Obtaining certs taking an unusual amount of time


#1

On my VPS installing certs take an absurd amount of time with https connections dropping all the time. It’s almost as if i’ve been rate limited to 1byte/s by Boulder. There’s no firewall running on my VPS.

![SSL Connections dropping all the time]
(http://i.imgur.com/3MAM2Zw.png)

Note the timestamps in this log;

2015-12-01 16:57:37,051:DEBUG:letsencrypt.cli:Root logging level set at 20
2015-12-01 16:57:37,054:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2015-12-01 16:57:37,066:DEBUG:letsencrypt.cli:letsencrypt version: 0.0.0.dev20151123
2015-12-01 16:57:37,066:DEBUG:letsencrypt.cli:Arguments: ['--standalone', '--verbose', '--debug', '-d', 'hoekoudishetbuiten.nl', '-d', 'www.hoekoudishetbuiten.nl', '--server', 'https://acme-v01.api.letsencrypt.org/directory', '--agree-dev-preview']
2015-12-01 16:57:37,067:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2015-12-01 16:57:37,071:DEBUG:letsencrypt.cli:Requested authenticator standalone and installer None
2015-12-01 16:57:37,200:DEBUG:letsencrypt.display.ops:Single candidate plugin: * standalone
Description: Automatically use a temporary webserver
Interfaces: IAuthenticator, IPlugin
Entry point: standalone = letsencrypt.plugins.standalone:Authenticator
Initialized: <letsencrypt.plugins.standalone.Authenticator object at 0x7f42dbda0bd0>
Prep: True
2015-12-01 16:57:37,201:DEBUG:letsencrypt.cli:Selected authenticator <letsencrypt.plugins.standalone.Authenticator object at 0x7f42dbda0bd0> and installer None
2015-12-01 16:57:37,216:DEBUG:letsencrypt.cli:Picked account: <Account(f138d922660836653b403d0826bdff2f)>
2015-12-01 16:57:37,217:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2015-12-01 16:57:37,220:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:01:52,620:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 263
2015-12-01 17:01:52,623:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '263', 'Expires': 'Tue, 01 Dec 2015 17:01:53 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:01:53 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'uzFDzQHfg9S5IRbFG9ZHUNQPUmEEMnXcMf0ADxcxunE'}. Content: '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
2015-12-01 17:01:52,623:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '263', 'Expires': 'Tue, 01 Dec 2015 17:01:53 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:01:53 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'uzFDzQHfg9S5IRbFG9ZHUNQPUmEEMnXcMf0ADxcxunE'}): '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
2015-12-01 17:01:52,979:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0006_key-letsencrypt.pem
2015-12-01 17:01:52,990:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0006_csr-letsencrypt.pem
2015-12-01 17:01:53,001:DEBUG:letsencrypt.client:CSR: CSR(file='/etc/letsencrypt/csr/0006_csr-letsencrypt.pem', data='0\x82\x02\xb30\x82\x01\x9b\x02\x01\x000 1\x1e0\x1c\x06\x03U\x04\x03\x0c\x15hoekoudishetbuiten.nl0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x95\xe5\xf6\xb3p\xe8\x08Acg\xa3\x15Y7lPN\xd7d\x1e8\xe5YP\x9ab\x12dU\xc6\xe4#\x9eF\x8bo\xcde\x13\x1f\x91\x96\xedAu\xb8&j\xb1\x9d\xe8\x06\xe4\xa9D\xdb~\xe5\xe2\x0b\x94\xfc\xe0\xb0\xa2!=%=\rLL\x01\xf9X\x8f\x01\xd1\xf49\x1ena\x9dQ\x1f2}\xe36\xc7\xd5\x8d)\x88X\x12N\x849BvM|\xd8\x8cf\x01\x94\'\xc2 g\xb1\x970\xa49R\xd8\x9c\x03\x9ey\x0cnp \x02\x8a\x8d;G\xf8SB\xf9R\x19\x8b\xba\x0bA\xd1\xd0\xfc\xa6\x17\xb3\n\xa7"\x9b\xd4e\x87RB\xa6 \xfe\x971G\xf9\\\xec}K\xd3\x86\xb7S3\xc0\xcd|\xb0n\x14\x9e\\d\xe6Z/5\x83\xff\xff6\x06\x1780\xfe~\xc6<\x1a\xa1:\xfe|\xda\xe7\xa5\xc3\x1e\x9b\xc5\xf6\xc6D\x18\xbf\x97\x05\xc78\xa7\x18y\xeae\xa6\xa39Y\xfd\x1bY\x07\x12\x9b\x8f\xc6\xf8\xb0y\x8b\xa2\xc8\x90q\x07e\x02\x04\'\x1a\x91\x82=\xf4\x11\x02\x03\x01\x00\x01\xa0N0L\x06\t*\x86H\x86\xf7\r\x01\t\x0e1?0=0;\x06\x03U\x1d\x11\x04402\x82\x15hoekoudishetbuiten.nl\x82\x19www.hoekoudishetbuiten.nl0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00o\xc1\x12Lw\x0f\xd5\xd4\xfdT\xb8mY\x9a\x8e\xee{\xda4\x04,\x82h\xa7\xf9`Q\xfd\x08\xa5\x05M\xe0\xf7\x8f\t\x9a\xf8\xb2\xe3"\xbdH> \x86\xb8{x\xb5\x1e\x19\x1d\xeb\x91\xc6l\xd4\x02\xb9\x81\x0e\x08\x95\xb3mTN\x9d\xc9X\xf5B\xff\xcc\xb6Q\xca\xad:C\xe2\xcaj\xb0\r\xda\xe6\xb2\x82\xfa\xa99q{\x81_\xe1.