Archlinux | how to configur Let's encrypt

Server
22

Sorry, my bad! I didn’t see it reach the maximum of log files and restart at files n°1.
It looks worst than before
PART 1

2017-08-02 01:22:06,269:DEBUG:certbot.main:Arguments: ['--apache']
2017-08-02 01:22:06,270:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2017-08-02 01:22:06,284:DEBUG:certbot.log:Root logging level set at 20
2017-08-02 01:22:06,285:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-08-02 01:22:06,286:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2017-08-02 01:22:06,415:DEBUG:certbot_apache.configurator:Apache version is 2.4.27
2017-08-02 01:22:06,642:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin - Beta
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7f431e708b38>
Prep: True
2017-08-02 01:22:06,643:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x7f431e708b38> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x7f431e708b38>
2017-08-02 01:22:06,648:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f43167c1c18>)>), contact=('mailto:universal.g3nesis@gmail.com',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None), uri='https://acme-v01.api.letsencrypt.org/acme/reg/19247348', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 0472694bd7b6eaee61322065fe4cc582, Meta(creation_dt=datetime.datetime(2017, 7, 27, 19, 20, 39, tzinfo=<UTC>), creation_host='vps429820.ovh.net'))>
2017-08-02 01:22:06,650:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2017-08-02 01:22:06,652:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-08-02 01:22:06,887:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 352
2017-08-02 01:22:06,888:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 352
Boulder-Request-Id: DQIS-4R2SH8rgiI0MBpZLx03OsJESAvi8vNYgHQHwco
Replay-Nonce: ld8X45AwzadhZ6Kth7Uka7cO2lojqx-KgBLODaM8yRg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 01:22:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:05 GMT
Connection: keep-alive

b'{\n  "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",\n  "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n  "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n  "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n  "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2017-08-02 01:22:06,888:DEBUG:certbot.util:Not suggesting name "vps429820.ovh.net:443"
2017-08-02 01:22:06,888:DEBUG:certbot.util:vps429820.ovh.net:443 contains an invalid character. Valid characters are A-Z, a-z, 0-9, ., and -.
2017-08-02 01:22:06,888:DEBUG:certbot.util:Not suggesting name "ug"
2017-08-02 01:22:06,888:DEBUG:certbot.util:ug needs at least two labels
2017-08-02 01:22:09,638:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/universal-genesis.net.conf is broken. Skipping.
2017-08-02 01:22:09,639:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/universal-genesis.net/cert.pem to be a symlink

2017-08-02 01:22:09,641:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/www.universal-genesis.net.conf is broken. Skipping.
2017-08-02 01:22:09,641:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/www.universal-genesis.net/cert.pem to be a symlink

2017-08-02 01:22:09,646:INFO:certbot.renewal:Cert not yet due for renewal
2017-08-02 01:22:14,854:INFO:certbot.main:Renewing an existing certificate
2017-08-02 01:22:14,855:DEBUG:acme.client:Requesting fresh nonce
2017-08-02 01:22:14,855:DEBUG:acme.client:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz.
2017-08-02 01:22:15,041:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "HEAD /acme/new-authz HTTP/1.1" 405 0
2017-08-02 01:22:15,041:DEBUG:acme.client:Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 91
Allow: POST
Boulder-Request-Id: jFkJoqoG9gXQtaDcXe6hD3OZcimJSH7fhS3dzY9yABA
Replay-Nonce: 7CrNkU445Ii2gEIq_d2TLP3L9OPTJhXh2Yu-JufPklw
Expires: Wed, 02 Aug 2017 01:22:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:13 GMT
Connection: keep-alive

b''
2017-08-02 01:22:15,041:DEBUG:acme.client:Storing nonce: 7CrNkU445Ii2gEIq_d2TLP3L9OPTJhXh2Yu-JufPklw
2017-08-02 01:22:15,042:DEBUG:acme.client:JWS payload:
b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "resource": "new-authz"\n}'
2017-08-02 01:22:15,045:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
{
  "protected": "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",
  "signature": "Q8mtVt6a6S9TnBY_JnvuJyWVfbSo_u9jGKdNOsowxKpC5Y9UVqgMnjmCMj-rp0LX5Qjc2X9qytq9pb6aEpUqUXLStRf9crqLIScJcvtQEVkeIy5eXuBjFnIwiK-3LZJyfY_dac3JnGhcZGQ4lGqwMvYRYJdLnw48-R7_gOOQr0ywwJZUsjpnbeAGdgygnGZstMygBqYAUfCnpebFfFhT-kLOBhre3ALc-V3ncdI_F2k31-Q3oWR31TWVDNMdwbA04JlOXsHSvgnZ-vorDZz3VyLa6mQkpgJv5HygSWzM0fc6Fa_0qZxPs4i5bYRF3LsFyf9k9gYk9Vwtlu6bvDXR3A",
  "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwKICAgICJ2YWx1ZSI6ICJ3d3cudW5pdmVyc2FsLWdlbmVzaXMubmV0IgogIH0sCiAgInJlc291cmNlIjogIm5ldy1hdXRoeiIKfQ"
}
2017-08-02 01:22:15,260:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 201 1486
2017-08-02 01:22:15,261:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Content-Type: application/json
Content-Length: 1486
Boulder-Request-Id: mIyA1m-lrbBqUWgKzSy1UWUz7XBUR9Zza0c2eW690Jo
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk
Replay-Nonce: cHIbE9NbOTf-X6It51exQ8OT_S2JzGyXBnGTxC-2ZvM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 01:22:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:13 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-28T20:03:28Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349191",\n      "token": "_cL7NqQCvXkOuwTygM-Ipgl1dL_IvpbcqS4muV0auHA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n      "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n      "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "www.universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349193",\n      "token": "JI9BnCilQOAGS1dare1cV8VffEkiJ9KnlKlZ7b4UMZY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2017-08-02 01:22:15,262:DEBUG:acme.client:Storing nonce: cHIbE9NbOTf-X6It51exQ8OT_S2JzGyXBnGTxC-2ZvM
2017-08-02 01:22:15,263:INFO:certbot.auth_handler:Performing the following challenges:
2017-08-02 01:22:15,263:INFO:certbot.auth_handler:tls-sni-01 challenge for www.universal-genesis.net
2017-08-02 01:22:15,817:DEBUG:certbot_apache.tls_sni_01:Adding Include /etc/httpd/conf/le_tls_sni_01_cert_challenge.conf to /files/etc/httpd/conf/httpd.conf
2017-08-02 01:22:15,817:DEBUG:certbot_apache.tls_sni_01:writing a config file with text:
 <IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName 85006748687a5578a162eb3baf0a119e.d22c9691024528b3332c3c3d77fef45e.acme.invalid
    UseCanonicalName on
    SSLStrictSNIVHostCheck on

    LimitRequestBody 1048576

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /var/lib/letsencrypt/hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.crt
    SSLCertificateKeyFile /var/lib/letsencrypt/hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.pem

    DocumentRoot /var/lib/letsencrypt/tls_sni_01_page/
</VirtualHost>

</IfModule>

2017-08-02 01:22:15,852:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf/httpd.conf
2017-08-02 01:22:18,999:INFO:certbot.auth_handler:Waiting for verification...
2017-08-02 01:22:19,000:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "challenge",\n  "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "type": "tls-sni-01"\n}'
2017-08-02 01:22:19,003:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192:
{
  "protected": "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",
  "signature": "BsQZpA8nqj1bk4jAFExrLSJX-E6eqw9vGbOnzmpPH3O9vcEQCcstLyyUh5daZjAzzPfcx1VusJBCYwUgBAB3lgf7Goho5Jb1MbtD4qjp2aYCbj8h5HZ7MOPLZs3x3rPihZH-cB3BjY1rkJeo4xA_3P4AL6Kd1uinA5YeeU3hwBKvj6qmEQT4EjaTiLjWF37SBiLTAvy_nTrcKoSsFTrLM401i6PMTRNZibo_xYVWHRehe98oA2Kkb23A2PbAHnvJsICO6rYMf6mDVT4sKuhwF31TGXXls9uxzshg1HPkq0LFMYSvXHRbl8gs018MDv-6ijAoQ1bErCTpZhQLxuFjpw",
  "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJrZXlBdXRob3JpemF0aW9uIjogImhVbkE2R2FLb09lSXE1QTFFWnhFd2NLNlNoS0ItNHo3V3lqZ3pObUlJcjQuUGJTZ1hwei1NR2g1WXRaWW9ZWnRqejQwa1Qyd2h6VklTRmIxVlFlcEhubyIsCiAgInR5cGUiOiAidGxzLXNuaS0wMSIKfQ"
}
2017-08-02 01:22:19,207:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192 HTTP/1.1" 202 651
2017-08-02 01:22:19,208:DEBUG:acme.client:Received response:
HTTP 202
Server: nginx
Content-Type: application/json
Content-Length: 651
Boulder-Request-Id: T451i-bpPrISkJC0Dl-uhX4GBb-l2_dO5FkwGezr33E
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk>;rel="up"
Location: https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192
Replay-Nonce: ZqDkS8s9IkFf2BAhYVt3Z3aotNQu7dmu0OmsLvTCwPc
Expires: Wed, 02 Aug 2017 01:22:17 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:17 GMT
Connection: keep-alive

