@bmw, how can this happen? Shouldn't http-01 always be permitted, and always be supported by webroot?
http-01
webroot