Failed to authenticate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: max-server.org

I ran this command: cat /var/log/letsencrypt/letsencrypt.log \ certbot --apache

It produced this output:

2025-05-04 10:42:55,543:DEBUG:urllib3.connectionpool:http://localhost:None "GET /v2/connections?snap=certbot&interface=content HTTP/1.1" 200 97
2025-05-04 10:42:55,738:DEBUG:certbot._internal.main:certbot version: 4.0.0
2025-05-04 10:42:55,738:DEBUG:certbot._internal.main:Location of certbot entry point: /snap/certbot/4557/bin/certbot
2025-05-04 10:42:55,739:DEBUG:certbot._internal.main:Arguments: ['--apache', '--preconfigured-renewal']
2025-05-04 10:42:55,739:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2025-05-04 10:42:55,752:DEBUG:certbot._internal.log:Root logging level set at 30
2025-05-04 10:42:55,753:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2025-05-04 10:42:55,902:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.52
2025-05-04 10:42:56,301:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: EntryPoint(name='apache', value='certbot_apache._internal.entrypoint:ENTRYPOINT', group='certbot.plugins')
Initialized: <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7fdb0fc6c980>
Prep: True
2025-05-04 10:42:56,301:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7fdb0fc6c980> and installer <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7fdb0fc6c980>
2025-05-04 10:42:56,301:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2025-05-04 10:42:56,348:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/2378698287', new_authzr_uri=None, terms_of_service=None), a51feeec45edcc085794dbd7e0acac62, Meta(creation_dt=datetime.datetime(2025, 5, 4, 10, 9, 35, tzinfo=datetime.timezone.utc), creation_host='ml-linux.01.domain-controller.net', register_to_eff=None))>
2025-05-04 10:42:56,349:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2025-05-04 10:42:56,351:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2025-05-04 10:42:56,731:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1012
2025-05-04 10:42:56,732:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:42:56 GMT
Content-Type: application/json
Content-Length: 1012
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "D7PFPVFKN6o": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "profiles": {
      "classic": "https://letsencrypt.org/docs/profiles#classic",
      "shortlived": "https://letsencrypt.org/docs/profiles#shortlived (not yet generally available)",
      "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
    },
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.5-February-24-2025.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2025-05-04 10:43:11,083:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for openvpn.max-server.org and 2 more domains
2025-05-04 10:43:11,086:DEBUG:acme.client:Requesting fresh nonce
2025-05-04 10:43:11,086:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2025-05-04 10:43:11,205:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2025-05-04 10:43:11,205:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:11 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqkLm9LJ2ettoukXrBWfJIVnraitoZ1-t-7q81tr6SWvo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2025-05-04 10:43:11,205:DEBUG:acme.client:Storing nonce: h1GQmuVqkLm9LJ2ettoukXrBWfJIVnraitoZ1-t-7q81tr6SWvo
2025-05-04 10:43:11,206:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "openvpn.max-server.org"\n    },\n    {\n      "type": "dns",\n      "value": "www.max-server.org"\n    },\n    {\n      "type": "dns",\n      "value": "max-server.org"\n    }\n  ]\n}'
2025-05-04 10:43:11,208:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcWtMbTlMSjJldHRvdWtYckJXZkpJVm5yYWl0b1oxLXQtN3E4MXRyNlNXdm8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
  "signature": "tH7ORgjIQCvhZ9IqR_6PpbM1PK6P8BMWCilW20eGKGFVhmuEv-v-OfGIhTnuFe13m1J4wj72sDNjrWfub1Ejds9qZKcYaXSZgU_dLIp_jEpNmlMfcnIBCUYPrjKFeOgyJhSGDaPwPjwSmw0iwnXnUiXuIWjom5MwfNEBTaDeBLrfhyPhDcoJIL1j1uKcUWAXF20UOIKoBCAkhKQrlWQ3Br7MNjmAxhdD3Jf0T68iSkgnyBSgpmRQhVl6Jvn_QVcX10sR578nQ4k2hoSHxCCJj_cwbKr9aggxF0lxPtopJCurMc-kxfZ17uzPO6pDe0AiZRV71_zyV3uGXR9dEXEFsg",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm9wZW52cG4ubWF4LXNlcnZlci5vcmciCiAgICB9LAogICAgewogICAgICAidHlwZSI6ICJkbnMiLAogICAgICAidmFsdWUiOiAid3d3Lm1heC1zZXJ2ZXIub3JnIgogICAgfSwKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1heC1zZXJ2ZXIub3JnIgogICAgfQogIF0KfQ"
}
2025-05-04 10:43:11,540:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 650
2025-05-04 10:43:11,541:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 04 May 2025 10:43:11 GMT
Content-Type: application/json
Content-Length: 650