\xce\xdc\\V\xfaP\xab\xd6\x93\xf7\xf7\xe8\xf0}\xb6\x1c\xafl8\xb2\xe4\x18-\xa5\x03\xaa!\x9a\xe6d"\x00\xde\xee\xba\xed-\x87\xba\xa5\xd1\xc7T\x8aF\x04d\xeeu\xed\x85\xcf\nC\xf1\x83\xdcF\xc7 \xf0&\xe3\xc8\x88\xfeX\x1b*M \x81\xa6\xa3VG\xfbg9\x8d\xb8\x96\x89\x99Mq\xe4\x98\xbcp\x81\x86\xac\xaa\x18$\xe3\x82w\x1f\x12\xc3.\x13Vs]\xd3Z"\x99\xfa\xcf\xde\x08\x1cnh+\xd5\x00\x04.\x06\xea\x8ac\x91`kb\x1az\xce\xf9PV#L\xe8\xe5\xe2\xbf\xe8m\xce\x97\x16\xe4\xf0\xa8h#\xfd\x9f*\xe7', form='der'), domains: ['hoekoudishetbuiten.nl', 'www.hoekoudishetbuiten.nl']
2015-12-01 17:01:53,002:DEBUG:root:Requesting fresh nonce
2015-12-01 17:01:53,002:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2015-12-01 17:01:53,003:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:06:08,265:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
2015-12-01 17:06:08,269:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Tue, 01 Dec 2015 17:06:09 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:06:09 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'wuhve7XrW-4s0042P_N9kl7FetA4z-eYCA2ViEj4rLY'}. Content: ''
2015-12-01 17:06:08,270:DEBUG:acme.client:Storing nonce: '\xc2\xe8o{\xb5\xeb[\xee,\xd3N6?\xf3}\x92^\xc5z\xd08\xcf\xe7\x98\x08\r\x95\x88H\xf8\xac\xb6'
2015-12-01 17:06:08,271:DEBUG:acme.jose.json_util:Omitted empty fields: combinations=None, expires=None, status=None, challenges=None
2015-12-01 17:06:08,271:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "hoekoudishetbuiten.nl"}, "resource": "new-authz"}
2015-12-01 17:06:08,273:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), jwk=None, kid=None, typ=None, x5t=None, x5u=None, alg=None, cty=None, x5tS256=None, jku=None, crit=()
2015-12-01 17:06:08,277:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, typ=None, x5t=None, nonce=None, x5u=None, cty=None, x5tS256=None, jku=None
2015-12-01 17:06:08,278:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "1-X80rgLTrhGuEQIYGArPNqwNDYYKwbHvbJGxnG-YZqoosfhWfn2dKPaIIN6x2Gvnsk_YjS65f2eVq7RR8KE77Q0RhxH3kzG3TY5qjYdfeEh-rGZBNUPyfDMtdKOnL6NQO2rS29cFaIPaGKxd4tGLCmSMRA0NixRiPeZJCbFvH61m7YxgHmJyPQjyx-7-66QCUDmptBt2wpFEM6oCwe8zwczwowR-CU4oaYgWH_70lhTZYMsd4-tEziRKkdG37d7AtbAj3YyMp70yHdz6Xm48VrFqXAhhCgxP7chPfZ0-J-yRSceoBOjg_8qrSZIDeoIPwPIWMgsmOL13vPEtsKrZw"}}, "protected": "eyJub25jZSI6ICJ3dWh2ZTdYclctNHMwMDQyUF9OOWtsN0ZldEE0ei1lWUNBMlZpRWo0ckxZIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJob2Vrb3VkaXNoZXRidWl0ZW4ubmwifSwgInJlc291cmNlIjogIm5ldy1hdXRoeiJ9", "signature": "VLPf_VtZHSbg9OzRYyQYmWThcW65mORTro33vyfHyk69A_8sS1lJjkZaBK8P1kV56OBKRlOYRzflxCbHLORopEYvaKSeJ3i5uiMi9C-J_oddsjX8ObE7SFHzqdMNNcpHzryhGtGKuuByZwBDvPd2-iFJ73iDRkY4o4KlubhllcjRgX89DFC-byXqp1KDNg-VuUq53sPEu0LK_qaOcfD9aSnoiyKgrbguKQuiWiGkRe9GFAekLNxf_P1Ex9v9RFZfidWotd3dlsdY3FDNGyUxsPijf59LSvphbmN0TFWJoZy3uny9UAXWvMMcJwuEQSMwZ1GNmPkTm8SqFroP1DiF1A"}'}
2015-12-01 17:06:08,280:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:10:23,162:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 572
2015-12-01 17:10:23,165:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '572', 'Expires': 'Tue, 01 Dec 2015 17:10:24 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:10:24 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': '-N5UR9OoMsa2aau6anctQuJ1-BAS7kaR_H02Kz5cxH0'}. Content: '{"identifier":{"type":"dns","value":"hoekoudishetbuiten.nl"},"status":"pending","expires":"2015-12-08T17:10:24.006658107Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509707","token":"E_tpos5vYMMMtBC2Eit2442GuL1yFbF-GVNQ6OyjzDk"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU"}],"combinations":[[1],[0]]}'
2015-12-01 17:10:23,166:DEBUG:acme.client:Storing nonce: '\xf8\xdeTG\xd3\xa82\xc6\xb6i\xab\xbajw-B\xe2u\xf8\x10\x12\xeeF\x91\xfc}6+>\\\xc4}'