b'{\n  "type": "tls-sni-01",\n  "status": "valid",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n  "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n  "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "validationRecord": [\n    {\n      "hostname": "www.universal-genesis.net",\n      "port": "443",\n      "addressesResolved": [\n        "51.254.117.51",\n        "2001:41d0:401:3100::7917"\n      ],\n      "addressUsed": "51.254.117.51",\n      "addressesTried": [\n        "2001:41d0:401:3100::7917"\n      ]\n    }\n  ]\n}'
2017-08-02 01:22:19,209:DEBUG:acme.client:Storing nonce: ZqDkS8s9IkFf2BAhYVt3Z3aotNQu7dmu0OmsLvTCwPc
2017-08-02 01:22:22,213:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk.
2017-08-02 01:22:22,404:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk HTTP/1.1" 200 1486
2017-08-02 01:22:22,405:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 1486
Boulder-Request-Id: dhiVPp4Q-e3DRyON5px6K3-kG7JvpfCNMwzcXlmCSV4
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Replay-Nonce: mAR_liDEX7W8koRSMegBtimJmuQChdiWtsomzIrNFd4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 01:22:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:20 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-28T20:03:28Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349191",\n      "token": "_cL7NqQCvXkOuwTygM-Ipgl1dL_IvpbcqS4muV0auHA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n      "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n      "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "www.universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349193",\n      "token": "JI9BnCilQOAGS1dare1cV8VffEkiJ9KnlKlZ7b4UMZY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2017-08-02 01:22:22,408:INFO:certbot.auth_handler:Cleaning up challenges
2017-08-02 01:22:22,732:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0007_key-certbot.pem
2017-08-02 01:22:22,735:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0007_csr-certbot.pem
2017-08-02 01:22:22,735:DEBUG:certbot.client:CSR: CSR(file='/etc/letsencrypt/csr/0007_csr-certbot.pem', data=b'-----BEGIN CERTIFICATE REQUEST-----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\nzznhx/Q/v163meGhEBtpuw==\n-----END CERTIFICATE REQUEST-----\n', form='pem'), domains: ['www.universal-genesis.net']
2017-08-02 01:22:22,735:DEBUG:acme.client:Requesting issuance...
2017-08-02 01:22:22,736:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "new-cert",\n  "csr": "MIICfDCCAWQCAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQqR9wKP-zGQP9CkJlPpK1cxkxyyVA9R_g5fRj_Je2JTTv7h9eyH2kHRuhyMstLQDxHfriL8Fe6tpMiFhbU74nPrMNvrXZrIuzJnvZUoHV786Xk5TqYXfZKJjLn8xfCXq-uBzUaAcRzWYx3x7tFOEjLOb0QHguHsq5kq6Y45KKYoljr7sC69iJzpwk-iU2_pPoRsdk51LVDnAKzv9nEUXvCMT5qE7cRmWFQQ9P60db5TLFk0N7J-tTzofR4EFrKBfVtcFcUn8-PLbsBunSkIMWVqXFfPs6oZC7hJAUrbnMn3-ZNabjyyBfWDOFljIfEKqZv80BeJnW348nkp8f6JNUCAwEAAaA3MDUGCSqGSIb3DQEJDjEoMCYwJAYDVR0RBB0wG4IZd3d3LnVuaXZlcnNhbC1nZW5lc2lzLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAfC7uXIn2qIlCpCU7Cqs0jgQrYH-FXxQEI8AHi4cnFMg2cGFMtZd6sJPykMm7Mu1P9mf9BywnbormMCK6hjUSoRClsoK2LLbC8wOswd24Nw1jka_hZCKBkqj2H4no9212pnyNfuE4wkpqwmqFrfd6VTqmjn5GWsrxpDEjWb8dMiVkqP9Yov4VdLKR3tOdYWYc_PcdPscP_rS1ouTpIZNJYQfM4xO5TF9kVsCgLr05s-8j7w_DfgLoC9EUQSpikOhSU4-2CSnnkRmhuLnIRcUnIuGwaAAWiVse3ixohS--JfhfE1t_VXavls9WRNP5b2dSzznhx_Q_v163meGhEBtpuw"\n}'
2017-08-02 01:22:22,739:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert:
{
  "protected": "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",
  "signature": "tgrf6RYQgGq0-zp4YC2PRyqNeHqudNt45BlclgD96y6JrpZpuxvDJeYYi2Gi32TG9eMuYnFr0ogIgb-SzOY07nyOYGFZod4DU3zdb9cAWoRCLEr-QzDZWCJXAcK840wQ8FqD6Zap7v-Mm-o-66sTEiBHJhN_tYNHjnoBRCjN2fEpN2k1XHKoWyxyvaQ-XSee9nUTmMYtNhANp9y7O4JB577XU_T4FUfMC2svuHMbM864Dn944qjeeIJhwVNbqD-MZmfThzQMQDIyG8op9qn4kr9WdJju40TunmRrH0seSPbImGXX1GQilRLVQnNMxGaZtoge1fR6ITcA4iM4mfMfkA",
  "payload": "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"
}
2017-08-02 01:22:22,974:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-cert HTTP/1.1" 201 1305
2017-08-02 01:22:22,975:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Content-Type: application/pkix-cert
Content-Length: 1305
Boulder-Request-Id: q7qrmHr7BnEUwB4Vqo8gGMnfipo2xSEjdFQdV9V32Bk
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"
Location: https://acme-v01.api.letsencrypt.org/acme/cert/0338289ff744a870cdfdcab77bf3d5d722e5
Replay-Nonce: nsA9O151iA1iJaGvbWI5LXr8eJ1Cy3l9kF2aYlAKF4s
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 01:22:21 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:21 GMT
Connection: keep-alive

b'MIIFFTCCA/2gAwIBAgISAzgon/dEqHDN/cq3e/PV1yLlMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MDIwMDIyMDBaFw0xNzEwMzEwMDIyMDBaMCQxIjAgBgNVBAMTGXd3dy51bml2ZXJzYWwtZ2VuZXNpcy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKkfcCj/sxkD/QpCZT6StXMZMcslQPUf4OX0Y/yXtiU07+4fXsh9pB0bocjLLS0A8R364i/BXuraTIhYW1O+Jz6zDb612ayLsyZ72VKB1e/Ol5OU6mF32SiYy5/MXwl6vrgc1GgHEc1mMd8e7RThIyzm9EB4Lh7KuZKumOOSimKJY6+7AuvYic6cJPolNv6T6EbHZOdS1Q5wCs7/ZxFF7wjE+ahO3EZlhUEPT+tHW+UyxZNDeyfrU86H0eBBaygX1bXBXFJ/Pjy27Abp0pCDFlalxXz7OqGQu4SQFK25zJ9/mTWm48sgX1gzhZYyHxCqmb/NAXiZ1t+PJ5KfH+iTVAgMBAAGjggIZMIICFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFZM/U1bmK/0e/P2ZiJEL4F1H3VXMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJAYDVR0RBB0wG4IZd3d3LnVuaXZlcnNhbC1nZW5lc2lzLm5ldDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQATDM55qinvieLAlMeSs+Gev+LdZGRHOwbPcExCNTU6Zsec5T9bhi8CM41qi3fBiRTGa2yu7KDQJHbU9o9hz6M+Oczej2dGaJwYuZW3MNTwdYurOSkPJAOapcu7p4X5wlmK/8RoyMB3B5u8LXxY0mI7qIJIn1TnIpzdzQwgfryHQ8dKMCvNUf9m2xGHcg6TjRYxW7072AW1GZznTGs1gmJ6qIaBW8dWKDe/ENmMHonjCF3jFKgKDKrWsmbYtEPeYcvA1ZA0clVqk6VUAZe/cw6JZvFp6WghkRJNH+uPu/N9ftIgY//4OF/TykxAdeZCp6Ny0dcjoy3o6ZAiyJjxL7bU'
2017-08-02 01:22:22,976:DEBUG:acme.client:Storing nonce: nsA9O151iA1iJaGvbWI5LXr8eJ1Cy3l9kF2aYlAKF4s
2017-08-02 01:22:22,978:DEBUG:chardet.charsetprober:SHIFT_JIS Japanese prober hit error at byte 2
2017-08-02 01:22:22,978:DEBUG:chardet.charsetprober:EUC-JP Japanese prober hit error at byte 1
2017-08-02 01:22:22,979:DEBUG:chardet.charsetprober:GB2312 Chinese prober hit error at byte 2
2017-08-02 01:22:22,979:DEBUG:chardet.charsetprober:EUC-KR Korean prober hit error at byte 1
2017-08-02 01:22:22,979:DEBUG:chardet.charsetprober:CP949 Korean prober hit error at byte 2
2017-08-02 01:22:22,979:DEBUG:chardet.charsetprober:Big5 Chinese prober hit error at byte 1
2017-08-02 01:22:22,979:DEBUG:chardet.charsetprober:EUC-TW Taiwan prober hit error at byte 1
2017-08-02 01:22:22,995:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.043190040030923346
2017-08-02 01:22:22,995:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.04338360883778464
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.025909798345153983
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.060540159056561606
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.03759029483904151
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.08081913390393927
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.09512624956152178
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.09636567952323542
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.02593112860140642
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.042544311772660943
2017-08-02 01:22:22,996:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.01796464201061609
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.2640475417570856
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.026064477119011328
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.026064477119011328
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.043190040030923346
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.04338360883778464
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.025909798345153983
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.060540159056561606
2017-08-02 01:22:22,997:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.03759029483904151
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.08081913390393927
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.09512624956152178
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.09636567952323542
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.02593112860140642
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.042544311772660943
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.01796464201061609
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.2640475417570856
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-02 01:22:22,998:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.026064477119011328
2017-08-02 01:22:22,999:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.026064477119011328
2017-08-02 01:22:23,001:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/issuer-cert.
2017-08-02 01:22:23,191:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /acme/issuer-cert HTTP/1.1" 200 1174
2017-08-02 01:22:23,193:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/pkix-cert
Content-Length: 1174
Boulder-Request-Id: 85ouCZjYnb9aiLq6tawYVONXI2R38uUnp0gTfST3_sY
Replay-Nonce: oDh9KgNFBsrIsqPchNb7kaZJXtWGRJuEaX-Pc1QlgcM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 01:22:21 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 01:22:21 GMT
Connection: keep-alive
23

Part2

2017-08-02 01:22:23,193:DEBUG:chardet.charsetprober:SHIFT_JIS Japanese prober hit error at byte 2
2017-08-02 01:22:23,193:DEBUG:chardet.charsetprober:EUC-JP Japanese prober hit error at byte 1
2017-08-02 01:22:23,193:DEBUG:chardet.charsetprober:GB2312 Chinese prober hit error at byte 2
2017-08-02 01:22:23,194:DEBUG:chardet.charsetprober:EUC-KR Korean prober hit error at byte 1
2017-08-02 01:22:23,194:DEBUG:chardet.charsetprober:CP949 Korean prober hit error at byte 2
2017-08-02 01:22:23,194:DEBUG:chardet.charsetprober:Big5 Chinese prober hit error at byte 1
2017-08-02 01:22:23,194:DEBUG:chardet.charsetprober:EUC-TW Taiwan prober hit error at byte 1
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.04025180677792795
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.02918497978583681
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.04514191986865063
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.05157078240745495
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.027529907939475486
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.12189915743514936
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.1323781201284265
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.037557321486345316
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.043096077988372
2017-08-02 01:22:23,202:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02568934298576919
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.23832112651927498
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.050703173091617086
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.04056253847329366
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.04025180677792795
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.02918497978583681
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.04514191986865063
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.05157078240745495
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.027529907939475486
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.12189915743514936
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.1323781201284265
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.037557321486345316
2017-08-02 01:22:23,203:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.043096077988372
2017-08-02 01:22:23,204:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02568934298576919
2017-08-02 01:22:23,204:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.23832112651927498
2017-08-02 01:22:23,204:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-02 01:22:23,204:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.050703173091617086
2017-08-02 01:22:23,204:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.04056253847329366
2017-08-02 01:22:23,205:DEBUG:certbot.storage:Writing new private key to /etc/letsencrypt/archive/www.universal-genesis.net-0001/privkey5.pem.
2017-08-02 01:22:23,206:DEBUG:certbot.storage:Writing certificate to /etc/letsencrypt/archive/www.universal-genesis.net-0001/cert5.pem.
2017-08-02 01:22:23,206:DEBUG:certbot.storage:Writing chain to /etc/letsencrypt/archive/www.universal-genesis.net-0001/chain5.pem.