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/2378698287/380702661877
Replay-Nonce: h1GQmuVqBQlbdKU4eekKf1QEq7O5lCWLj8xnn2Li8Y1qiW2kIJ4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "max-server.org"
    },
    {
      "type": "dns",
      "value": "openvpn.max-server.org"
    },
    {
      "type": "dns",
      "value": "www.max-server.org"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117",
    "https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227",
    "https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2378698287/380702661877"
}
2025-05-04 10:43:11,541:DEBUG:acme.client:Storing nonce: h1GQmuVqBQlbdKU4eekKf1QEq7O5lCWLj8xnn2Li8Y1qiW2kIJ4
2025-05-04 10:43:11,541:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:11,543:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcUJRbGJkS1U0ZWVrS2YxUUVxN081bENXTGo4eG5uMkxpOFkxcWlXMmtJSjQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3In0",
  "signature": "Ey0vTsNuTp2Ojtlx-avXteMyZWDw6J9d_s2fw2nCYRVPK3GL1ujBU3geFK6hbVXSCfeBOTHkBqlcNxwMuj_OajovuUC5yBHvpo-9dsfjSK0f_c2JO_ch9EsZ_s_X1NtkQMveQn8BhJJp2nUPSFrwl1D2-IzapgWK_UqEZ6DTk-Vrdpx2loidrc67kdh8TKb3E4lVoXo4if1fp_eQ2rsMc5KAfLcF_DL97qiyqGhU0swTE1Ez3iHfHoGfC6ozBiLX_2MO1qC5uomlOruWtcVPtWIihvssS6Z6WQT1aHZ5xdAqkDbqnBIdIwVZrGRJQyNjG6lYgkzwzMfKftUzT1WpJQ",
  "payload": ""
}
2025-05-04 10:43:11,683:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380117 HTTP/1.1" 200 822
2025-05-04 10:43:11,683:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:11 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqo8xLtptJIE4P3uM_j3RRB_ntXFcceHty0EuC8uhJAFI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/u3UYZQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/brePMQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    }
  ]
}
2025-05-04 10:43:11,683:DEBUG:acme.client:Storing nonce: h1GQmuVqo8xLtptJIE4P3uM_j3RRB_ntXFcceHty0EuC8uhJAFI
2025-05-04 10:43:11,684:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:11,686:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcW84eEx0cHRKSUU0UDN1TV9qM1JSQl9udFhGY2NlSHR5MEV1Qzh1aEpBRkkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3In0",
  "signature": "KaJPbfT6Axwng_BJIiADQ4wCtB7_CAWDxVuK0XVwbwCPU1JeD1sygQ_NBv9GHdF0t9kRRzczF_eSmQTBxCEniukPYpkPexPOPWLFEIoSTIPH3tAF8GoDOasMo6SEE3beGdxB5hufFpVRLKLZlYKn5CmA_Atr1w-WcnT_U5tw1UL3IqJo8UYeSnTNqADT6SOs_-MNXZ0n4Lh8_oAHXEawJqiHAeJ_cqnbWRVBq5OVft1iPoAEYqkdgH0Ta28Qg2gJB71sBHWkn5a6V5ri6Vafab7R1eiWMzY8T47xb1yk-MXiI_r5A73uRPZF0BbxqE70Ejtyz5c2N4XpENEaplnCQg",
  "payload": ""
}
2025-05-04 10:43:11,814:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380227 HTTP/1.1" 200 830
2025-05-04 10:43:11,815:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:11 GMT
Content-Type: application/json
Content-Length: 830
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqY9bkjzBCymMDztTHqM-lfpyeZ0R9zvni4kTksvcal0g
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "openvpn.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/mm5fZw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/CsXkkw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    }
  ]
}
2025-05-04 10:43:11,815:DEBUG:acme.client:Storing nonce: h1GQmuVqY9bkjzBCymMDztTHqM-lfpyeZ0R9zvni4kTksvcal0g
2025-05-04 10:43:11,815:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:11,818:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcVk5YmtqekJDeW1NRHp0VEhxTS1sZnB5ZVowUjl6dm5pNGtUa3N2Y2FsMGciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3In0",
  "signature": "cNvo0SjgrHyodpn0PiU2wNP7oqgAkFN8bGwMlhSQNi5ylMWHP8H326zaprkNUXZst2xPFUDD8DE-LpKbOa80hTIo4fL1_QfTd6wcLaweQXoIuh6vE1ltUArJSJcc2w905WqJOGVCMVVSBoY4e9nTGDRlox37lP98WdRJuOOnGmIY3UUVK4XKm8v6cFGvSqa3wmXtLRq7tz9tyDI6WbNX0Hy_Y4K89qPWAVYECIo4Vuz9suTGwfcmDhoD4qRQGkDB85uWEQJl-2oUvSPXEHt06yhvDnl5bQnqnh9a3KomgEhkDGKcIBcY42ydrp3npDktE4aVulkEDtAiaDUed5wMdA",
  "payload": ""
}
2025-05-04 10:43:11,945:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380267 HTTP/1.1" 200 826
2025-05-04 10:43:11,945:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:11 GMT
Content-Type: application/json
Content-Length: 826
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqiALAVHUP5DK-NdBanVW-6aJMCVOEvgS4iQT_8Fh6RkE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/TWtftw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/QGnSJw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    }
  ]
}
2025-05-04 10:43:11,946:DEBUG:acme.client:Storing nonce: h1GQmuVqiALAVHUP5DK-NdBanVW-6aJMCVOEvgS4iQT_8Fh6RkE
2025-05-04 10:43:11,946:INFO:certbot._internal.auth_handler:Performing the following challenges:
2025-05-04 10:43:11,946:INFO:certbot._internal.auth_handler:http-01 challenge for max-server.org
2025-05-04 10:43:11,946:INFO:certbot._internal.auth_handler:http-01 challenge for openvpn.max-server.org