2015-12-01 17:10:23,166:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '572', 'Expires': 'Tue, 01 Dec 2015 17:10:24 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:10:24 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': '-N5UR9OoMsa2aau6anctQuJ1-BAS7kaR_H02Kz5cxH0'}): '{"identifier":{"type":"dns","value":"hoekoudishetbuiten.nl"},"status":"pending","expires":"2015-12-08T17:10:24.006658107Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509707","token":"E_tpos5vYMMMtBC2Eit2442GuL1yFbF-GVNQ6OyjzDk"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU"}],"combinations":[[1],[0]]}'
2015-12-01 17:10:23,167:DEBUG:acme.jose.json_util:Omitted empty fields: combinations=None, expires=None, status=None, challenges=None
2015-12-01 17:10:23,168:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "www.hoekoudishetbuiten.nl"}, "resource": "new-authz"}
2015-12-01 17:10:23,169:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), jwk=None, kid=None, typ=None, x5t=None, x5u=None, alg=None, cty=None, x5tS256=None, jku=None, crit=()
2015-12-01 17:10:23,171:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, typ=None, x5t=None, nonce=None, x5u=None, cty=None, x5tS256=None, jku=None
2015-12-01 17:10:23,171:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "1-X80rgLTrhGuEQIYGArPNqwNDYYKwbHvbJGxnG-YZqoosfhWfn2dKPaIIN6x2Gvnsk_YjS65f2eVq7RR8KE77Q0RhxH3kzG3TY5qjYdfeEh-rGZBNUPyfDMtdKOnL6NQO2rS29cFaIPaGKxd4tGLCmSMRA0NixRiPeZJCbFvH61m7YxgHmJyPQjyx-7-66QCUDmptBt2wpFEM6oCwe8zwczwowR-CU4oaYgWH_70lhTZYMsd4-tEziRKkdG37d7AtbAj3YyMp70yHdz6Xm48VrFqXAhhCgxP7chPfZ0-J-yRSceoBOjg_8qrSZIDeoIPwPIWMgsmOL13vPEtsKrZw"}}, "protected": "eyJub25jZSI6ICItTjVVUjlPb01zYTJhYXU2YW5jdFF1SjEtQkFTN2thUl9IMDJLejVjeEgwIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJ3d3cuaG9la291ZGlzaGV0YnVpdGVuLm5sIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ", "signature": "dFcfn1R2JOQRX-oaXLdOGgrBmpMoDEMXUW0LLAg4nPSzY8_NoH0sX52D5w8y92yQc83EqU6ouXLxEQOUeG9vINBjx5Z3qU44yYu6JSLsJiZ7Tr04aJyv2i4TNgxRUC2z7SOEyt4wScmvMOtzA99pJEOmHRb8ycBnm-4jey_ltwgneb2sTFCtaSPO0ADwFGifDSTzYv68W-WOCP2k28AV4G2ho3dcL5HhWU_cOJ2LE7W2USfNg_Nqy95vPRa8cCmxUkFKJCFmuFGM1rWiSIKDUqzmO1IVykhaQjAlQCM6RKDTqhiMC6jYUCjLtd8Z0a52R90ZQ6pkEU9amgeAmfDasQ"}'}
2015-12-01 17:10:23,173:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:14:38,079:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 576
2015-12-01 17:14:38,082:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '576', 'Expires': 'Tue, 01 Dec 2015 17:14:39 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:14:39 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'hl8PCHOjaQq0V0kpVl-Y_WZJ6Pwka2BvRAnXuMMAMPo'}. Content: '{"identifier":{"type":"dns","value":"www.hoekoudishetbuiten.nl"},"status":"pending","expires":"2015-12-08T17:14:38.913716036Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509755","token":"C2OoL7AKyEP-DqOZseF7-A9aRN-czfLEIiNmmhRlvCQ"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM"}],"combinations":[[1],[0]]}'
2015-12-01 17:14:38,083:DEBUG:acme.client:Storing nonce: '\x86_\x0f\x08s\xa3i\n\xb4WI)V_\x98\xfdfI\xe8\xfc$k`oD\t\xd7\xb8\xc3\x000\xfa'
2015-12-01 17:14:38,084:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '576', 'Expires': 'Tue, 01 Dec 2015 17:14:39 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:14:39 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'hl8PCHOjaQq0V0kpVl-Y_WZJ6Pwka2BvRAnXuMMAMPo'}): '{"identifier":{"type":"dns","value":"www.hoekoudishetbuiten.nl"},"status":"pending","expires":"2015-12-08T17:14:38.913716036Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509755","token":"C2OoL7AKyEP-DqOZseF7-A9aRN-czfLEIiNmmhRlvCQ"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM"}],"combinations":[[1],[0]]}'
2015-12-01 17:14:38,085:INFO:letsencrypt.auth_handler:Performing the following challenges:
2015-12-01 17:14:38,104:INFO:letsencrypt.auth_handler:http-01 challenge for hoekoudishetbuiten.nl
2015-12-01 17:14:38,121:INFO:letsencrypt.auth_handler:tls-sni-01 challenge for www.hoekoudishetbuiten.nl
2015-12-01 17:14:38,162:INFO:letsencrypt.auth_handler:Waiting for verification...