2017-08-02 01:22:23,206:DEBUG:certbot.storage:Writing full chain to /etc/letsencrypt/archive/www.universal-genesis.net-0001/fullchain5.pem.
2017-08-02 01:22:23,483:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2017-08-02 01:22:23,483:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f43133de2b0>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f43133de0f0>, apache=True, apache_challenge_location=<certbot.cli._Default object at 0x7f43133df128>, apache_ctl=<certbot.cli._Default object at 0x7f43133def28>, apache_dismod=<certbot.cli._Default object at 0x7f43133df9e8>, apache_enmod=<certbot.cli._Default object at 0x7f43133dfba8>, apache_handle_modules=<certbot.cli._Default object at 0x7f43133df208>, apache_handle_sites=<certbot.cli._Default object at 0x7f43133ded68>, apache_init_script=<certbot.cli._Default object at 0x7f43133dec88>, apache_le_vhost_ext=<certbot.cli._Default object at 0x7f43133df828>, apache_logs_root=<certbot.cli._Default object at 0x7f43133df2e8>, apache_server_root=<certbot.cli._Default object at 0x7f43133df668>, apache_vhost_root=<certbot.cli._Default object at 0x7f43133df4a8>, authenticator='apache', break_my_certs=<certbot.cli._Default object at 0x7f43133def60>, cert_path=<certbot.cli._Default object at 0x7f43133e3908>, certname=<certbot.cli._Default object at 0x7f4313423438>, chain_path=<certbot.cli._Default object at 0x7f43133e3ba8>, checkpoints=<certbot.cli._Default object at 0x7f43133e3438>, config_dir=<certbot.cli._Default object at 0x7f43133e3c88>, config_file=None, configurator=<certbot.cli._Default object at 0x7f43133e8080>, csr=<certbot.cli._Default object at 0x7f43133e3240>, debug=<certbot.cli._Default object at 0x7f43133de908>, debug_challenges=<certbot.cli._Default object at 0x7f43133dea20>, dialog=None, dns_cloudflare=<certbot.cli._Default object at 0x7f43133e8860>, dns_cloudxns=<certbot.cli._Default object at 0x7f43133e3eb8>, dns_digitalocean=<certbot.cli._Default object at 0x7f43133e3cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f43133e3b38>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f43133e3978>, dns_google=<certbot.cli._Default object at 0x7f43133e37b8>, dns_luadns=<certbot.cli._Default object at 0x7f43133e35c0>, dns_nsone=<certbot.cli._Default object at 0x7f43133e33c8>, dns_rfc2136=<certbot.cli._Default object at 0x7f43133e31d0>, dns_route53=<certbot.cli._Default object at 0x7f43133dff98>, domains=<certbot.cli._Default object at 0x7f4313423320>, dry_run=<certbot.cli._Default object at 0x7f4313423550>, duplicate=<certbot.cli._Default object at 0x7f43133de3c8>, eff_email=<certbot.cli._Default object at 0x7f4313423898>, email=<certbot.cli._Default object at 0x7f43134237b8>, expand=<certbot.cli._Default object at 0x7f4313423b70>, force_interactive=<certbot.cli._Default object at 0x7f4313423390>, fullchain_path=<certbot.cli._Default object at 0x7f43133e3ac8>, func=<function run at 0x7f4316c5b158>, hsts=<certbot.cli._Default object at 0x7f43133df400>, http01_address=<certbot.cli._Default object at 0x7f43133dee80>, http01_port=<certbot.cli._Default object at 0x7f43133deda0>, ifaces=<certbot.cli._Default object at 0x7f43133e3748>, init=<certbot.cli._Default object at 0x7f43133e3518>, installer='apache', key_path=<certbot.cli._Default object at 0x7f43133e39e8>, logs_dir=<certbot.cli._Default object at 0x7f43133e3e48>, manual=<certbot.cli._Default object at 0x7f43133e8630>, manual_auth_hook=<certbot.cli._Default object at 0x7f43133dfe10>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f43133de8d0>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f43133de710>, must_staple=<certbot.cli._Default object at 0x7f43133df160>, nginx=<certbot.cli._Default object at 0x7f43133e8438>, no_bootstrap=<certbot.cli._Default object at 0x7f43133de668>, no_self_upgrade=<certbot.cli._Default object at 0x7f43133de588>, no_verify_ssl=<certbot.cli._Default object at 0x7f43133deb00>, noninteractive_mode=<certbot.cli._Default object at 0x7f4313423ba8>, num=<certbot.cli._Default object at 0x7f43133e3048>, os_packages_only=<certbot.cli._Default object at 0x7f43133de4a8>, post_hook=<certbot.cli._Default object at 0x7f43133dfbe0>, pre_hook=<certbot.cli._Default object at 0x7f43133dfb00>, pref_challs=<certbot.cli._Default object at 0x7f43133dfa20>, prepare=<certbot.cli._Default object at 0x7f43133e3630>, quiet=<certbot.cli._Default object at 0x7f43133de748>, reason=<certbot.cli._Default object at 0x7f43133e3358>, redirect=<certbot.cli._Default object at 0x7f43133df240>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f4313423630>, reinstall=<certbot.cli._Default object at 0x7f4313423b38>, renew_by_default=<certbot.cli._Default object at 0x7f4313423ef0>, renew_hook=<certbot.cli._Default object at 0x7f43133dfcc0>, renew_with_new_domains=<certbot.cli._Default object at 0x7f4313423fd0>, rsa_key_size=<certbot.cli._Default object at 0x7f43133df080>, server=<certbot.cli._Default object at 0x7f43133e3f28>, staging=<certbot.cli._Default object at 0x7f43133de828>, standalone=<certbot.cli._Default object at 0x7f43133e8550>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f43133de550>, staple=<certbot.cli._Default object at 0x7f43133df780>, strict_permissions=<certbot.cli._Default object at 0x7f43133df940>, text_mode=<certbot.cli._Default object at 0x7f43167c7358>, tls_sni_01_address=<certbot.cli._Default object at 0x7f43133decc0>, tls_sni_01_port=<certbot.cli._Default object at 0x7f43133debe0>, tos=<certbot.cli._Default object at 0x7f43133de1d0>, uir=<certbot.cli._Default object at 0x7f43133df5c0>, update_registration=<certbot.cli._Default object at 0x7f4313423710>, user_agent=<certbot.cli._Default object at 0x7f43133e3160>, validate_hooks=<certbot.cli._Default object at 0x7f43133dfda0>, verb='run', verbose_count=<certbot.cli._Default object at 0x7f43167b0da0>, webroot=<certbot.cli._Default object at 0x7f43133e8748>, webroot_map=<certbot.cli._Default object at 0x7f43133de198>, webroot_path=<certbot.cli._Default object at 0x7f43133deac8>, work_dir=<certbot.cli._Default object at 0x7f43133e3d68>)
2017-08-02 01:22:24,714:DEBUG:certbot.storage:Writing new config /etc/letsencrypt/renewal/www.universal-genesis.net-0001.conf.new.
2017-08-02 01:22:24,718:DEBUG:certbot.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/www.universal-genesis.net-0001/fullchain.pem. Your cert will expire on 2017-10-31. To obtain a new or tweaked version of this certificate in the future, simply run certbot again with the "certonly" option. To non-interactively renew *all* of your certificates, run "certbot renew"
2017-08-02 01:22:24,729:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 451, in deploy_certificate
    fullchain_path=fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 245, in deploy_cert
    vhost = self.choose_vhost(domain)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 337, in choose_vhost
    vhost = self.make_vhost_ssl(vhost)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 861, in make_vhost_ssl
    "Could not reverse map the HTTPS VirtualHost to the original")
certbot.errors.PluginError: Could not reverse map the HTTPS VirtualHost to the original

2017-08-02 01:22:24,730:DEBUG:certbot.error_handler:Calling registered functions
2017-08-02 01:22:24,730:DEBUG:certbot.reporter:Reporting to user: Unable to install the certificate
2017-08-02 01:22:24,730:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.16.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 743, in main
    return config.func(config, plugins)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 604, in run
    _install_cert(config, le_client, domains, new_lineage)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 469, in _install_cert
    path_provider.cert_path, path_provider.chain_path, path_provider.fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 451, in deploy_certificate
    fullchain_path=fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 245, in deploy_cert
    vhost = self.choose_vhost(domain)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 337, in choose_vhost
    vhost = self.make_vhost_ssl(vhost)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 861, in make_vhost_ssl
    "Could not reverse map the HTTPS VirtualHost to the original")
certbot.errors.PluginError: Could not reverse map the HTTPS VirtualHost to the original ```
24

cerbot --debug

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Which names would you like to activate HTTPS for?

1: domain1.com
2: www.domain1.com
3: vps429820.ovh.net
4: universal-genesis.net
5: www.universal-genesis.net

Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 5
Cert not yet due for renewal

You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/www.universal-genesis.net-0001.conf)

What would you like to do?

1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)

Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Renewing an existing certificate
Performing the following challenges:
tls-sni-01 challenge for www.universal-genesis.net
Waiting for verification...
Cleaning up challenges
Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 11, in
load_entry_point('certbot==0.16.0', 'console_scripts', 'certbot')()
File "/usr/lib/python3.6/site-packages/certbot/main.py", line 743, in main
return config.func(config, plugins)
File "/usr/lib/python3.6/site-packages/certbot/main.py", line 598, in run
certname, lineage)
File "/usr/lib/python3.6/site-packages/certbot/main.py", line 77, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.6/site-packages/certbot/renewal.py", line 297, in renew_cert
new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
File "/usr/lib/python3.6/site-packages/certbot/client.py", line 335, in obtain_certificate
domains, csr, authzr=authzr)
File "/usr/lib/python3.6/site-packages/certbot/client.py", line 277, in obtain_certificate_from_csr
authzr)
File "/usr/lib/python3.6/site-packages/acme/client.py", line 313, in request_issuance
headers={'Accept': content_type})
File "/usr/lib/python3.6/site-packages/acme/client.py", line 682, in post
return self._post_once(*args, **kwargs)
File "/usr/lib/python3.6/site-packages/acme/client.py", line 695, in _post_once
return self._check_response(response, content_type=content_type)
File "/usr/lib/python3.6/site-packages/acme/client.py", line 582, in _check_response
raise messages.Error.from_json(jobj)
acme.messages.Error: urn:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new cert :: too many certificates already issued for exact set of domains: www.universal-genesis.net
Please see the logfiles in /var/log/letsencrypt for more details.

