HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Read timed out

Hi Matt

Can connect without issue to other web sites on port 80 and 443

Attached is log

curl -v https://acme-v02.api.letsencrypt.org/directory

* Trying 59.151.178.102…

* TCP_NODELAY set

* Connected to acme-v02.api.letsencrypt.org (59.151.178.102) port 443 (#0)

* ALPN, offering h2

* ALPN, offering http/1.1

* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH

* successfully set certificate verify locations:

* CAfile: /etc/ssl/certs/ca-certificates.crt

CApath: /etc/ssl/certs

* TLSv1.2 (OUT), TLS header, Certificate Status (22):

* TLSv1.2 (OUT), TLS handshake, Client hello (1):

* TLSv1.2 (IN), TLS handshake, Server hello (2):

* TLSv1.2 (IN), TLS handshake, Certificate (11):

* TLSv1.2 (IN), TLS handshake, Server key exchange (12):

* TLSv1.2 (IN), TLS handshake, Server finished (14):

* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):

* TLSv1.2 (OUT), TLS change cipher, Client hello (1):

* TLSv1.2 (OUT), TLS handshake, Finished (20):

* TLSv1.2 (IN), TLS change cipher, Client hello (1):

* TLSv1.2 (IN), TLS handshake, Finished (20):

* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384

* ALPN, server accepted to use http/1.1

* Server certificate:

* subject: CN=acme-v02.api.letsencrypt.org

* start date: May 10 04:39:46 2019 GMT

* expire date: Aug 8 04:39:46 2019 GMT

* subjectAltName: host “acme-v02.api.letsencrypt.org” matched cert’s "acme-v02.api.letsencrypt.org"

* issuer: C=US; O=Let’s Encrypt; CN=Let’s Encrypt Authority X3

* SSL certificate verify ok.

> GET /directory HTTP/1.1

> Host: acme-v02.api.letsencrypt.org

> User-Agent: curl/7.52.1

> Accept: /

>

< HTTP/1.1 200 OK

< Server: nginx

< Content-Type: application/json

< Content-Length: 658

< X-Frame-Options: DENY

< Strict-Transport-Security: max-age=604800

< Expires: Fri, 07 Jun 2019 19:51:45 GMT

< Cache-Control: max-age=0, no-cache, no-store

< Pragma: no-cache

< Date: Fri, 07 Jun 2019 19:51:45 GMT

< Connection: keep-alive

<

{

"bnUwoMckgjU": “Adding random entries to the directory”,

"keyChange": “https://acme-v02.api.letsencrypt.org/acme/key-change”,

"meta": {

"caaIdentities": [

"letsencrypt.org"

],

"termsOfService": “https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf”,

"website": "https://letsencrypt.org"

},

"newAccount": “https://acme-v02.api.letsencrypt.org/acme/new-acct”,

"newNonce": “https://acme-v02.api.letsencrypt.org/acme/new-nonce”,

"newOrder": “https://acme-v02.api.letsencrypt.org/acme/new-order”,

"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"

* Curl_http_done: called premature == 0

* Connection #0 to host acme-v02.api.letsencrypt.org left intact

(Attachment letsencrypt.log is missing)