2015-12-01 17:14:38,177:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs", "type": "http-01", "resource": "challenge"}
2015-12-01 17:14:38,179:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), jwk=None, kid=None, typ=None, x5t=None, x5u=None, alg=None, cty=None, x5tS256=None, jku=None, crit=()
2015-12-01 17:14:38,181:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, typ=None, x5t=None, nonce=None, x5u=None, cty=None, x5tS256=None, jku=None
2015-12-01 17:14:38,182:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "1-X80rgLTrhGuEQIYGArPNqwNDYYKwbHvbJGxnG-YZqoosfhWfn2dKPaIIN6x2Gvnsk_YjS65f2eVq7RR8KE77Q0RhxH3kzG3TY5qjYdfeEh-rGZBNUPyfDMtdKOnL6NQO2rS29cFaIPaGKxd4tGLCmSMRA0NixRiPeZJCbFvH61m7YxgHmJyPQjyx-7-66QCUDmptBt2wpFEM6oCwe8zwczwowR-CU4oaYgWH_70lhTZYMsd4-tEziRKkdG37d7AtbAj3YyMp70yHdz6Xm48VrFqXAhhCgxP7chPfZ0-J-yRSceoBOjg_8qrSZIDeoIPwPIWMgsmOL13vPEtsKrZw"}}, "protected": "eyJub25jZSI6ICJobDhQQ0hPamFRcTBWMGtwVmwtWV9XWko2UHdrYTJCdlJBblh1TU1BTVBvIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogImVYQVVVWkZQTDg2eVd2X2ZRYkFkWEVVWER5aUxlaExrWU5pMzFCSDNVY1UuM3E2cVNwanZDa29XNldqLXc0VFhodDBPYjJpMy0tNlctV1VTQjk1YU5mcyIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "yx4LiJY0bvffXtKqPy6hMyF60oeaXZawrBhYmmVcg4cYO38VX9Jl9CpvBStaUvJbLUWIEOH3cDiAEZ6A5uwtJN9E9Pj4a5Gcy1NEtsL8zi1cB-fifJ2llyYELr3l9bc2BTPrN9moFwQbkkf-PrkwVlyhVU95_2K0wECAsSvOwGzoaWgOHouxkCsblXD0IMZ6EHL09JHzwgM40aYrwri_7IGIGglD5kRdqD74MyfFolLE8ntbaD6srrcSN7FaZGfVpBWBE36fRQ3--GHv6-f0oI6QhuWiTHDGY_0GFGU4yzIKwbezFKWC05EzOuK80tvfe8c1Q2OR5g468yFKHDwMPw"}'}
2015-12-01 17:14:38,183:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:14:49,469:DEBUG:acme.standalone:149.210.241.202 - - Incoming request
2015-12-01 17:14:49,470:DEBUG:acme.standalone:149.210.241.202 - - "GET / HTTP/1.1" 200 -
2015-12-01 17:17:57,836:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56380)
2015-12-01 17:17:57,843:DEBUG:acme.crypto_util:Server name (blog.nillus.net) not recognized, dropping SSL
2015-12-01 17:17:57,880:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56381)
2015-12-01 17:17:57,931:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56382)
2015-12-01 17:18:44,035:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56385)
2015-12-01 17:18:44,036:DEBUG:acme.crypto_util:Server name (oldskool.nu) not recognized, dropping SSL
2015-12-01 17:18:44,057:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56386)
2015-12-01 17:18:44,077:DEBUG:acme.crypto_util:Performing handshake with ('80.114.133.97', 56387)
2015-12-01 17:18:51,792:DEBUG:acme.standalone:180.76.15.148 - - Incoming request
2015-12-01 17:18:51,793:DEBUG:acme.standalone:180.76.15.148 - - "GET / HTTP/1.1" 200 -
2015-12-01 17:18:53,200:DEBUG:acme.standalone:80.114.133.97 - - Incoming request
2015-12-01 17:18:53,200:DEBUG:acme.standalone:80.114.133.97 - - "GET / HTTP/1.1" 200 -
2015-12-01 17:18:53,743:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708 HTTP/1.1" 202 311
2015-12-01 17:18:53,747:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '311', 'Expires': 'Tue, 01 Dec 2015 17:18:54 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:18:54 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'lsvYTtjw3RGUjJMUncpJ2NPqItN6TgWPULOftLrtj34'}. Content: '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","keyAuthorization":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs"}'
2015-12-01 17:18:53,748:DEBUG:acme.client:Storing nonce: '\x96\xcb\xd8N\xd8\xf0\xdd\x11\x94\x8c\x93\x14\x9d\xcaI\xd8\xd3\xea"\xd3zN\x05\x8fP\xb3\x9f\xb4\xba\xed\x8f~'
2015-12-01 17:18:53,748:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '311', 'Expires': 'Tue, 01 Dec 2015 17:18:54 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:18:54 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'lsvYTtjw3RGUjJMUncpJ2NPqItN6TgWPULOftLrtj34'}): '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","keyAuthorization":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs"}'
2015-12-01 17:18:53,749:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs", "type": "tls-sni-01", "resource": "challenge"}
2015-12-01 17:18:53,751:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), jwk=None, kid=None, typ=None, x5t=None, x5u=None, alg=None, cty=None, x5tS256=None, jku=None, crit=()