2025-05-04 10:43:11,946:INFO:certbot._internal.auth_handler:http-01 challenge for www.max-server.org
2025-05-04 10:43:12,012:INFO:certbot_apache._internal.override_debian:Enabled Apache rewrite module
2025-05-04 10:43:12,384:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2025-05-04 10:43:12,385:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
         RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2025-05-04 10:43:12,385:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
         RewriteEngine on
        <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2025-05-04 10:43:12,399:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2025-05-04 10:43:15,782:DEBUG:acme.client:JWS payload:
b'{}'
2025-05-04 10:43:15,783:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcWlBTEFWSFVQNURLLU5kQmFuVlctNmFKTUNWT0V2Z1M0aVFUXzhGaDZSa0UiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3L2lLX2d5QSJ9",
  "signature": "fEf0sbO9P3anbRHDnn2xMuU-Tf4TpB5HxbARAPR4MaN02jgkP-m37iD7FhDbGwvdn28Z-fGh0YmBtg-1Tb682DF3AaSFJG7_tYRCOOCsOm-CJ6IaKAah8rwPJEeyQtx_HHMvQh2_3EHM5dzEupulb6rVBdo1gdUURrEWsKHdUKhKf-6rQ0RWEw9ZRcyuETJ0hAuYXtf_tK8U6eiLFrN9ooeKfpmpE1pZ9XMnvkVh85naV9SQwC9t8-Cz4Y6WvuQK6p2vD-wyeiVGcX2vFdUzRMf5oSuN5-kzuBHHf5CzVhb2mfbK14h4vPqEqkcDcoRlkm_sFedqAKNQOwdwFTliwQ",
  "payload": "e30"
}
2025-05-04 10:43:15,922:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2378698287/515323380117/iK_gyA HTTP/1.1" 200 195
2025-05-04 10:43:15,923:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:15 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA
Replay-Nonce: QMh4p0UXVfrlufjnwpH_GhA3L_g1EHcktS2UxJTjKkuv7rxjEoE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
  "status": "pending",
  "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
}
2025-05-04 10:43:15,923:DEBUG:acme.client:Storing nonce: QMh4p0UXVfrlufjnwpH_GhA3L_g1EHcktS2UxJTjKkuv7rxjEoE
2025-05-04 10:43:15,923:DEBUG:acme.client:JWS payload:
b'{}'
2025-05-04 10:43:15,924:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWFZmcmx1Zmpud3BIX0doQTNMX2cxRUhja3RTMlV4SlRqS2t1djdyeGpFb0UiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3L3VKVE1pZyJ9",
  "signature": "b14BuSgnWR36-eC748NslXrwMlWkpSsmdPtFdsFluzequdMuoeTNFSaoYPI9_N9-1CQ7VzO4bj9Ntqv29jUqzf6evYo1U27fKry2obAfpX5VuulMW_pi4YiVVOvqyugrrQkYKxyl4zItmnFNMdo0z9xovhLXScuM0kFBo7Ub-Kw97oicOp0m8RyjYqgR2OGzq4Y-rhKFbV4dapZv5M6wV-YM7u9m3-DVbBk6bySQQHBFaa_EiDFOxjSiRPECGvftrpWz9OF51sfgTMflDLPQo-3TwFNI5-sB6f16Xk1fZLss5PflqTDq08QJoLznSksj1RSL-MmruEFAhBv2XdUcNw",
  "payload": "e30"
}
2025-05-04 10:43:16,053:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2378698287/515323380227/uJTMig HTTP/1.1" 200 195
2025-05-04 10:43:16,053:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:15 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig
Replay-Nonce: QMh4p0UXpPgjYVuhBaAolCJYoWZSTf0etVIiTGOFzKGqGF0iFMA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
  "status": "pending",
  "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
}
2025-05-04 10:43:16,054:DEBUG:acme.client:Storing nonce: QMh4p0UXpPgjYVuhBaAolCJYoWZSTf0etVIiTGOFzKGqGF0iFMA
2025-05-04 10:43:16,054:DEBUG:acme.client:JWS payload:
b'{}'
2025-05-04 10:43:16,055:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWHBQZ2pZVnVoQmFBb2xDSllvV1pTVGYwZXRWSWlUR09GektHcUdGMGlGTUEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3L3RJWHk1ZyJ9",
  "signature": "JDOE3x5azRnqDBkqaOuna3LNxn65xxrwJpTm_solYPf5HheLYhHAg2ysgS0JGv51ORPCaz_tjEZuC7VRWoPt0PsTZrL_8UcuexofvRx4qbB_MHMSMqxlVGBCPpNhEnLcKaIP6eb5MXV5Qvs6RJozlRIMVUW6tkfmeqrX5Xf20HWslRDf8n22o6Gf6sJ6yCv0eYNVWGJHiGN1fWWB0k0-UsTUMoyJe82fnqHwRj0_M9K5emZ7a6PZ09ycstwVIYHONdSk7kBXXxWBgFOP3izMq-dBVD659WiaIt9ZzIEax63KhMpGo5Sv9vn296jh-nKhHdbbOKRxUA0bcctElXQhIA",
  "payload": "e30"
}
2025-05-04 10:43:16,183:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2378698287/515323380267/tIXy5g HTTP/1.1" 200 195
2025-05-04 10:43:16,184:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:16 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g
Replay-Nonce: h1GQmuVqT0U1nZRvsEUK3-PmPC1TJd6NGUJRVWfcDl7ix06PlXI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
  "status": "pending",
  "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
}
2025-05-04 10:43:16,184:DEBUG:acme.client:Storing nonce: h1GQmuVqT0U1nZRvsEUK3-PmPC1TJd6NGUJRVWfcDl7ix06PlXI
2025-05-04 10:43:16,184:INFO:certbot._internal.auth_handler:Waiting for verification...
2025-05-04 10:43:17,184:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:17,186:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcVQwVTFuWlJ2c0VVSzMtUG1QQzFUSmQ2TkdVSlJWV2ZjRGw3aXgwNlBsWEkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3In0",
