n4rk.ddns.net port 80 after 2336 ms: Connection refused

[PsySc0rpi0n]

Well, this is not exactly a domain as I said in the 1st post. Is only a DDNS service provided by noip.com. So, the only way I can access this is to actually use the ports for the services I have running, in front of the DDNS name I chose!

Also, can you please confirm is Let'sEncrypt can handle 3rd layer domains as is the case of the name I chose for my DDNS service?

[Nummer378]

You do not necessarily need to own the FQDN you want to get a certificate for, but you need to proof that you control the FQDN (FQDN = crypto4n4rk.ddns.net in your case).

Let's Encrypt currently offers three ways to do this proof:

• HTTP-01 - Works by connecting to your server via HTTP and retrieves a shared token for validation. Requirements are that you need a domain pointing to some server that can be reached from anywhere in the internet. This is what acme.sh's webroot mode is for. You tell acme.sh where to place the token so that Let's Encrypt can retrieve it via HTTP.
• TLS-ALPN-01 - Pretty similar to HTTP-01, but uses the TLS protocol for validation. We can consider it's requirements similar to HTTP-01.
• DNS-01 - This type of validation ("challenge") works entirely within DNS. You submit a domain name you want to get a certificate for and LE gives you a challenge to submit a DNS TXT record _acme-challenge.FQDN in your global DNS. This can then be retrieved from the internet, without ever connecting to your machine(s).

For a DDNS domain, you will probably be able to do either the HTTP-01 or the TLS-ALPN-01 challenge, as the domain resolves to an IP under your control. You most likely won't be able to do the DNS-01 challenge, but that's not a problem as long as you can do one of the other two.

To do the HTTP-01 challenge, you need a webserver. If you do not currently have a webserver, you can use acme.sh's standalone mode --standalone which will automatically spin up a temporary webserver to complete the HTTP-01 challenge.

[PsySc0rpi0n]

Ok, I understand.

I have nginx running and it is serving a reverse web proxy to this LNBits frontend!
Can you point me to any instructions on how to run this challenge?

[Nummer378]

@Nummer378

curl -v http://crypto4n4rk.ddns.net

@PsySc0rpi0n

I have nginx running and it is serving a reverse web proxy to this LNBits frontend!
Can you point me to any instructions on how to run this challenge?

Well the first issue here is that no one from the internet can connect to your nginx.

Both port 80 and port 443 actively refuse the connection.

curl -v http://crypto4n4rk.ddns.net
*   Trying 2.81.171.222:80...
* connect to 2.81.171.222 port 80 failed: Connection refused
* Failed to connect to crypto4n4rk.ddns.net port 80 after 2329 ms: Connection refused

curl -v https://crypto4n4rk.ddns.net
*   Trying 2.81.171.222:443...
* connect to 2.81.171.222 port 443 failed: Connection refused
* Failed to connect to crypto4n4rk.ddns.net port 443 after 2318 ms: Connection refused

On what ports is your nginx listening? Do you maybe have a firewall that blocks external incoming connections?

[PsySc0rpi0n]

I'll be back later for this. I have to leave for a while. However, my /etc/nginx/sites-available/default is showing at least port 80 there but I have t check other config files to see if there is nothing conflicting.

bbl

[PsySc0rpi0n]

Going to check firewall now! I will update this post in a few minutes.

Edit;

I don't have any specific rule in my firewall blocking port 80 or 443.

[rg305]

The files in the /sites-available/ are not necessary enabled.
Check in the /sites-enabled/

[PsySc0rpi0n]

yeah, I know. There is the usual symlink to /etc/nginx/sites-available/default file.

So, this is the content of my /etc/nginx/sites-available/default` file.

$ cat /etc/nginx/sites-enabled/default 
##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# https://www.nginx.com/resources/wiki/start/
# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
# https://wiki.debian.org/Nginx/DirectoryStructure
#
# In most cases, administrators will remove this file from sites-enabled/ and
# leave it as reference inside of sites-available where it will continue to be
# updated by the nginx packaging team.
#
# This file will automatically load configuration files provided by other
# applications, such as Drupal or Wordpress. These applications will be made
# available underneath a path with that package name, such as /drupal8.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

# Default server configuration
#
server {
	listen 80 default_server;
	listen [::]:80 default_server;

	# SSL configuration
	#
	# listen 443 ssl default_server;
	# listen [::]:443 ssl default_server;
	#
	# Note: You should disable gzip for SSL traffic.
	# See: https://bugs.debian.org/773332
	#
	# Read up on ssl_ciphers to ensure a secure configuration.
	# See: https://bugs.debian.org/765782
	#
	# Self signed certs generated by the ssl-cert package
	# Don't use them in a production server!
	#
	# include snippets/snakeoil.conf;

	root /var/www/html;

	# Add index.php to the list if you are using PHP
	index index.html index.htm index.nginx-debian.html;

	server_name _;

	location / {
		# First attempt to serve request as file, then
		# as directory, then fall back to displaying a 404.
		try_files $uri $uri/ =404;
	}

	# pass PHP scripts to FastCGI server
	#
	#location ~ \.php$ {
	#	include snippets/fastcgi-php.conf;
	#
	#	# With php-fpm (or other unix sockets):
	#	fastcgi_pass unix:/run/php/php7.4-fpm.sock;
	#	# With php-cgi (or other tcp sockets):
	#	fastcgi_pass 127.0.0.1:9000;
	#}

	# deny access to .htaccess files, if Apache's document root
	# concurs with nginx's one
	#
	#location ~ /\.ht {
	#	deny all;
	#}
}


# Virtual Host configuration for example.com
#
# You can move that to a different file under sites-available/ and symlink that
# to sites-enabled/ to enable it.
#
#server {
#	listen 80;
#	listen [::]:80;
#
#	server_name example.com;
#
#	root /var/www/example.com;
#	index index.html;
#
#	location / {
#		try_files $uri $uri/ =404;
#	}
#}

Most of the lines are commented out.
Going to check other possible locations with config files!

[rg305]

Review the full config, with:
nginx -T

[PsySc0rpi0n]

Yeah, I can't find any errors and yes, if I check my port 80, it says it's closed!

And another thing I might be omitting inadvertently is that this LNBits frontend is listning on port 5000. So this may also be a problem for acme.sh script, no?

[rg305]

If it is only listening on 5000 (and not 80), that will break the HTTP authentication requests.

[PsySc0rpi0n]

So there is no way of making a certificate which is signed by a trusted CA for this case?

[Nummer378]

Well you said that you're reverse proxying with nginx so if you can get that nginx to respond on port 80 all will be fine.

Also I don't get any positive response on port 5000:

`curl -v http://crypto4n4rk.ddns.net:5000

• Trying 2.81.171.222:5000...
• connect to 2.81.171.222 port 5000 failed: Connection refused
• Failed to connect to crypto4n4rk.ddns.net port 5000 after 4808 ms: Connection refused`

Can you double check that the IP 2.81.171.222 does belong to the system you're trying to set this up?

PS: It looks like your system may be behind a NAT. In this case you need to port forward port 80 on your router to the host in your network.