2015-12-01 17:18:53,756:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, typ=None, x5t=None, nonce=None, x5u=None, cty=None, x5tS256=None, jku=None
2015-12-01 17:18:53,756:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "1-X80rgLTrhGuEQIYGArPNqwNDYYKwbHvbJGxnG-YZqoosfhWfn2dKPaIIN6x2Gvnsk_YjS65f2eVq7RR8KE77Q0RhxH3kzG3TY5qjYdfeEh-rGZBNUPyfDMtdKOnL6NQO2rS29cFaIPaGKxd4tGLCmSMRA0NixRiPeZJCbFvH61m7YxgHmJyPQjyx-7-66QCUDmptBt2wpFEM6oCwe8zwczwowR-CU4oaYgWH_70lhTZYMsd4-tEziRKkdG37d7AtbAj3YyMp70yHdz6Xm48VrFqXAhhCgxP7chPfZ0-J-yRSceoBOjg_8qrSZIDeoIPwPIWMgsmOL13vPEtsKrZw"}}, "protected": "eyJub25jZSI6ICJsc3ZZVHRqdzNSR1VqSk1VbmNwSjJOUHFJdE42VGdXUFVMT2Z0THJ0ajM0In0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogInNpZmZsdmJNZ2h2bVNJSU5jblJDNlpoUHFlRkFaSnFuWlZ0SUVTaVFGWU0uM3E2cVNwanZDa29XNldqLXc0VFhodDBPYjJpMy0tNlctV1VTQjk1YU5mcyIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "LaNcWctavHuOV4AwxVm6skHD801nFZW7pS0CsT_aw94U59TrEc0T0M-I5NX3YeD_UAVWBx2xpk50rf8DZpBN7PUpKNraf0HSSLeH1RFGw0Y5WUM9a6KyiE-yIQ9jcIrBvY8Oq4p6K2KfVUg-a1WNK9eh5pzTpeZZ6yeP-p63ccil8Dv_RAovo8P9v4HgZK84C3LzCVBGQSooi3_gLng-9xt0-6obkidYtB2em_NP4baMN4C7s_lEipoDVoIEuswXqEMreYeowbx7fjaNGlWGIyDS7eMQv6g5d714fHcWQeXo1HRBp4Ajx6bQFIWiQrOhYmSCPeEAycNm47gEvlT3kQ"}'}
2015-12-01 17:18:53,758:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:18:53,901:DEBUG:acme.standalone:180.76.15.27 - - Incoming request
2015-12-01 17:18:53,901:DEBUG:acme.standalone:180.76.15.27 - - "GET / HTTP/1.1" 200 -
2015-12-01 17:18:54,329:DEBUG:acme.standalone:66.133.109.36 - - Incoming request
2015-12-01 17:18:54,330:DEBUG:acme.standalone:66.133.109.36 - - Serving HTTP01 with token u'eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU'
2015-12-01 17:18:54,330:DEBUG:acme.standalone:66.133.109.36 - - "GET /.well-known/acme-challenge/eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU HTTP/1.1" 200 -
2015-12-01 17:19:00,915:DEBUG:acme.standalone:80.114.133.97 - - Incoming request
2015-12-01 17:19:00,915:DEBUG:acme.standalone:80.114.133.97 - - "GET / HTTP/1.1" 200 -
2015-12-01 17:19:14,339:DEBUG:acme.standalone:80.114.133.97 - - Incoming request
2015-12-01 17:19:15,472:DEBUG:acme.standalone:80.114.133.97 - - code 400, message Bad request syntax ('d')
2015-12-01 17:19:15,472:DEBUG:acme.standalone:80.114.133.97 - - "d" 400 -
2015-12-01 17:23:09,102:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756 HTTP/1.1" 202 314
2015-12-01 17:23:09,106:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '314', 'Expires': 'Tue, 01 Dec 2015 17:23:10 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:23:10 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'aoMMgqnC3PoA_WF3RJL9AaoCLNm8aUWgTSeemlYwAvQ'}. Content: '{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM","keyAuthorization":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs"}'
2015-12-01 17:23:09,108:DEBUG:acme.client:Storing nonce: "j\x83\x0c\x82\xa9\xc2\xdc\xfa\x00\xfdawD\x92\xfd\x01\xaa\x02,\xd9\xbciE\xa0M'\x9e\x9aV0\x02\xf4"
2015-12-01 17:23:09,108:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '314', 'Expires': 'Tue, 01 Dec 2015 17:23:10 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:23:10 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'aoMMgqnC3PoA_WF3RJL9AaoCLNm8aUWgTSeemlYwAvQ'}): '{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM","keyAuthorization":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs"}'
2015-12-01 17:23:10,626:DEBUG:acme.crypto_util:Performing handshake with ('66.133.109.36', 43821)
2015-12-01 17:23:10,796:DEBUG:acme.standalone:66.133.109.36 - - Incoming request
2015-12-01 17:23:12,112:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk. args: (), kwargs: {}
2015-12-01 17:23:12,113:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:27:08,009:DEBUG:acme.standalone:192.187.126.164 - - Incoming request
2015-12-01 17:27:08,009:DEBUG:acme.standalone:192.187.126.164 - - "GET /admincwc/fck/editor/ HTTP/1.1" 404 -
2015-12-01 17:27:27,425:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk HTTP/1.1" 200 818