  "signature": "WfyoOMO7OwzvQe3hM7L1PCPhZK8zRqgzyZacs54vxCj513WgD-76hFiEr_mY7NlrOqvUtLcaggxehEvljH_s_EGBAlTYo4RF2hoJLdOA_UFeOTgxqpHm264UpCu4trgNopZeqO1K3XPoBYkfAsPaJ6Z6sLHxBXlwd3W2RSl02zGg815AbbpNO0N2T94ySAz-_H05C7K8wQLUH9tWuieCLkKn_4LKMmB5AhfliPvNOxOBZJozf7KNPla7Oxxsrv7OEHyK8iXvJ6-G5dp8EAgO_YAUFNphOtuTF--42UhfHVx1YshObhQUuEz50gBuAJ_UT1iKKYDvyuAiTjc9we0j0Q",
  "payload": ""
}
2025-05-04 10:43:17,312:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380117 HTTP/1.1" 200 822
2025-05-04 10:43:17,312:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:17 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqpu7qquT_hN7K0N4_i4M20lE93nr83_s2rghO8mRvm5g
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/u3UYZQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/brePMQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    }
  ]
}
2025-05-04 10:43:17,313:DEBUG:acme.client:Storing nonce: h1GQmuVqpu7qquT_hN7K0N4_i4M20lE93nr83_s2rghO8mRvm5g
2025-05-04 10:43:17,313:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:17,314:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcXB1N3FxdVRfaE43SzBONF9pNE0yMGxFOTNucjgzX3MycmdoTzhtUnZtNWciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3In0",
  "signature": "quTQZtqA1ioFaLC2DllohsPAEOZ_Kzre4MqQLJFHLE_6WiAx1aWetZW4IvMsYolem4PT8O4x9v8CBcD_ztrv5j38xeRYwWGM5VhK82OXAM8YQ6dYo3UcAgReMNvcBw0z_f3TBZWthhHW3IQ1Corn9sLMsN31d9aBIlmB-f1uxTqFctw0jrMMjwDFMhb8YN52LsetCuiIV1ORvrXcAhI2ZBjB8WUMGGtP7hC_qfh9cQjW1qFce7JG0latQ5YURc_5wwq6RjTligPyz2KWSn1JSl9xJ_HbJ3QDZW8YsOjoL1tbUl8JkXO63LcM3ubHxgyWZYZSDQ0z5pn0qpBO974Irw",
  "payload": ""
}
2025-05-04 10:43:17,439:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380227 HTTP/1.1" 200 830
2025-05-04 10:43:17,439:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:17 GMT
Content-Type: application/json
Content-Length: 830
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UX8E_M2Lqnuvbm0M8ipk5JZgpmL5V9ZeM1MrARVn0t8Bo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "openvpn.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/CsXkkw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/mm5fZw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    }
  ]
}
2025-05-04 10:43:17,440:DEBUG:acme.client:Storing nonce: QMh4p0UX8E_M2Lqnuvbm0M8ipk5JZgpmL5V9ZeM1MrARVn0t8Bo
2025-05-04 10:43:17,440:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:17,442:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWDhFX00yTHFudXZibTBNOGlwazVKWmdwbUw1VjlaZU0xTXJBUlZuMHQ4Qm8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3In0",
  "signature": "lwMf_aLWyYitlni91xWh77g02q3SKmJyob6cEibGN5TOfv8zl48rlUF3vc67RQEXARJneV12J5pwMkYPbMD2MYUJ3FzGoPUtmHf9odVm1LojqaxnUH9NN4MkV8O-U52A1R3CuowADHwp6G6DQm0fBWpJ_Ze1XLDiGoyubj6kgjV4cUB6ew8Gv5hOX_QylxEnyYOTchWY-IlQ_QV--pbzmX9gut7tjiVbJt7GXaf6P-mNEw-1sahqvQmP3vgvPEh8HGp1UGwJoyw5ypd-pyeKeUogSfsVtZqKwrn7E5f0K2xYMErs2VNUdu60ARZvpM1byye4X6BpzU8SGT69nXg8Pw",
  "payload": ""
}
2025-05-04 10:43:17,571:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380267 HTTP/1.1" 200 826
2025-05-04 10:43:17,572:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:17 GMT
Content-Type: application/json
Content-Length: 826
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UX7xR2b5_zqnwfU8fA7RjT7LZQ4zDUCxCcygnEQscjvs4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/QGnSJw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/TWtftw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    }
  ]
}
2025-05-04 10:43:17,572:DEBUG:acme.client:Storing nonce: QMh4p0UX7xR2b5_zqnwfU8fA7RjT7LZQ4zDUCxCcygnEQscjvs4
2025-05-04 10:43:20,573:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:20,574:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWDd4UjJiNV96cW53ZlU4ZkE3UmpUN0xaUTR6RFVDeENjeWduRVFzY2p2czQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3In0",
  "signature": "MhmMV06bLBTqbgDCWMHluTZ215mR4xcaJ-ZJjlRytE3_6cBKKN2DkUWxNqLLRl4kzJ4aRW4l9_OElKtiRyGCEthLEhrHYc62yBG2tN4BgtMKLEawKNSM5eOB8vA8VnO7VCJ60QuJBR4sMi8Avow2nibepDoi-oc6CCRpveu12ShN9GBS9JMYdaWiqTenR1Bfn7O9rs8YezIFIZUUbvh4Ui8uHdJB0gxqU20-AXQozP-HYCpkLvYvd_T07QuXDkGkMr4afsk-d95C96x5HsEKwzUgivw1wNPH2pvgyLg0H5cHCGqJ-LbY_pNfVG91wkmvjTJqgsYECf6Nb5QZBjfDLw",
  "payload": ""
}
2025-05-04 10:43:20,698:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380117 HTTP/1.1" 200 822
2025-05-04 10:43:20,699:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:20 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVq2xjDEWfCqhG4BX-MrHTdqxy6lxvUvcgPYlXu-ksBwSc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/brePMQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/u3UYZQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    }
  ]
}
2025-05-04 10:43:20,699:DEBUG:acme.client:Storing nonce: h1GQmuVq2xjDEWfCqhG4BX-MrHTdqxy6lxvUvcgPYlXu-ksBwSc
