Hi Matt
Can connect without issue to other web sites on port 80 and 443
Attached is log
curl -v https://acme-v02.api.letsencrypt.org/directory
* Trying 59.151.178.102…
* TCP_NODELAY set
* Connected to acme-v02.api.letsencrypt.org (59.151.178.102) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=acme-v02.api.letsencrypt.org
* start date: May 10 04:39:46 2019 GMT
* expire date: Aug 8 04:39:46 2019 GMT
* subjectAltName: host “acme-v02.api.letsencrypt.org” matched cert’s "acme-v02.api.letsencrypt.org"
* issuer: C=US; O=Let’s Encrypt; CN=Let’s Encrypt Authority X3
* SSL certificate verify ok.
> GET /directory HTTP/1.1
> Host: acme-v02.api.letsencrypt.org
> User-Agent: curl/7.52.1
> Accept: /
>
< HTTP/1.1 200 OK
< Server: nginx
< Content-Type: application/json
< Content-Length: 658
< X-Frame-Options: DENY
< Strict-Transport-Security: max-age=604800
< Expires: Fri, 07 Jun 2019 19:51:45 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Fri, 07 Jun 2019 19:51:45 GMT
< Connection: keep-alive
<
{
"bnUwoMckgjU": “Adding random entries to the directory”,
"keyChange": “https://acme-v02.api.letsencrypt.org/acme/key-change”,
"meta": {
"caaIdentities": [
],
"termsOfService": “https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf”,
"website": "https://letsencrypt.org"
},
"newAccount": “https://acme-v02.api.letsencrypt.org/acme/new-acct”,
"newNonce": “https://acme-v02.api.letsencrypt.org/acme/new-nonce”,
"newOrder": “https://acme-v02.api.letsencrypt.org/acme/new-order”,
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
* Curl_http_done: called premature == 0
* Connection #0 to host acme-v02.api.letsencrypt.org left intact
(Attachment letsencrypt.log is missing)