logs

2017-08-02 03:28:06,437:DEBUG:certbot.main:Arguments: ['--debug']
2017-08-02 03:28:06,437:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2017-08-02 03:28:06,454:DEBUG:certbot.log:Root logging level set at 20
2017-08-02 03:28:06,455:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-08-02 03:28:06,456:DEBUG:certbot.plugins.selection:Requested authenticator None and installer None
2017-08-02 03:28:06,592:DEBUG:certbot_apache.configurator:Apache version is 2.4.27
2017-08-02 03:28:06,830:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin - Beta
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7f5d6494eb38>
Prep: True
2017-08-02 03:28:06,832:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x7f5d6494eb38> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x7f5d6494eb38>
2017-08-02 03:28:06,837:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f5d5ca08080>)>), contact=('mailto:universal.g3nesis@gmail.com',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None), uri='https://acme-v01.api.letsencrypt.org/acme/reg/19247348', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 0472694bd7b6eaee61322065fe4cc582, Meta(creation_dt=datetime.datetime(2017, 7, 27, 19, 20, 39, tzinfo=<UTC>), creation_host='vps429820.ovh.net'))>
2017-08-02 03:28:06,839:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2017-08-02 03:28:06,842:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-08-02 03:28:07,099:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 352
2017-08-02 03:28:07,100:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 352
Boulder-Request-Id: fnl6gw-wU7dsXp--s0nNB_8NKj1flfomtYLRLc0dzWs
Replay-Nonce: _IQDHeLMRQ7on2-n8aEEyHKanLhvUnx7jOM5qoeWwj4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 03:28:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:05 GMT
Connection: keep-alive

b'{\n  "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",\n  "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n  "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n  "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n  "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2017-08-02 03:28:07,101:DEBUG:certbot.util:Not suggesting name "ug"
2017-08-02 03:28:07,101:DEBUG:certbot.util:ug needs at least two labels
2017-08-02 03:28:07,101:DEBUG:certbot.util:Not suggesting name "vps429820.ovh.net:443"
2017-08-02 03:28:07,102:DEBUG:certbot.util:vps429820.ovh.net:443 contains an invalid character. Valid characters are A-Z, a-z, 0-9, ., and -.
2017-08-02 03:28:11,019:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/universal-genesis.net.conf is broken. Skipping.
2017-08-02 03:28:11,020:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/universal-genesis.net/cert.pem to be a symlink

2017-08-02 03:28:11,023:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/www.universal-genesis.net.conf is broken. Skipping.
2017-08-02 03:28:11,023:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/www.universal-genesis.net/cert.pem to be a symlink

2017-08-02 03:28:11,028:INFO:certbot.renewal:Cert not yet due for renewal
2017-08-02 03:28:15,460:INFO:certbot.main:Renewing an existing certificate
2017-08-02 03:28:15,461:DEBUG:acme.client:Requesting fresh nonce
2017-08-02 03:28:15,461:DEBUG:acme.client:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz.
2017-08-02 03:28:15,688:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "HEAD /acme/new-authz HTTP/1.1" 405 0
2017-08-02 03:28:15,689:DEBUG:acme.client:Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 91
Allow: POST
Boulder-Request-Id: -hHk1_7EQhgipovVfAYLD1kMVV1YnLGccTMDd3Y-spg
Replay-Nonce: kQaUb0201AxuEpytTDaPJ8Io7F8qA6nnKHlb0HOSs-A
Expires: Wed, 02 Aug 2017 03:28:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:13 GMT
Connection: keep-alive

b''
2017-08-02 03:28:15,690:DEBUG:acme.client:Storing nonce: kQaUb0201AxuEpytTDaPJ8Io7F8qA6nnKHlb0HOSs-A
2017-08-02 03:28:15,690:DEBUG:acme.client:JWS payload:
b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "resource": "new-authz"\n}'
2017-08-02 03:28:15,697:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
{
  "protected": "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",
  "signature": "uFb3CCARLD0bX1M-7siXZ1XKX8gHOwrYCch-uxfOUShDlDlGS62c_U4SzsGQBuGrTawCajQ5sf0GJqsTLUByd6pv-1XOfEHZaPAaMfNgTncD8mOnt8v4M-Wh6br-enwL_L99Ea0HbWExNefUd6vdGKZ_NVUlAvrAppavHv7w73u9YzVwdUpDYLFlAukL5uwVj5RQPP6j0JJO00cyWDgkCKg1WkPNS-Wpa11ThYnE2axLIGMsVN6_d9OsCBhv5wQqPMdATAD1P3wS2oLJAzURdB-3TaWyusivWiniG7rtj-grI2TMPSy-PQ6axFIe00lbmczUxvfLD8MSgcT8R9jI3Q",
  "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwKICAgICJ2YWx1ZSI6ICJ3d3cudW5pdmVyc2FsLWdlbmVzaXMubmV0IgogIH0sCiAgInJlc291cmNlIjogIm5ldy1hdXRoeiIKfQ"
}
2017-08-02 03:28:15,916:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 201 1486
2017-08-02 03:28:15,917:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Content-Type: application/json
Content-Length: 1486
Boulder-Request-Id: Bfxd-5s-lGVrgRl93BY-yo6GZElyedNp7aAfXKGRyL8
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk
Replay-Nonce: UfczZEdNJDxM6311oeUlKml1IZCVwv1vkUKo63OauAI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 03:28:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:14 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-28T20:03:28Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349191",\n      "token": "_cL7NqQCvXkOuwTygM-Ipgl1dL_IvpbcqS4muV0auHA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n      "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n      "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "www.universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349193",\n      "token": "JI9BnCilQOAGS1dare1cV8VffEkiJ9KnlKlZ7b4UMZY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2017-08-02 03:28:15,917:DEBUG:acme.client:Storing nonce: UfczZEdNJDxM6311oeUlKml1IZCVwv1vkUKo63OauAI
2017-08-02 03:28:15,917:INFO:certbot.auth_handler:Performing the following challenges:
2017-08-02 03:28:15,918:INFO:certbot.auth_handler:tls-sni-01 challenge for www.universal-genesis.net
2017-08-02 03:28:16,168:DEBUG:certbot_apache.tls_sni_01:Adding Include /etc/httpd/conf/le_tls_sni_01_cert_challenge.conf to /files/etc/httpd/conf/httpd.conf
2017-08-02 03:28:16,168:DEBUG:certbot_apache.tls_sni_01:writing a config file with text:
 <IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName 85006748687a5578a162eb3baf0a119e.d22c9691024528b3332c3c3d77fef45e.acme.invalid
    UseCanonicalName on
    SSLStrictSNIVHostCheck on

    LimitRequestBody 1048576

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /var/lib/letsencrypt/hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.crt
    SSLCertificateKeyFile /var/lib/letsencrypt/hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.pem

    DocumentRoot /var/lib/letsencrypt/tls_sni_01_page/
</VirtualHost>

</IfModule>

2017-08-02 03:28:16,203:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf/httpd.conf
2017-08-02 03:28:19,348:INFO:certbot.auth_handler:Waiting for verification...
2017-08-02 03:28:19,349:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "challenge",\n  "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "type": "tls-sni-01"\n}'
2017-08-02 03:28:19,352:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAiandrIjogeyJuIjogIjRiWFVWTmtxdU5md05MUHlPV0pRZmo3QllrTGNYTmZmX3RhbGtlWVBKUU5ENFYwNUxpN3VIdC1jMEQ1dllvR1BEQU16MTJ4Zi1TSXh6V1hueUVnNnVXeS03WnZZUTExRndlQXFDNHFvXzBlNWJmcFZqSXhyNEI3VjlWTzZVREJFOURMOHV6cjdnQWJMOEw2UmNkU0dKVnVRQTIzQkRCUUFadGk3VWtBYml5ZW5FY2RtYm5WcmktN1VwVFZ6NnZ2djZUTTlUNmdlWGpMZW16dTVNb3JVT21fbjFlOWZZQU9SYXhNTzdMNlZOSGJVZWk2MV81RjA3dWh5SDNYb2txQlE3bHZEeFhob0RzSWtXbWhESDJUYVJuVVJBZGI0RThfSGV0M1JfNlBzVWE4U2VfRVNkLWJzQnlGSFRUck8tNmlMTlZKNWgyNWlUc1ZvX01xeHRuRlZtdyIsICJlIjogIkFRQUIiLCAia3R5IjogIlJTQSJ9LCAibm9uY2UiOiAiVWZjelpFZE5KRHhNNjMxMW9lVWxLbWwxSVpDVnd2MXZrVUtvNjNPYXVBSSJ9",
  "signature": "yLRtNVoTFb6pv1x07iNyWGQ7c9e4H0dw65uGJHUikVE5IrEFSv_xDZ7woz9eV7yoMwinLBSwXLRfK0tU5RqHZdeRfCBsROXIRtr51eXc3P1wFyEJXowB-TlS6w3qnAaVQYpoyI5ZSbv334RShDeJVwWTpwBrxam9OUWvhVCmDqd1bt3_ZQnGoYBBTVNP5KsdhqCNLhuXtEw5Lq53pnZljEhOIml-Bj-yT99yqsVWaJkB9mzoZpO1rtctB7hSbI6q5GoamYS3h3CYPI5taDL8FBnA96i3lTvmH9WegY-XaLCGg2rfvvFPouLwm9qbrpwxHSDYyJ7i66YGt-jZkBCX3Q",
  "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJrZXlBdXRob3JpemF0aW9uIjogImhVbkE2R2FLb09lSXE1QTFFWnhFd2NLNlNoS0ItNHo3V3lqZ3pObUlJcjQuUGJTZ1hwei1NR2g1WXRaWW9ZWnRqejQwa1Qyd2h6VklTRmIxVlFlcEhubyIsCiAgInR5cGUiOiAidGxzLXNuaS0wMSIKfQ"
}
2017-08-02 03:28:19,598:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192 HTTP/1.1" 202 651
2017-08-02 03:28:19,599:DEBUG:acme.client:Received response:
HTTP 202
Server: nginx
Content-Type: application/json
Content-Length: 651
Boulder-Request-Id: u8UC0zZN8xuJzW-fK8uIXx4w5DX5VvMFlkXk84Ndxu4
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk>;rel="up"
Location: https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192
Replay-Nonce: FYM6u-b7Jey5IyuQXl-r4xo_UWjcPnoqcr93djZ8OK0
Expires: Wed, 02 Aug 2017 03:28:17 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:17 GMT
Connection: keep-alive