2025-05-04 10:43:20,700:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:20,703:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcTJ4akRFV2ZDcWhHNEJYLU1ySFRkcXh5Nmx4dlV2Y2dQWWxYdS1rc0J3U2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3In0",
  "signature": "W6RMODCCuZEokQZI-zuON6mNw183CpmShUb6lPckCIEgQ6BgSg4TaQCEz47T8Vos_aruKVArFb7tTbLS9AgxkqE17Mi3ZVA1BhqwNVt66kJJxp1fAazJeQHHax1NkYFN_hBdzIrvGv8wfaRvS98xncs0R_Z-BFU4dMJADvkTJaCt1RMpj3j-rFcfBb5mkUiGqvxlXoTaVF2vN8r-dmoevAbLWbzhueoy2TfJnoaBAuH6LZoIOerIQyO1i1Y3gIkYlcZtKQsjNvdPPVuKYaB6dPDOuSzHzGrT24924S3H_BoEk2Sn5N7jtLXNkMkBkSNHLZLafTKT30D13aKgVg370A",
  "payload": ""
}
2025-05-04 10:43:20,829:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380227 HTTP/1.1" 200 830
2025-05-04 10:43:20,830:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:20 GMT
Content-Type: application/json
Content-Length: 830
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqpzFzlnLIW2qxgFJP0DVSKrPqEsJX49_mpfoACECO0mI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "openvpn.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/mm5fZw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/CsXkkw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    }
  ]
}
2025-05-04 10:43:20,830:DEBUG:acme.client:Storing nonce: h1GQmuVqpzFzlnLIW2qxgFJP0DVSKrPqEsJX49_mpfoACECO0mI
2025-05-04 10:43:20,830:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:20,831:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcXB6RnpsbkxJVzJxeGdGSlAwRFZTS3JQcUVzSlg0OV9tcGZvQUNFQ08wbUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3In0",
  "signature": "mB74J86XQrQAjzPl6InhoRE5BBuF5ymqLgp3i1eFRpuT3XI_ZzCr-o3wp_wI34D0QGuu4DjK7USD7hJp-rLAj6w3qAMrzDiNPjOyEm3_MgwEhBaqWI5Zof3IO0sjuwNS8uoVW27P1Sv4Ox2BYguJgyFF78dm7nIujK7KJt4I1HWi3VGdwSqruS4ANckxRhV2oou8Lby-qidAcB6CSocstmLJEuB5_nbp6k3NFGoVNjtaLtz0w2IDgdNOQSLYxu8WYp5XbZvmtrcb8H7po5fQ6fZrLJFeRI0QhaCardRkZy-PVpt9cJKGAiu2Qg7_lnZxaOtlfi9c2ExTbs_8j5TJ4g",
  "payload": ""
}
2025-05-04 10:43:20,967:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380267 HTTP/1.1" 200 826
2025-05-04 10:43:20,968:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:20 GMT
Content-Type: application/json
Content-Length: 826
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UXxrrLcjD-TA_C-r-LhRSV40ZSnMtai2KBY-d2VLVQNes
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/QGnSJw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/TWtftw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    }
  ]
}
2025-05-04 10:43:20,968:DEBUG:acme.client:Storing nonce: QMh4p0UXxrrLcjD-TA_C-r-LhRSV40ZSnMtai2KBY-d2VLVQNes
2025-05-04 10:43:23,968:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:23,970:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWHhyckxjakQtVEFfQy1yLUxoUlNWNDBaU25NdGFpMktCWS1kMlZMVlFOZXMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3In0",
  "signature": "jKmyApOHMJ0BmEF5OsMkcfhLSuwBli8QblEwajYtBt7jTK543teX_PNU9KW4GcWMup0AW4DF4W72J2-mTOQpX5veg9ABr9XhwiRoXLcpdVb2K9n5QFrQtijaseVIw1aaA5DFvkDoM4AFdh_tQllM0knpJCzwNJC3QRPII2jbvs2uJyoNCm0qzhTCl6vaLvtxUk2BAiTNBAVQHbSTgMRJIJfvwMr6L71mWp90SsalG1-zyx9GnnB5wsiNJ4yYZLe1CVX-hTNuNuEtmQwOjqTwaW5OIMQCB0fTw0j8qXkpkd784nwR9xUuKMSP8ygH8LUUx1Bw42krDe2quwP7ku3h1g",
  "payload": ""
}
2025-05-04 10:43:24,101:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380117 HTTP/1.1" 200 822
2025-05-04 10:43:24,102:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:24 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqDqFapZu6uugXWyR70d-gwFmz1zhfBd4iSl-_hbU2-S4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/brePMQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/u3UYZQ",
      "status": "pending",
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU"
    }
  ]
}
2025-05-04 10:43:24,102:DEBUG:acme.client:Storing nonce: h1GQmuVqDqFapZu6uugXWyR70d-gwFmz1zhfBd4iSl-_hbU2-S4
2025-05-04 10:43:24,102:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:24,103:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcURxRmFwWnU2dXVnWFd5UjcwZC1nd0ZtejF6aGZCZDRpU2wtX2hiVTItUzQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3In0",
  "signature": "mo6q7ZkljOFRrkqhmzjz_Sfd_pdBqrQTHWJ2XjYcyqoS9NnfBtwtyzvdWsCdSBRfyucE0HEubHg2iSl-ueiAj6v6veqArTyRNWGfcTIKERXOqZYpNvU7BVSJyh2I2trix-qGvtkC0yKAFF2nrs1gccEPDR29lqX7Ps8W5ekELztYl-d49ZwFgbwkzl_AhL9ZUbyhaph5vx4XvaYKfvC-9f_sdM71uT25cNnl-q8NJv5laJD6RvXdCEM6a4LcOCkfUfBgTpxzyFAl3qlXkodVKtkSPPqfs-qJB-yKpA6Z2s2fMeAfEsPAgcPCvetvX3AJYEoR7Dy8XMMHrYyLVZmRoA",
  "payload": ""
}
2025-05-04 10:43:24,227:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380227 HTTP/1.1" 200 830
2025-05-04 10:43:24,228:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:24 GMT
Content-Type: application/json
Content-Length: 830
