Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
Depending on whether you have a newer OpenSSL backported to Lenny or not, you may need to be careful which clients and authorization challenges you use, as SNI may not be available.