2015-12-01 17:27:27,428:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '818', 'Expires': 'Tue, 01 Dec 2015 17:27:28 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:27:28 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'NwuJVFSxQqRWlsamlxbw2R9-2YnZQKgx4SY98gUmXU8'}. Content: '{"identifier":{"type":"dns","value":"www.hoekoudishetbuiten.nl"},"status":"valid","expires":"2016-09-26T17:23:12Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509755","token":"C2OoL7AKyEP-DqOZseF7-A9aRN-czfLEIiNmmhRlvCQ"},{"type":"tls-sni-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM","keyAuthorization":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs","validationRecord":[{"hostname":"www.hoekoudishetbuiten.nl","port":"443","addressesResolved":["149.210.217.208"],"addressUsed":"149.210.217.208"}]}],"combinations":[[1],[0]]}'
2015-12-01 17:27:27,428:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '818', 'Expires': 'Tue, 01 Dec 2015 17:27:28 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:27:28 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'NwuJVFSxQqRWlsamlxbw2R9-2YnZQKgx4SY98gUmXU8'}): '{"identifier":{"type":"dns","value":"www.hoekoudishetbuiten.nl"},"status":"valid","expires":"2016-09-26T17:23:12Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509755","token":"C2OoL7AKyEP-DqOZseF7-A9aRN-czfLEIiNmmhRlvCQ"},{"type":"tls-sni-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/_SLG8wXxw6xBVV3fgpvx72TcprRXEwrhdTc94TB4Fuk/509756","token":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM","keyAuthorization":"sifflvbMghvmSIINcnRC6ZhPqeFAZJqnZVtIESiQFYM.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs","validationRecord":[{"hostname":"www.hoekoudishetbuiten.nl","port":"443","addressesResolved":["149.210.217.208"],"addressUsed":"149.210.217.208"}]}],"combinations":[[1],[0]]}'
2015-12-01 17:27:27,429:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0. args: (), kwargs: {}
2015-12-01 17:27:27,430:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:31:42,473:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0 HTTP/1.1" 200 917
2015-12-01 17:31:42,476:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '917', 'Expires': 'Tue, 01 Dec 2015 17:31:43 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:31:43 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': '79qY-22X-uk9aOxL99M8lSO8PG_RjKRn37vC0_ROs4k'}. Content: '{"identifier":{"type":"dns","value":"hoekoudishetbuiten.nl"},"status":"valid","expires":"2016-09-26T17:18:55Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509707","token":"E_tpos5vYMMMtBC2Eit2442GuL1yFbF-GVNQ6OyjzDk"},{"type":"http-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","keyAuthorization":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs","validationRecord":[{"url":"http://hoekoudishetbuiten.nl/.well-known/acme-challenge/eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","hostname":"hoekoudishetbuiten.nl","port":"80","addressesResolved":["149.210.217.208"],"addressUsed":"149.210.217.208"}]}],"combinations":[[1],[0]]}'
2015-12-01 17:31:42,477:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '917', 'Expires': 'Tue, 01 Dec 2015 17:31:43 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:31:43 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': '79qY-22X-uk9aOxL99M8lSO8PG_RjKRn37vC0_ROs4k'}): '{"identifier":{"type":"dns","value":"hoekoudishetbuiten.nl"},"status":"valid","expires":"2016-09-26T17:18:55Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509707","token":"E_tpos5vYMMMtBC2Eit2442GuL1yFbF-GVNQ6OyjzDk"},{"type":"http-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/gz8wRnxhTe0ollQQrgvb5fE0dP8tIWhCBNYJ2TV9XP0/509708","token":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","keyAuthorization":"eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU.3q6qSpjvCkoW6Wj-w4TXht0Ob2i3--6W-WUSB95aNfs","validationRecord":[{"url":"http://hoekoudishetbuiten.nl/.well-known/acme-challenge/eXAUUZFPL86yWv_fQbAdXEUXDyiLehLkYNi31BH3UcU","hostname":"hoekoudishetbuiten.nl","port":"80","addressesResolved":["149.210.217.208"],"addressUsed":"149.210.217.208"}]}],"combinations":[[1],[0]]}'
2015-12-01 17:31:42,478:INFO:letsencrypt.auth_handler:Cleaning up challenges
2015-12-01 17:31:42,494:DEBUG:letsencrypt.plugins.standalone:Stopping server at 0.0.0.0:80...