b'{\n  "type": "tls-sni-01",\n  "status": "valid",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n  "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n  "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "validationRecord": [\n    {\n      "hostname": "www.universal-genesis.net",\n      "port": "443",\n      "addressesResolved": [\n        "51.254.117.51",\n        "2001:41d0:401:3100::7917"\n      ],\n      "addressUsed": "51.254.117.51",\n      "addressesTried": [\n        "2001:41d0:401:3100::7917"\n      ]\n    }\n  ]\n}'
2017-08-02 03:28:19,599:DEBUG:acme.client:Storing nonce: FYM6u-b7Jey5IyuQXl-r4xo_UWjcPnoqcr93djZ8OK0
2017-08-02 03:28:22,603:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk.
2017-08-02 03:28:22,794:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /acme/authz/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk HTTP/1.1" 200 1486
2017-08-02 03:28:22,795:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 1486
Boulder-Request-Id: r5GDj9oaWfFOmmdOPsmJmyg6XRcO01VOZ4YAf8i2FnU
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Replay-Nonce: XJ7yE4KcP6K8QCGAErYB5xJKYpQkw9-EvH6DQ5aSY3A
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 02 Aug 2017 03:28:21 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:21 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "www.universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-28T20:03:28Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349191",\n      "token": "_cL7NqQCvXkOuwTygM-Ipgl1dL_IvpbcqS4muV0auHA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349192",\n      "token": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4",\n      "keyAuthorization": "hUnA6GaKoOeIq5A1EZxEwcK6ShKB-4z7WyjgzNmIIr4.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "www.universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Kfj62wzqaFcpM2LBzky_LM5wKf232PnBpQwDj8w2mMk/1642349193",\n      "token": "JI9BnCilQOAGS1dare1cV8VffEkiJ9KnlKlZ7b4UMZY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2017-08-02 03:28:22,797:INFO:certbot.auth_handler:Cleaning up challenges
2017-08-02 03:28:23,196:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0009_key-certbot.pem
2017-08-02 03:28:23,198:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0009_csr-certbot.pem
2017-08-02 03:28:23,198:DEBUG:certbot.client:CSR: CSR(file='/etc/letsencrypt/csr/0009_csr-certbot.pem', data=b'-----BEGIN CERTIFICATE REQUEST-----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\n9RbGAz3yfFgjj29LX0W1BA==\n-----END CERTIFICATE REQUEST-----\n', form='pem'), domains: ['www.universal-genesis.net']
2017-08-02 03:28:23,199:DEBUG:acme.client:Requesting issuance...
2017-08-02 03:28:23,199:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "new-cert",\n  "csr": "MIICfDCCAWQCAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQmj55AU_q-8jU3DxQ5REShn--NQCji8Kj90UeY7xEjhLfZsDe_SKRR91TxJmqJGVvDwN6iisqND0v0g5aYmULxxugelatHeD5S2Io_ZBypsLMix79itzDrA--s8UHNcm0QonAut1PuHHiqT9x-ZnaxJs_7qTP5avGbDdcbBfjWiv4d1ohU1xB64lFHvBFbp0wuzzTPPpQyT5ZAdlPPdIi_AfX9w1PA5vruBqzgfXG9YpGQOe0slcJBhEQCkRpDa_wcLZIk_mv8Z8n0drPLb5V0tQ45my_BfwIlgCv2ADn6xKaCW47Fmp3dY-YM5zlBpUJ_vM34zFESrRqO6agK7H8CAwEAAaA3MDUGCSqGSIb3DQEJDjEoMCYwJAYDVR0RBB0wG4IZd3d3LnVuaXZlcnNhbC1nZW5lc2lzLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAhMK0vq7mAH-4KLuf9dDljCLoSwkVxlkaSFXY70BXWf2K_QGX9aNbIrkOdZ82j79R1HKFxlwIzYhjvBwBswvDxlMTXZaTIHY4eBJnEdJzjheZjE5LpUefFRHKj5wAK3mihIXxFOWsesEZuXNvKlbuFMHY1ootDX37-69_Db2ddHoP8jSYSjG1LIE1Eq50KpHl2nwnn5tSTFbzBQ_2X03U3URDbqzJljj0wv3sD1LMvWZEkbxcIqYm1HdeMdV9I-9kZ5lc-S92cf07i-GkeoLdBNr5ErzagnsehoN6zfJQlB5wUdtsMPkcqHtzhztw4rFU9RbGAz3yfFgjj29LX0W1BA"\n}'
2017-08-02 03:28:23,202:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert:
{
  "protected": "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",
  "signature": "4Iq39Gec1XZG8xRaJK67j9VVqOhHb8M4N_JEqVHJlL1Cnqs131JUNuyeYcb29BP9jOg7qUE2hcH-DTf3m1tJuWhuDBVBIBo9p_8FZF338m8TZziNskKb1c6mzexmALabKc7M59VWrUY2s-weXyaMsaSIMiAXUvocgf24ZTOZaNJLxTWqGC7Z_SN3bdct4-ett4PCqDEy2RqOkJ-EbJ2TnfUvB3zCULd7ECHX7gcn0R_z9yj6girdhcjJF99dcVmaBki8fxGuQNXnyI9eT91lQ_00ZNCS9D5cX-xhCgXFmMIJZUMJDDxUQ740siwZ9VZH7YyHLSuNUOnbvQtuPyL1pw",
  "payload": "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"
}
2017-08-02 03:28:23,401:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-cert HTTP/1.1" 429 190
2017-08-02 03:28:23,403:DEBUG:acme.client:Received response:
HTTP 429
Server: nginx
Content-Type: application/problem+json
Content-Length: 190
Boulder-Request-Id: qC3SNt5sk-SVAf1Q8y_4LhWCOkOSV9-M4-lSVE1az3c
Boulder-Requester: 19247348
Replay-Nonce: ZrQ2FsRHdFxAb8rqOxuK8JOS1ZZN8sHylWszc2tIzTg
Expires: Wed, 02 Aug 2017 03:28:21 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 02 Aug 2017 03:28:21 GMT
Connection: close

b'{\n  "type": "urn:acme:error:rateLimited",\n  "detail": "Error creating new cert :: too many certificates already issued for exact set of domains: www.universal-genesis.net",\n  "status": 429\n}'
2017-08-02 03:28:23,403:DEBUG:acme.client:Storing nonce: ZrQ2FsRHdFxAb8rqOxuK8JOS1ZZN8sHylWszc2tIzTg
2017-08-02 03:28:23,404:ERROR:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.16.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 743, in main
    return config.func(config, plugins)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 598, in run
    certname, lineage)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 77, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3.6/site-packages/certbot/renewal.py", line 297, in renew_cert
    new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 335, in obtain_certificate
    domains, csr, authzr=authzr)
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 277, in obtain_certificate_from_csr
    authzr)
  File "/usr/lib/python3.6/site-packages/acme/client.py", line 313, in request_issuance
    headers={'Accept': content_type})
  File "/usr/lib/python3.6/site-packages/acme/client.py", line 682, in post
    return self._post_once(*args, **kwargs)
  File "/usr/lib/python3.6/site-packages/acme/client.py", line 695, in _post_once
    return self._check_response(response, content_type=content_type)
  File "/usr/lib/python3.6/site-packages/acme/client.py", line 582, in _check_response
    raise messages.Error.from_json(jobj)
acme.messages.Error: urn:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new cert :: too many certificates already issued for exact set of domains: www.universal-genesis.net
25

Aha, that is a very different problem!

In terms of the “Too many requests”, can you try again now and then post the most recent log? That restriction lasts for one hour and is meant in part to stop automated processes from trying the same broken authentication method over and over again. After one hour, you’ll get a failure with the true underlying cause explained.

26

command

certbot --apache

Result

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Which names would you like to activate HTTPS for?
-------------------------------------------------------------------------------
1: domain1.com
2: www.domain1.com
3: vps429820.ovh.net
4: universal-genesis.net
5: www.universal-genesis.net
-------------------------------------------------------------------------------
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 4
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for universal-genesis.net
Waiting for verification...
Cleaning up challenges
Could not reverse map the HTTPS VirtualHost to the original

IMPORTANT NOTES:
 - Unable to install the certificate
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/universal-genesis.net-0001/fullchain.pem.
   Your cert will expire on 2017-11-01. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot again
   with the "certonly" option. To non-interactively renew *all* of
   your certificates, run "certbot renew"

Logs

2017-08-03 12:26:24,304:DEBUG:certbot.main:certbot version: 0.16.0
2017-08-03 12:26:24,305:DEBUG:certbot.main:Arguments: ['--apache']
2017-08-03 12:26:24,305:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2017-08-03 12:26:24,322:DEBUG:certbot.log:Root logging level set at 20
2017-08-03 12:26:24,322:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-08-03 12:26:24,324:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2017-08-03 12:26:24,465:DEBUG:certbot_apache.configurator:Apache version is 2.4.27
2017-08-03 12:26:24,714:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin - Beta
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7fe65039fb38>
Prep: True
2017-08-03 12:26:24,715:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x7fe65039fb38> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x7fe65039fb38>
2017-08-03 12:26:24,721:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fe648459c18>)>), contact=('mailto:universal.g3nesis@gmail.com',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None), uri='https://acme-v01.api.letsencrypt.org/acme/reg/19247348', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 0472694bd7b6eaee61322065fe4cc582, Meta(creation_dt=datetime.datetime(2017, 7, 27, 19, 20, 39, tzinfo=<UTC>), creation_host='vps429820.ovh.net'))>
2017-08-03 12:26:24,723:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2017-08-03 12:26:24,727:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-08-03 12:26:24,983:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 352
2017-08-03 12:26:24,984:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 352
Boulder-Request-Id: jLvRtDzitu85kSkY--ZHJe0Fm9W92VtDwNJdI5Oyvgg
Replay-Nonce: nbdogDW25-p11RgYF6-mJVk44s23mOTfnkDPbBXpi3s
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Thu, 03 Aug 2017 12:26:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:22 GMT
Connection: keep-alive

b'{\n  "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",\n  "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n  "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n  "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n  "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2017-08-03 12:26:24,986:DEBUG:certbot.util:Not suggesting name "ug"
2017-08-03 12:26:24,986:DEBUG:certbot.util:ug needs at least two labels
2017-08-03 12:26:24,986:DEBUG:certbot.util:Not suggesting name "vps429820.ovh.net:443"
2017-08-03 12:26:24,986:DEBUG:certbot.util:vps429820.ovh.net:443 contains an invalid character. Valid characters are A-Z, a-z, 0-9, ., and -.
2017-08-03 12:26:29,293:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/universal-genesis.net.conf is broken. Skipping.
2017-08-03 12:26:29,295:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/universal-genesis.net/cert.pem to be a symlink

2017-08-03 12:26:29,297:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/www.universal-genesis.net.conf is broken. Skipping.
2017-08-03 12:26:29,298:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/cert_manager.py", line 248, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 412, in __init__
    self._check_symlinks()
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 471, in _check_symlinks
    "expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/www.universal-genesis.net/cert.pem to be a symlink