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UXyIMjnmKC7U8GdkX_UY0fb6UdKdXsEBfdJ0bDB0z58Uo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "openvpn.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/mm5fZw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/CsXkkw",
      "status": "pending",
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20"
    }
  ]
}
2025-05-04 10:43:24,228:DEBUG:acme.client:Storing nonce: QMh4p0UXyIMjnmKC7U8GdkX_UY0fb6UdKdXsEBfdJ0bDB0z58Uo
2025-05-04 10:43:24,228:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:24,230:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWHlJTWpubUtDN1U4R2RrWF9VWTBmYjZVZEtkWHNFQmZkSjBiREIwejU4VW8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3In0",
  "signature": "S_lcgWdeuvvIFe7TEuDkHOSZq1jDhFgmaAO4JOb-cLfLYw8qrY6gRJxlIflh67HYQbHcvSYsHqPPJRWUxAZy6MErrSFpV5R_VBr-e9BDrRVMOyFQDP0YQZz0Nfl4WoIczwTf9C_hTqZpF2tguSuWQQ78NDTQPwLo40SLSbV3n26lvEUPhOl62en6FzF7uTJC438Odsh7PYkT3RwOMyba53Z8giKcSIgNQS7Yo7L03pk6nhz27lMotN1ArzKgG4XP9SYOdDUgnyjIqt9pXfVVB-3tTxIW3ckhRg-JrmfVLFQCtcodpCY6Dv3I3-w70Aoi2bC2ceQJsLcg_6GqRGjLHQ",
  "payload": ""
}
2025-05-04 10:43:24,360:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380267 HTTP/1.1" 200 826
2025-05-04 10:43:24,360:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:24 GMT
Content-Type: application/json
Content-Length: 826
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: h1GQmuVqjDjGRlyasIJsazD30_-UH3E7tFbP2MI7P9thANw1WaM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.max-server.org"
  },
  "status": "pending",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/TWtftw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/QGnSJw",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
      "status": "pending",
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg"
    }
  ]
}
2025-05-04 10:43:24,361:DEBUG:acme.client:Storing nonce: h1GQmuVqjDjGRlyasIJsazD30_-UH3E7tFbP2MI7P9thANw1WaM
2025-05-04 10:43:27,361:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:27,362:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380117:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJoMUdRbXVWcWpEakdSbHlhc0lKc2F6RDMwXy1VSDNFN3RGYlAyTUk3UDl0aEFOdzFXYU0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMTE3In0",
  "signature": "RZMMkPqzMyjJSxUq_2EMKHOadKtF9ouADR0glPoT6Enyj08DMizcQUhqiDB3moA6MHEajSSdOzxnlJWBu6ssnlxUZepgBV_WKj_dAbcwNf2iBfuBCDnkze3Gh0SREI-oc4Mpmx5jZB_ydQtIyjYDrM4rV2jb5hKYHZj-tLewmqB69vIAur6W6QNILdqUmi0tK9bZNMUee-gy1sDoaml2uRZfQbm7vxMfdKQa-_ZB1w2lFlw1OrnaWJFCSOMReBTdfe53i_9aoam1UXmTMcUb0bRH41IMeMvwEUMrLmMRSadamoww_G05iB-gZuAzhGw7GjYrykx0bd_lEoFfHd9q9Q",
  "payload": ""
}
2025-05-04 10:43:27,496:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380117 HTTP/1.1" 200 1059
2025-05-04 10:43:27,496:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:27 GMT
Content-Type: application/json
Content-Length: 1059
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UXu2e3ZwrbbSm_5jHbMpxiyVQgj4eNoFPxga00oifW38s
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "max-server.org"
  },
  "status": "invalid",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380117/iK_gyA",
      "status": "invalid",
      "validated": "2025-05-04T10:43:15Z",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "45.84.197.41: Fetching http://max-server.org/.well-known/acme-challenge/WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU: Timeout during connect (likely firewall problem)",
        "status": 400
      },
      "token": "WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU",
      "validationRecord": [
        {
          "url": "http://max-server.org/.well-known/acme-challenge/WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU",
          "hostname": "max-server.org",
          "port": "80",
          "addressesResolved": [
            "45.84.197.41"
          ],
          "addressUsed": "45.84.197.41"
        }
      ]
    }
  ]
}
2025-05-04 10:43:27,496:DEBUG:acme.client:Storing nonce: QMh4p0UXu2e3ZwrbbSm_5jHbMpxiyVQgj4eNoFPxga00oifW38s
2025-05-04 10:43:27,497:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:27,498:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380227:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWHUyZTNad3JiYlNtXzVqSGJNcHhpeVZRZ2o0ZU5vRlB4Z2EwMG9pZlczOHMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjI3In0",
  "signature": "CSFVyd6907pwpwU1ugaOYa4YXF0jcFxMYV2-E490SEVVUj-IhdLsen-mGcN8rT1A8thv-tjYda_CElMoGbCDJKe1GFKCaW2cfCJG01xCTHFkkfs3213Kq4MPmkBHvHhk-BIVzTaV1h8fLLCZr5EBhrY6fFlqO7RvpV8yfIXLfaKN7owxVNCY7m3V2VneFW5S9RvZ34xj3wRdKBN-I9dlaQbWRE8SEMJvF6AN9pEv9RGr7TkxleBZHJs_K6nfvcDhnD-ksGZD97EnjWq-WWRLT06tCGc148RoC-4ZuqHQRw3uZEplEOBftzOECv-k0pQVXLGYlu4qWCqpvsYIdD0RbA",
  "payload": ""
}