2015-12-01 17:31:42,904:DEBUG:letsencrypt.plugins.standalone:Stopping server at 0.0.0.0:443...
2015-12-01 17:31:43,006:DEBUG:acme.client:Requesting issuance...
2015-12-01 17:31:43,007:DEBUG:acme.client:Serialized JSON: {"resource": "new-cert", "csr": "MIICszCCAZsCAQAwIDEeMBwGA1UEAwwVaG9la291ZGlzaGV0YnVpdGVuLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleX2s3DoCEFjZ6MVWTdsUE7XZB445VlQmmISZFXG5COeRotvzWUTH5GW7UF1uCZqsZ3oBuSpRNt-5eILlPzgsKIhPSU9DUxMAflYjwHR9DkebmGdUR8yfeM2x9WNKYhYEk6EOUJ2TXzYjGYBlCfCIGexlzCkOVLYnAOeeQxucCACio07R_hTQvlSGYu6C0HR0PymF7MKpyKb1GWHUkKmIP6XMUf5XOx9S9OGt1MzwM18sG4Unlxk5lovNYP__zYGFzgw_n7GPBqhOv582uelwx6bxfbGRBi_lwXHOKcYeeplpqM5Wf0bWQcSm4_G-LB5i6LIkHEHZQIEJxqRgj30EQIDAQABoE4wTAYJKoZIhvcNAQkOMT8wPTA7BgNVHREENDAyghVob2Vrb3VkaXNoZXRidWl0ZW4ubmyCGXd3dy5ob2Vrb3VkaXNoZXRidWl0ZW4ubmwwDQYJKoZIhvcNAQELBQADggEBAG_BEkx3D9XU_VS4bVmaju572jQELIJop_lgUf0IpQVN4PePCZr4suMivUg-IIa4e3i1Hhkd65HGbNQCuYEOCJWzbVROnclY9UL_zLZRyq06Q-LKarAN2uaygvqpOXF7gV_hLs7cXFb6UKvWk_f36PB9thyvbDiy5BgtpQOqIZrmZCIA3u667S2HuqXRx1SKRgRk7nXthc8KQ_GD3EbHIPAm48iI_lgbKk0ggaajVkf7ZzmNuJaJmU1x5Ji8cIGGrKoYJOOCdx8Swy4TVnNd01oimfrP3ggcbmgr1QAELgbqimORYGtiGnrO-VBWI0zo5eK_6G3Olxbk8KhoI_2fKuc"}
2015-12-01 17:31:43,009:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), jwk=None, kid=None, typ=None, x5t=None, x5u=None, alg=None, cty=None, x5tS256=None, jku=None, crit=()
2015-12-01 17:31:43,014:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, typ=None, x5t=None, nonce=None, x5u=None, cty=None, x5tS256=None, jku=None
2015-12-01 17:31:43,014:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert. args: (), kwargs: {'headers': {'Accept': 'application/pkix-cert'}, 'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "1-X80rgLTrhGuEQIYGArPNqwNDYYKwbHvbJGxnG-YZqoosfhWfn2dKPaIIN6x2Gvnsk_YjS65f2eVq7RR8KE77Q0RhxH3kzG3TY5qjYdfeEh-rGZBNUPyfDMtdKOnL6NQO2rS29cFaIPaGKxd4tGLCmSMRA0NixRiPeZJCbFvH61m7YxgHmJyPQjyx-7-66QCUDmptBt2wpFEM6oCwe8zwczwowR-CU4oaYgWH_70lhTZYMsd4-tEziRKkdG37d7AtbAj3YyMp70yHdz6Xm48VrFqXAhhCgxP7chPfZ0-J-yRSceoBOjg_8qrSZIDeoIPwPIWMgsmOL13vPEtsKrZw"}}, "protected": "eyJub25jZSI6ICJhb01NZ3FuQzNQb0FfV0YzUkpMOUFhb0NMTm04YVVXZ1RTZWVtbFl3QXZRIn0", "payload": "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", "signature": "nisLphx2nknWPLerdO3VUhiK1aoNX8S-PAIv2mahZnesBYY_2jJvhJTYNM28VrSfH0Hwxm38UeewUUw4KKdH50DWEdFeeQZMr4ioComvYp0z7XMNraZzvcK7iG-Nf4006SOz-bjADsIMNgKNFyrF3EShGn6pYntGMga0X0jf5K15P0Ul5uRhNS4eDlgZYnNPwFOpvjoIkH7fleLdm4W4TRivKgZSBn_blz2sUGmFglSBx0-THd3JC2bFV7cjK-zz6CzlNvihJklrWjvN6gZq2dUNNBnCgMA_RSkZ1VN3VBjSRtK2IO_9RcnV_s5CoMQ74mMPBI0Ei_pGJ91fiFSnbg"}'}
2015-12-01 17:31:43,017:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:35:58,102:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-cert HTTP/1.1" 201 1328