2017-08-03 12:26:29,298:INFO:certbot.main:Obtaining a new certificate
2017-08-03 12:26:29,298:DEBUG:acme.client:Requesting fresh nonce
2017-08-03 12:26:29,298:DEBUG:acme.client:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz.
2017-08-03 12:26:29,506:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "HEAD /acme/new-authz HTTP/1.1" 405 0
2017-08-03 12:26:29,507:DEBUG:acme.client:Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 91
Allow: POST
Boulder-Request-Id: buA90NBMMruJKMP6ZCYQRAi2OG6uQWPds_g8jwAu12s
Replay-Nonce: sJa7vH17q2cwJvKaIbxNZQZuiqRHAF6BFrnDwluEm0M
Expires: Thu, 03 Aug 2017 12:26:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:27 GMT
Connection: keep-alive

b''
2017-08-03 12:26:29,507:DEBUG:acme.client:Storing nonce: sJa7vH17q2cwJvKaIbxNZQZuiqRHAF6BFrnDwluEm0M
2017-08-03 12:26:29,507:DEBUG:acme.client:JWS payload:
b'{\n  "identifier": {\n    "type": "dns",\n    "value": "universal-genesis.net"\n  },\n  "resource": "new-authz"\n}'
2017-08-03 12:26:29,511:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
{
  "protected": "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",
  "signature": "t6pTLkF8RHxyvB-KslutlcC2Dv_FKE79PljW1u1elXiLt5beVZByzyhtVsu2zdDVZqxmjJI4dAn-4iCJDoQHQQdiexfWXmDyz5OmpFhYnXfUz4WDKE7YG-OXqLvroRIXKT7UKPlOZ7LBIMFrnTiFsKloPqhpFw6GwPyO_7usezCHulaeXLyhFTTQCOvYzDJjokg-LNWUBX9l3iNBpdGnw9WwuSVGiqmBi-QNn51-p017j2TylQ18Xy3MTcN6Z8F1KvySlhhIrBf0Od38SP0pMorGb2DpSb_OZTx2-ZAplZY-IFLNRd9Cs49u-opHBOqZyr7YDU-vjvU51Z22ORFNpA",
  "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwKICAgICJ2YWx1ZSI6ICJ1bml2ZXJzYWwtZ2VuZXNpcy5uZXQiCiAgfSwKICAicmVzb3VyY2UiOiAibmV3LWF1dGh6Igp9"
}
2017-08-03 12:26:29,716:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 201 1478
2017-08-03 12:26:29,717:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Content-Type: application/json
Content-Length: 1478
Boulder-Request-Id: q7wZfZnA2eWlDejZ554XGcPGzQ_igRuZAUKKKWGNcLA
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-v01.api.letsencrypt.org/acme/authz/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0
Replay-Nonce: ORAAEBapUU64v2r7g0GEf4ih2YPZMcah9K5ddewCtYw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Thu, 03 Aug 2017 12:26:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:27 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-30T20:44:20Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904841",\n      "token": "uJl6OmFizrNB6SZxPyua3G8XvAWtsJK0XxPOtJOCMlo"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842",\n      "token": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08",\n      "keyAuthorization": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904843",\n      "token": "ZkWsZDK2zUR8HHCNvCW-jCLShk6R-vB5561rYFRm6sQ"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      1\n    ],\n    [\n      0\n    ]\n  ]\n}'
2017-08-03 12:26:29,717:DEBUG:acme.client:Storing nonce: ORAAEBapUU64v2r7g0GEf4ih2YPZMcah9K5ddewCtYw
2017-08-03 12:26:29,718:INFO:certbot.auth_handler:Performing the following challenges:
2017-08-03 12:26:29,718:INFO:certbot.auth_handler:tls-sni-01 challenge for universal-genesis.net
2017-08-03 12:26:29,981:DEBUG:certbot_apache.tls_sni_01:Adding Include /etc/httpd/conf/le_tls_sni_01_cert_challenge.conf to /files/etc/httpd/conf/httpd.conf
2017-08-03 12:26:29,982:DEBUG:certbot_apache.tls_sni_01:writing a config file with text:
 <IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName dcbfa25a214772671672c9ab1d903125.980065278106b987cc2122b6a6315ea1.acme.invalid
    UseCanonicalName on
    SSLStrictSNIVHostCheck on

    LimitRequestBody 1048576

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /var/lib/letsencrypt/99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.crt
    SSLCertificateKeyFile /var/lib/letsencrypt/99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.pem

    DocumentRoot /var/lib/letsencrypt/tls_sni_01_page/
</VirtualHost>

</IfModule>

2017-08-03 12:26:30,019:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf/httpd.conf
2017-08-03 12:26:33,166:INFO:certbot.auth_handler:Waiting for verification...
2017-08-03 12:26:33,167:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "challenge",\n  "keyAuthorization": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "type": "tls-sni-01"\n}'
2017-08-03 12:26:33,170:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842:
{
  "protected": "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",
  "signature": "JeajmRUuV_tM9lX2mV2uD8dUKMf2kiFwl2AtA6l2exT5nUZEIS2oP_xdjeeCzCA49_JmPGedHovDPI1og-7QwwOzVvlsQpOoPyTeThquqCY2GlPualc1ABaEjyO8sNXSop09qYfwX_WHMjTX8-_7PjRoHBm3DqEtRknHa4BasRAoc-h67wwI-Hj8iK15BswNeuz79e2NQyYAORlqPaHtHl5AIOPdZ5G6XXXMDM0MI_zn6boEXsAHd30FI_Xbf00A_hsvhi3tfgvVcuRALxxSE-B1qGdjkc_MtK7QAPsTsXSUnGd-m3YZE5HRDJTbV6hITJZQujTz2luWi6FiYXrWVg",
  "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJrZXlBdXRob3JpemF0aW9uIjogIjk5enVlcGpKOHpGZDlOejE3d0xmbVhMOWdwQnR6Y1dmMmYxUm1CaVR0MDguUGJTZ1hwei1NR2g1WXRaWW9ZWnRqejQwa1Qyd2h6VklTRmIxVlFlcEhubyIsCiAgInR5cGUiOiAidGxzLXNuaS0wMSIKfQ"
}
2017-08-03 12:26:33,383:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842 HTTP/1.1" 202 647
2017-08-03 12:26:33,384:DEBUG:acme.client:Received response:
HTTP 202
Server: nginx
Content-Type: application/json
Content-Length: 647
Boulder-Request-Id: IiuSCoToX5V9S4AXJyr1u9bhwDWmCcRixlKRB5GPKOE
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/authz/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0>;rel="up"
Location: https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842
Replay-Nonce: G6t1jV3SbOOVyKOok-Qoe5R1dQKTtxy2tWU3wd1b6Ik
Expires: Thu, 03 Aug 2017 12:26:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:31 GMT
Connection: keep-alive

b'{\n  "type": "tls-sni-01",\n  "status": "valid",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842",\n  "token": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08",\n  "keyAuthorization": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n  "validationRecord": [\n    {\n      "hostname": "universal-genesis.net",\n      "port": "443",\n      "addressesResolved": [\n        "51.254.117.51",\n        "2001:41d0:401:3100::7917"\n      ],\n      "addressUsed": "51.254.117.51",\n      "addressesTried": [\n        "2001:41d0:401:3100::7917"\n      ]\n    }\n  ]\n}'
2017-08-03 12:26:33,384:DEBUG:acme.client:Storing nonce: G6t1jV3SbOOVyKOok-Qoe5R1dQKTtxy2tWU3wd1b6Ik
2017-08-03 12:26:36,388:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0.
2017-08-03 12:26:36,599:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /acme/authz/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0 HTTP/1.1" 200 1478
2017-08-03 12:26:36,600:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 1478
Boulder-Request-Id: t8SkocYPCazQHJE3ji6tmSUa3UzUN6mHg29sPBK_Ufw
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Replay-Nonce: 6uzaTODOlglUDAk1f0fK6XkT9tA6KhaH6dE2b1Fb2mE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Thu, 03 Aug 2017 12:26:34 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:34 GMT
Connection: keep-alive

b'{\n  "identifier": {\n    "type": "dns",\n    "value": "universal-genesis.net"\n  },\n  "status": "valid",\n  "expires": "2017-08-30T20:44:20Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904841",\n      "token": "uJl6OmFizrNB6SZxPyua3G8XvAWtsJK0XxPOtJOCMlo"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "valid",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904842",\n      "token": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08",\n      "keyAuthorization": "99zuepjJ8zFd9Nz17wLfmXL9gpBtzcWf2f1RmBiTt08.PbSgXpz-MGh5YtZYoYZtjz40kT2whzVISFb1VQepHno",\n      "validationRecord": [\n        {\n          "hostname": "universal-genesis.net",\n          "port": "443",\n          "addressesResolved": [\n            "51.254.117.51",\n            "2001:41d0:401:3100::7917"\n          ],\n          "addressUsed": "51.254.117.51",\n          "addressesTried": [\n            "2001:41d0:401:3100::7917"\n          ]\n        }\n      ]\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/Iu2Cv205oMjAHeIg0trhSjLFUa4tfjPwaGscL-OSGC0/1655904843",\n      "token": "ZkWsZDK2zUR8HHCNvCW-jCLShk6R-vB5561rYFRm6sQ"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      1\n    ],\n    [\n      0\n    ]\n  ]\n}'
2017-08-03 12:26:36,602:INFO:certbot.auth_handler:Cleaning up challenges
2017-08-03 12:26:36,921:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0011_key-certbot.pem
2017-08-03 12:26:36,924:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0011_csr-certbot.pem
2017-08-03 12:26:36,924:DEBUG:certbot.client:CSR: CSR(file='/etc/letsencrypt/csr/0011_csr-certbot.pem', data=b'-----BEGIN CERTIFICATE REQUEST-----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\nJdbr7962Cew5CcKU\n-----END CERTIFICATE REQUEST-----\n', form='pem'), domains: ['universal-genesis.net']
2017-08-03 12:26:36,924:DEBUG:acme.client:Requesting issuance...
2017-08-03 12:26:36,925:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "new-cert",\n  "csr": "MIICeDCCAWACAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKXmYXIRf0EOctVZ6mNgkJRe45LkS9ibNy4B2tOCK2yB-ellYQGAs-R5ZTk_iIQ_-o_j5-rI32RSZV9Fbi954xGrhVXBmU3PB1zfPsEEhVxiJ49zEKgQS7MebE7UF9fjJrjXsGjLfPTqNhHkPTIt8cipQ_UVUoBjGQYZR7-fUwZ5WHTshEPzdpXT6XbX8I2wlJu__9uqOBtodBs1JEoNgLvWKj9ZhndDAFqyb-iwa6wtw2fVFOBuCCLuta_EzLBNez1RixeHOgQNSmX71pWd8n4_ZOby5IfhLvLlyyTRytZM-V9t_gTRwxmB9PoK2VQJHUNdyPpV7Z7lP8bPdEP-NYcCAwEAAaAzMDEGCSqGSIb3DQEJDjEkMCIwIAYDVR0RBBkwF4IVdW5pdmVyc2FsLWdlbmVzaXMubmV0MA0GCSqGSIb3DQEBCwUAA4IBAQBZZ2Ob_0IH90aryiNxPegvxLCzfdIHgsjO3awbopB0w0ldMyOE7g0s5qsAu-HSoug1PouPx8OQV8waZ1XBBV_ioJfNcyAyBFMs-AblpqwrOUDi319Bjav88Y4ETUr0hfdooqYL10RCePTVnFTcerxS_u8t7THmSEl0xh4BnYrc0Esk5a95Qo2sG5Yq-oqvPAcA7KOmZr5unufBJzkFv31uxWFwzdmUhlI8yGMK2qln9HEw-jnuVWfPnteY3qdxwqRur4VFbuBVzKShQN3_UCgzG5n-eHS94j5GuyOpGpk2gvhvqe9QvEUp2blU1-NLCLcMcvWiJdbr7962Cew5CcKU"\n}'
2017-08-03 12:26:36,927:DEBUG:acme.client:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert:
{
  "protected": "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",
  "signature": "cm9ce3Tev2GtqDm69QMOG1niOoBeRjHILGCNEGbKUeR_jHy83SVXjmQmwGhyt5LmFWByxBuC5QpazCXDj08HLcRsHiRSdxOicyz_o72ECeEHm6_bupbHqiqLMrk-N_7s3Z9EoMu6CCpK9HhljH0RQqBM-8BVfnWHxOQ8sFEQzBRuSK2z21v9cLkPngAgcpdFG6-hlXpT-a5Z0slX7AKvycVy2Hnwyx7CkJG90FwFEWg7L00G5QZAiFe_fc6YQ9XsBOCssZX-h6h4Cdl2I6u7VRspzOqj96xHRiMj1chONN9LRZGtFVTrgAl9BlVJasomACLGno-jha2Vi_cWWnIKVw",
  "payload": "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"
}
2017-08-03 12:26:37,194:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-cert HTTP/1.1" 201 1297
2017-08-03 12:26:37,195:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Content-Type: application/pkix-cert
Content-Length: 1297
Boulder-Request-Id: emoEIT_iYJh3kCT2P12Cgqq0Scw9d4noE9xNucRX2dg
Boulder-Requester: 19247348
Link: <https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"
Location: https://acme-v01.api.letsencrypt.org/acme/cert/03a06e5c757f040c7ee20038d465d7c0c1bc
Replay-Nonce: YYyRooN0Yldv2DdVcQKx-59FxPWPYEVovpntPN2i9Y8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Thu, 03 Aug 2017 12:26:34 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:34 GMT
Connection: keep-alive