2025-05-04 10:43:27,630:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380227 HTTP/1.1" 200 1091
2025-05-04 10:43:27,630:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:27 GMT
Content-Type: application/json
Content-Length: 1091
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UXTJCdkWkWf-uxXYZ0h6UL54nXomGHZgOIkjEcl7yf_9Q
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "openvpn.max-server.org"
  },
  "status": "invalid",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380227/uJTMig",
      "status": "invalid",
      "validated": "2025-05-04T10:43:15Z",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "45.84.197.41: Fetching http://openvpn.max-server.org/.well-known/acme-challenge/2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20: Timeout during connect (likely firewall problem)",
        "status": 400
      },
      "token": "2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20",
      "validationRecord": [
        {
          "url": "http://openvpn.max-server.org/.well-known/acme-challenge/2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20",
          "hostname": "openvpn.max-server.org",
          "port": "80",
          "addressesResolved": [
            "45.84.197.41"
          ],
          "addressUsed": "45.84.197.41"
        }
      ]
    }
  ]
}
2025-05-04 10:43:27,631:DEBUG:acme.client:Storing nonce: QMh4p0UXTJCdkWkWf-uxXYZ0h6UL54nXomGHZgOIkjEcl7yf_9Q
2025-05-04 10:43:27,631:DEBUG:acme.client:JWS payload:
b''
2025-05-04 10:43:27,632:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2378698287/515323380267:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjM3ODY5ODI4NyIsICJub25jZSI6ICJRTWg0cDBVWFRKQ2RrV2tXZi11eFhZWjBoNlVMNTRuWG9tR0haZ09Ja2pFY2w3eWZfOVEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzIzNzg2OTgyODcvNTE1MzIzMzgwMjY3In0",
  "signature": "m1-u3qg7OOpZuLXvrz0iTtHfvg3F4wfeuXmUNEl-uqHTyKDD7kYHO2o_WWVBYn2g92zR7q1K29T_ffRfSqXAf9aT5dEkSzqUKb3Qrbx7VY47JAUCgST5GyKCKg2AVTBmAOyCePT8FbIkTeC4BKnXK_XXrFWgmKaO14HgKTzfm73_PCdsKaqan3qVafzTjGiF3bDHGCWx6vP9CyXtviDgD-6Eub0jzdqvVNuVvzbPY4ZWVRhtZ18C2KvLUnfyeYX_JG-j9rY-XMak-skSvNdsgNwmyzCXz3vL9Ejs7dJnZnBPRF5UI3cOCkeTVzmQagGTYEw5G9pvAbd8sK7ac5cu0w",
  "payload": ""
}
2025-05-04 10:43:27,756:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2378698287/515323380267 HTTP/1.1" 200 1075
2025-05-04 10:43:27,756:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 04 May 2025 10:43:27 GMT
Content-Type: application/json
Content-Length: 1075
Connection: keep-alive
Boulder-Requester: 2378698287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QMh4p0UXbCz8tJyPuJi2n9gAqJAkq9xGUweRwvjS6IWhTIhia9M
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.max-server.org"
  },
  "status": "invalid",
  "expires": "2025-05-11T10:43:11Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2378698287/515323380267/tIXy5g",
      "status": "invalid",
      "validated": "2025-05-04T10:43:16Z",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "45.84.197.41: Fetching http://www.max-server.org/.well-known/acme-challenge/F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg: Timeout during connect (likely firewall problem)",
        "status": 400
      },
      "token": "F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg",
      "validationRecord": [
        {
          "url": "http://www.max-server.org/.well-known/acme-challenge/F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg",
          "hostname": "www.max-server.org",
          "port": "80",
          "addressesResolved": [
            "45.84.197.41"
          ],
          "addressUsed": "45.84.197.41"
        }
      ]
    }
  ]
}
2025-05-04 10:43:27,756:DEBUG:acme.client:Storing nonce: QMh4p0UXbCz8tJyPuJi2n9gAqJAkq9xGUweRwvjS6IWhTIhia9M
2025-05-04 10:43:27,756:INFO:certbot._internal.auth_handler:Challenge failed for domain max-server.org
2025-05-04 10:43:27,757:INFO:certbot._internal.auth_handler:Challenge failed for domain openvpn.max-server.org
2025-05-04 10:43:27,757:INFO:certbot._internal.auth_handler:Challenge failed for domain www.max-server.org
2025-05-04 10:43:27,757:INFO:certbot._internal.auth_handler:http-01 challenge for max-server.org
2025-05-04 10:43:27,757:INFO:certbot._internal.auth_handler:http-01 challenge for openvpn.max-server.org
2025-05-04 10:43:27,757:INFO:certbot._internal.auth_handler:http-01 challenge for www.max-server.org
2025-05-04 10:43:27,757:DEBUG:certbot._internal.display.obj:Notifying user: 
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
  Domain: max-server.org
  Type:   connection
  Detail: 45.84.197.41: Fetching http://max-server.org/.well-known/acme-challenge/WZ1Dh0ouvyyc9TK-4-jrZGyvY4XkKkfRUXl-t6SymKU: Timeout during connect (likely firewall problem)

