Another failed authorization issue

hmm…
.htaccess already has an exceptional case for .well-known… :
RewriteCond %{REQUEST_URI} !^/.well-known/(acme-challenge|pki-validation)/.*