b'MIIFDTCCA/WgAwIBAgISA6BuXHV/BAx+4gA41GXXwMG8MA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MDMxMTI3MDBaFw0xNzExMDExMTI3MDBaMCAxHjAcBgNVBAMTFXVuaXZlcnNhbC1nZW5lc2lzLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKXmYXIRf0EOctVZ6mNgkJRe45LkS9ibNy4B2tOCK2yB+ellYQGAs+R5ZTk/iIQ/+o/j5+rI32RSZV9Fbi954xGrhVXBmU3PB1zfPsEEhVxiJ49zEKgQS7MebE7UF9fjJrjXsGjLfPTqNhHkPTIt8cipQ/UVUoBjGQYZR7+fUwZ5WHTshEPzdpXT6XbX8I2wlJu//9uqOBtodBs1JEoNgLvWKj9ZhndDAFqyb+iwa6wtw2fVFOBuCCLuta/EzLBNez1RixeHOgQNSmX71pWd8n4/ZOby5IfhLvLlyyTRytZM+V9t/gTRwxmB9PoK2VQJHUNdyPpV7Z7lP8bPdEP+NYcCAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwX4NkPUaG40QjtCcDDqeDMT4RPYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAgBgNVHREEGTAXghV1bml2ZXJzYWwtZ2VuZXNpcy5uZXQwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAjYUjczv3QU40ZNK9rXXYebTiBnXKvSwMlo4kyAKKN6pSmE2X4gAiABqG60adLR7oG8bXOkgOWIBZKOpM5ZPLKnbvWe5ypgm5S/OHvyqxN75tHlatZqFkIv93hU7mTNu50qk72cRub5VIEsxIOcWc+pN8IBxbVm1AH2hrRtcbjXitBgp/XhWGA694TdO0UPv9EVlAXAS13d11Ib4IztVnR/1UmNoFywgI2O7qSs0fVLMUmy8IaI1d6HXp35z7Q7tb0UWMNHg9obMA5ec8euBpXfaHNYaRv5LsPXqmkHLTcimEsMRR/IAIZO+irHV1rE69kE9ayu5RMA2aDrlgI0xLfw=='
2017-08-03 12:26:37,195:DEBUG:acme.client:Storing nonce: YYyRooN0Yldv2DdVcQKx-59FxPWPYEVovpntPN2i9Y8
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:SHIFT_JIS Japanese prober hit error at byte 2
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:EUC-JP Japanese prober hit error at byte 1
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:GB2312 Chinese prober hit error at byte 2
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:EUC-KR Korean prober hit error at byte 1
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:CP949 Korean prober hit error at byte 2
2017-08-03 12:26:37,198:DEBUG:chardet.charsetprober:Big5 Chinese prober hit error at byte 1
2017-08-03 12:26:37,199:DEBUG:chardet.charsetprober:EUC-TW Taiwan prober hit error at byte 1
2017-08-03 12:26:37,215:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.05892586297559473
2017-08-03 12:26:37,215:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0290946448441999
2017-08-03 12:26:37,215:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.03612356856345754
2017-08-03 12:26:37,215:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.047366840092689384
2017-08-03 12:26:37,215:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.04664964152234583
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.05986703995367715
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.04030739490997621
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.039767389425450314
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.03132634149610265
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.056482422756302296
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02097309757948963
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.2852058690262417
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.0
2017-08-03 12:26:37,216:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.0380668294619864
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.06090692713917822
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.05892586297559473
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0290946448441999
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.03612356856345754
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.047366840092689384
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.04664964152234583
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.05986703995367715
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.04030739490997621
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.039767389425450314
2017-08-03 12:26:37,217:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.03132634149610265
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.056482422756302296
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02097309757948963
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.2852058690262417
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.0
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.0380668294619864
2017-08-03 12:26:37,218:DEBUG:chardet.charsetprober:ISO-8859-8 Hebrew confidence = 0.06090692713917822
2017-08-03 12:26:37,221:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/issuer-cert.
2017-08-03 12:26:37,410:DEBUG:urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /acme/issuer-cert HTTP/1.1" 200 1174
2017-08-03 12:26:37,411:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/pkix-cert
Content-Length: 1174
Boulder-Request-Id: aVViqeF7bKfdhDk_K9yQTvQQqjmj50pook4pmuTPv6k
Replay-Nonce: GPDotM4ZVUgOCEkEnP9iOnqKBCVeYKSJzwb47ewqYck
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Thu, 03 Aug 2017 12:26:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 03 Aug 2017 12:26:35 GMT
Connection: keep-alive
27