  Domain: openvpn.max-server.org
  Type:   connection
  Detail: 45.84.197.41: Fetching http://openvpn.max-server.org/.well-known/acme-challenge/2kpCPo8g0CqE-2NeD5PMAFtM5R0W0OLgn6BnOguyk20: Timeout during connect (likely firewall problem)

  Domain: www.max-server.org
  Type:   connection
  Detail: 45.84.197.41: Fetching http://www.max-server.org/.well-known/acme-challenge/F3toR7fymkWU0DQ9dmtGRVWIkTXy42NBIixUeEvIOGg: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

2025-05-04 10:43:27,758:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.

2025-05-04 10:43:27,758:DEBUG:certbot._internal.error_handler:Calling registered functions
2025-05-04 10:43:27,758:INFO:certbot._internal.auth_handler:Cleaning up challenges
2025-05-04 10:43:28,295:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/snap/certbot/4557/bin/certbot", line 8, in <module>
    sys.exit(main())
             ^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/main.py", line 19, in main
    return internal_main.main(cli_args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/main.py", line 1872, in main
    return config.func(config, plugins)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/main.py", line 1428, in run
    new_lineage = _get_and_save_cert(le_client, config, domains,
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/main.py", line 143, in _get_and_save_cert
    lineage = le_client.obtain_and_enroll_certificate(domains, certname)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/client.py", line 523, in obtain_and_enroll_certificate
    cert, chain, key, _ = self.obtain_certificate(domains)
                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/client.py", line 424, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/client.py", line 502, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/snap/certbot/4557/lib/python3.12/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2025-05-04 10:43:28,297:ERROR:certbot._internal.log:Some challenges have failed.

My web server is (include version): Apache 2.4.52

The operating system my web server runs on is (include version): Ubuntu

My hosting provider, if applicable, is:Strato

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 4.0.0

Welcome @hiduser0

The "timeout" errors mean the Let's Encrypt validation server cannot reach your server to prove control of your domain.

The Certbot --apache option uses the HTTP Challenge. This requires your Apache server to reply to HTTP requests on port 80 to satisfy this challenge.

As you make changes to your setup to allow these, use the https://letsdebug.net test site to confirm that works. Once it does try getting a cert again.

See more about HTTP Challenges here: Challenge Types - Let's Encrypt

3 Likes

Hello,

thank you very much. I can access the apache2 default site with my domain, but get still this error. What can I do?

Are you testing from the public internet?

Because your domain must reply to requests from there. Try a mobile phone with wifi disabled. Or, the Let's Debug site I suggested: Let's Debug

That is still showing connection failures.

Do you require a VPN to access your domain? You may need to switch to a DNS Challenge instead of HTTP Challenge if that is the case.

4 Likes

Yes. I need a VPN to access. Sorry my mistake. Thank You very much!

1 Like