logs part 2

b'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'
2017-08-03 12:26:37,411:DEBUG:chardet.charsetprober:SHIFT_JIS Japanese prober hit error at byte 2
2017-08-03 12:26:37,411:DEBUG:chardet.charsetprober:EUC-JP Japanese prober hit error at byte 1
2017-08-03 12:26:37,412:DEBUG:chardet.charsetprober:GB2312 Chinese prober hit error at byte 2
2017-08-03 12:26:37,412:DEBUG:chardet.charsetprober:EUC-KR Korean prober hit error at byte 1
2017-08-03 12:26:37,412:DEBUG:chardet.charsetprober:CP949 Korean prober hit error at byte 2
2017-08-03 12:26:37,412:DEBUG:chardet.charsetprober:Big5 Chinese prober hit error at byte 1
2017-08-03 12:26:37,412:DEBUG:chardet.charsetprober:EUC-TW Taiwan prober hit error at byte 1
2017-08-03 12:26:37,419:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.04025180677792795
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.02918497978583681
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.04514191986865063
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.05157078240745495
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.027529907939475486
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.12189915743514936
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.1323781201284265
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.037557321486345316
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.043096077988372
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02568934298576919
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.23832112651927498
2017-08-03 12:26:37,420:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.050703173091617086
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.04056253847329366
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:windows-1251 Russian confidence = 0.04025180677792795
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:KOI8-R Russian confidence = 0.0
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:ISO-8859-5 Russian confidence = 0.02918497978583681
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:MacCyrillic Russian confidence = 0.04514191986865063
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:IBM866 Russian confidence = 0.05157078240745495
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:IBM855 Russian confidence = 0.027529907939475486
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:ISO-8859-7 Greek confidence = 0.12189915743514936
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:windows-1253 Greek confidence = 0.1323781201284265
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:ISO-8859-5 Bulgairan confidence = 0.037557321486345316
2017-08-03 12:26:37,421:DEBUG:chardet.charsetprober:windows-1251 Bulgarian confidence = 0.043096077988372
2017-08-03 12:26:37,422:DEBUG:chardet.charsetprober:TIS-620 Thai confidence = 0.02568934298576919
2017-08-03 12:26:37,422:DEBUG:chardet.charsetprober:ISO-8859-9 Turkish confidence = 0.23832112651927498
2017-08-03 12:26:37,422:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.0
2017-08-03 12:26:37,422:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.050703173091617086
2017-08-03 12:26:37,422:DEBUG:chardet.charsetprober:windows-1255 Hebrew confidence = 0.04056253847329366
2017-08-03 12:26:37,423:DEBUG:certbot.storage:Archive directory /etc/letsencrypt/archive/universal-genesis.net-0001 and live directory /etc/letsencrypt/live/universal-genesis.net-0001 created.
2017-08-03 12:26:37,424:DEBUG:certbot.storage:Writing certificate to /etc/letsencrypt/live/universal-genesis.net-0001/cert.pem.
2017-08-03 12:26:37,424:DEBUG:certbot.storage:Writing private key to /etc/letsencrypt/live/universal-genesis.net-0001/privkey.pem.
2017-08-03 12:26:37,424:DEBUG:certbot.storage:Writing chain to /etc/letsencrypt/live/universal-genesis.net-0001/chain.pem.
2017-08-03 12:26:37,424:DEBUG:certbot.storage:Writing full chain to /etc/letsencrypt/live/universal-genesis.net-0001/fullchain.pem.
2017-08-03 12:26:37,425:DEBUG:certbot.storage:Writing README to /etc/letsencrypt/live/universal-genesis.net-0001/README.
2017-08-03 12:26:37,706:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2017-08-03 12:26:37,707:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7fe6450e8f60>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7fe6450e8eb8>, apache=True, apache_challenge_location=<certbot.cli._Default object at 0x7fe64507bd30>, apache_ctl=<certbot.cli._Default object at 0x7fe64507b6a0>, apache_dismod=<certbot.cli._Default object at 0x7fe64507b8d0>, apache_enmod=<certbot.cli._Default object at 0x7fe64507b7f0>, apache_handle_modules=<certbot.cli._Default object at 0x7fe64507be10>, apache_handle_sites=<certbot.cli._Default object at 0x7fe64507bef0>, apache_init_script=<certbot.cli._Default object at 0x7fe64507bf60>, apache_le_vhost_ext=<certbot.cli._Default object at 0x7fe64507b9b0>, apache_logs_root=<certbot.cli._Default object at 0x7fe64507bc50>, apache_server_root=<certbot.cli._Default object at 0x7fe64507ba90>, apache_vhost_root=<certbot.cli._Default object at 0x7fe64507bb70>, authenticator='apache', break_my_certs=<certbot.cli._Default object at 0x7fe6450724a8>, cert_path=<certbot.cli._Default object at 0x7fe645074e10>, certname=<certbot.cli._Default object at 0x7fe6450e83c8>, chain_path=<certbot.cli._Default object at 0x7fe6450770f0>, checkpoints=<certbot.cli._Default object at 0x7fe645074940>, config_dir=<certbot.cli._Default object at 0x7fe6450771d0>, config_file=None, configurator=<certbot.cli._Default object at 0x7fe645077588>, csr=<certbot.cli._Default object at 0x7fe645074748>, debug=<certbot.cli._Default object at 0x7fe6450e8198>, debug_challenges=<certbot.cli._Default object at 0x7fe648448ba8>, dialog=None, dns_cloudflare=<certbot.cli._Default object at 0x7fe645077d68>, dns_cloudxns=<certbot.cli._Default object at 0x7fe645077e48>, dns_digitalocean=<certbot.cli._Default object at 0x7fe645077f28>, dns_dnsimple=<certbot.cli._Default object at 0x7fe64507b048>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7fe64507b128>, dns_google=<certbot.cli._Default object at 0x7fe64507b208>, dns_luadns=<certbot.cli._Default object at 0x7fe64507b2e8>, dns_nsone=<certbot.cli._Default object at 0x7fe64507b3c8>, dns_rfc2136=<certbot.cli._Default object at 0x7fe64507b4a8>, dns_route53=<certbot.cli._Default object at 0x7fe64507b588>, domains=<certbot.cli._Default object at 0x7fe6450e82e8>, dry_run=<certbot.cli._Default object at 0x7fe6450e84a8>, duplicate=<certbot.cli._Default object at 0x7fe6450e8c88>, eff_email=<certbot.cli._Default object at 0x7fe6450e8860>, email=<certbot.cli._Default object at 0x7fe6450e8748>, expand=<certbot.cli._Default object at 0x7fe6450e8b00>, force_interactive=<certbot.cli._Default object at 0x7fe6450e8208>, fullchain_path=<certbot.cli._Default object at 0x7fe645074fd0>, func=<function run at 0x7fe6488f3158>, hsts=<certbot.cli._Default object at 0x7fe645072908>, http01_address=<certbot.cli._Default object at 0x7fe6450723c8>, http01_port=<certbot.cli._Default object at 0x7fe6450722e8>, ifaces=<certbot.cli._Default object at 0x7fe645074c50>, init=<certbot.cli._Default object at 0x7fe645074a20>, installer='apache', key_path=<certbot.cli._Default object at 0x7fe645074ef0>, logs_dir=<certbot.cli._Default object at 0x7fe645077390>, manual=<certbot.cli._Default object at 0x7fe645077b38>, manual_auth_hook=<certbot.cli._Default object at 0x7fe64507b668>, manual_cleanup_hook=<certbot.cli._Default object at 0x7fe645080160>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7fe645080240>, must_staple=<certbot.cli._Default object at 0x7fe645072668>, nginx=<certbot.cli._Default object at 0x7fe645077940>, no_bootstrap=<certbot.cli._Default object at 0x7fe6450e86d8>, no_self_upgrade=<certbot.cli._Default object at 0x7fe6450e88d0>, no_verify_ssl=<certbot.cli._Default object at 0x7fe648465c50>, noninteractive_mode=<certbot.cli._Default object at 0x7fe6450e8128>, num=<certbot.cli._Default object at 0x7fe645074550>, os_packages_only=<certbot.cli._Default object at 0x7fe6450e8a90>, post_hook=<certbot.cli._Default object at 0x7fe645074128>, pre_hook=<certbot.cli._Default object at 0x7fe645074048>, pref_challs=<certbot.cli._Default object at 0x7fe645072f28>, prepare=<certbot.cli._Default object at 0x7fe645074b38>, quiet=<certbot.cli._Default object at 0x7fe6450e8518>, reason=<certbot.cli._Default object at 0x7fe645074860>, redirect=<certbot.cli._Default object at 0x7fe645072748>, register_unsafely_without_email=<certbot.cli._Default object at 0x7fe6450e8588>, reinstall=<certbot.cli._Default object at 0x7fe6450e8a20>, renew_by_default=<certbot.cli._Default object at 0x7fe6450e8cf8>, renew_hook=<certbot.cli._Default object at 0x7fe645074208>, renew_with_new_domains=<certbot.cli._Default object at 0x7fe6450e8dd8>, rsa_key_size=<certbot.cli._Default object at 0x7fe645072588>, server=<certbot.cli._Default object at 0x7fe645077470>, staging=<certbot.cli._Default object at 0x7fe6450e8358>, standalone=<certbot.cli._Default object at 0x7fe645077a58>, standalone_supported_challenges=<certbot.cli._Default object at 0x7fe645080320>, staple=<certbot.cli._Default object at 0x7fe645072c88>, strict_permissions=<certbot.cli._Default object at 0x7fe645072e48>, text_mode=<certbot.cli._Default object at 0x7fe6450e8048>, tls_sni_01_address=<certbot.cli._Default object at 0x7fe645072208>, tls_sni_01_port=<certbot.cli._Default object at 0x7fe645072128>, tos=<certbot.cli._Default object at 0x7fe6450e8f98>, uir=<certbot.cli._Default object at 0x7fe645072ac8>, update_registration=<certbot.cli._Default object at 0x7fe6450e8668>, user_agent=<certbot.cli._Default object at 0x7fe645074668>, validate_hooks=<certbot.cli._Default object at 0x7fe6450742e8>, verb='run', verbose_count=<certbot.cli._Default object at 0x7fe648448cc0>, webroot=<certbot.cli._Default object at 0x7fe645077c50>, webroot_map=<certbot.cli._Default object at 0x7fe6450804e0>, webroot_path=<certbot.cli._Default object at 0x7fe645080080>, work_dir=<certbot.cli._Default object at 0x7fe6450772b0>)
2017-08-03 12:26:38,929:DEBUG:certbot.storage:Writing new config /etc/letsencrypt/renewal/universal-genesis.net-0001.conf.
2017-08-03 12:26:38,931:DEBUG:certbot.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/universal-genesis.net-0001/fullchain.pem. Your cert will expire on 2017-11-01. To obtain a new or tweaked version of this certificate in the future, simply run certbot again with the "certonly" option. To non-interactively renew *all* of your certificates, run "certbot renew"
2017-08-03 12:26:38,942:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 451, in deploy_certificate
    fullchain_path=fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 245, in deploy_cert
    vhost = self.choose_vhost(domain)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 337, in choose_vhost
    vhost = self.make_vhost_ssl(vhost)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 861, in make_vhost_ssl
    "Could not reverse map the HTTPS VirtualHost to the original")
certbot.errors.PluginError: Could not reverse map the HTTPS VirtualHost to the original

2017-08-03 12:26:38,942:DEBUG:certbot.error_handler:Calling registered functions
2017-08-03 12:26:38,943:DEBUG:certbot.reporter:Reporting to user: Unable to install the certificate
2017-08-03 12:26:38,943:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.16.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 743, in main
    return config.func(config, plugins)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 604, in run
    _install_cert(config, le_client, domains, new_lineage)
  File "/usr/lib/python3.6/site-packages/certbot/main.py", line 469, in _install_cert
    path_provider.cert_path, path_provider.chain_path, path_provider.fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot/client.py", line 451, in deploy_certificate
    fullchain_path=fullchain_path)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 245, in deploy_cert
    vhost = self.choose_vhost(domain)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 337, in choose_vhost
    vhost = self.make_vhost_ssl(vhost)
  File "/usr/lib/python3.6/site-packages/certbot_apache/configurator.py", line 861, in make_vhost_ssl
    "Could not reverse map the HTTPS VirtualHost to the original")
certbot.errors.PluginError: Could not reverse map the HTTPS VirtualHost to the original

certbot.errors.PluginError: Could not reverse map the HTTPS VirtualHost to the original

28

Well, we’re making some progress understanding what’s going wrong!

@bmw, could you take a look at this situation? It looks like a certificate is successfully obtained with --apache, and then it crashes in the Apache installer with “Could not reverse map the HTTPS VirtualHost to the original”. It’s 0.16.0.

29

@Redgard, can you provide a copy of your Apache vitual host for universal-genesis.net?

30

@bmw what do you mean? the apache log? the configuraton?

31

The configuration, which should most likely be found in the /etc/apache2/sites-available directory.

32

here two configuration files:

  • /etc/httpd/conf/httpd.conf
  • /etc/httpd/conf/wpsite/wpunigen.conf

Link removed

33

@Redgard, unfortunately I think you’ve hit a known problem in our Apache plugin documented here. I’ve verified that we have an in progress branch of Certbot that fixes the issue, but it’s not ready yet.

In the mean time, I’d encourage you to use the webroot plugin and install the certificate yourself. In typical Arch Wiki fashion, they have a decent guide on this, but definitely don’t follow the step of using a self signed cert and instead use the cert and keys created by Certbot.

@schoen, as an aside, the reason a cert was able to be obtained is authz reuse! I didn’t notice it at first either, but if you look in the logs, the initial authz object returned from Let’s Encrypt already marks the requested domain as valid.

1 Like
34

Authz recycling in general shouldn’t prevent certbot from getting a cert, right? How did it impact this case?

35

@jsha, it didn’t prevent Certbot from getting a cert. It just looked like the Apache plugin was able to correctly modify the user’s webserver to obtain the cert but then failed to install it, however, I believe the only reason it was able to obtain a cert in the first place was authz reuse. If the challenge would have been checked, I expect it would have failed. Certainly not a problem, but not something that’s immediately clear unless you carefully look at Certbot’s logs.

1 Like
36

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.