2015-12-01 17:35:58,105:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '1328', 'Expires': 'Tue, 01 Dec 2015 17:35:59 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/cert/015f82c4974deb26e6b5c527bda0efa35dba', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:35:59 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'XaJ2Gk5qS0u6csIRBeqhoscBAl5nZaDYuLMRd0xXmL0'}. Content: '0\x82\x05,0\x82\x04\x14\xa0\x03\x02\x01\x02\x02\x12\x01_\x82\xc4\x97M\xeb&\xe6\xb5\xc5\'\xbd\xa0\xef\xa3]\xba0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X10\x1e\x17\r151201163600Z\x17\r160229163600Z0 1\x1e0\x1c\x06\x03U\x04\x03\x13\x15hoekoudishetbuiten.nl0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x95\xe5\xf6\xb3p\xe8\x08Acg\xa3\x15Y7lPN\xd7d\x1e8\xe5YP\x9ab\x12dU\xc6\xe4#\x9eF\x8bo\xcde\x13\x1f\x91\x96\xedAu\xb8&j\xb1\x9d\xe8\x06\xe4\xa9D\xdb~\xe5\xe2\x0b\x94\xfc\xe0\xb0\xa2!=%=\rLL\x01\xf9X\x8f\x01\xd1\xf49\x1ena\x9dQ\x1f2}\xe36\xc7\xd5\x8d)\x88X\x12N\x849BvM|\xd8\x8cf\x01\x94\'\xc2 g\xb1\x970\xa49R\xd8\x9c\x03\x9ey\x0cnp \x02\x8a\x8d;G\xf8SB\xf9R\x19\x8b\xba\x0bA\xd1\xd0\xfc\xa6\x17\xb3\n\xa7"\x9b\xd4e\x87RB\xa6 \xfe\x971G\xf9\\\xec}K\xd3\x86\xb7S3\xc0\xcd|\xb0n\x14\x9e\\d\xe6Z/5\x83\xff\xff6\x06\x1780\xfe~\xc6<\x1a\xa1:\xfe|\xda\xe7\xa5\xc3\x1e\x9b\xc5\xf6\xc6D\x18\xbf\x97\x05\xc78\xa7\x18y\xeae\xa6\xa39Y\xfd\x1bY\x07\x12\x9b\x8f\xc6\xf8\xb0y\x8b\xa2\xc8\x90q\x07e\x02\x04\'\x1a\x91\x82=\xf4\x11\x02\x03\x01\x00\x01\xa3\x82\x0240\x82\x0200\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x05\xa00\x1d\x06\x03U\x1d%\x04\x160\x14\x06\x08+\x06\x01\x05\x05\x07\x03\x01\x06\x08+\x06\x01\x05\x05\x07\x03\x020\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\x83;\xc0\xbd\xc8\xe3\x0f/\xb8\xf0"0\x97\xf5\x16\xa5QK;\xb90\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10p\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04d0b0/\x06\x08+\x06\x01\x05\x05\x070\x01\x86#http://ocsp.int-x1.letsencrypt.org/0/\x06\x08+\x06\x01\x05\x05\x070\x02\x86#http://cert.int-x1.letsencrypt.org/0;\x06\x03U\x1d\x11\x04402\x82\x15hoekoudishetbuiten.nl\x82\x19www.hoekoudishetbuiten.nl0\x82\x01\x00\x06\x03U\x1d \x04\x81\xf80\x81\xf50\n\x06\x06g\x81\x0c\x01\x02\x010\x000\x81\xe6\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x010\x81\xd60&\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16\x1ahttp://cps.letsencrypt.org0\x81\xab\x06\x08+\x06\x01\x05\x05\x07\x02\x020\x81\x9e\x0c\x81\x9bThis Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00$\xe6\xdb\xf5\x90+\x19nYi\x84`\xf5\xee\x04\xd3-z\xfb,uh\xa4\xabn\x1f\x82\xa2`\xffik\xf3\xdcOO\x0e\x13\x0fJ\xef\xad\xd8\xae\xaa\xe0FB\xcc\xa8\xfc\x830z/\x9d\xddR\xef6\xbcX\xda\x11\x12\xbbj\xef6v\xf2\x9eP\x05\xa57!J\x97\xda\x91\x99\x0fw\x13\x80\xad\xdf\xce!\xa3\xe4\xb9\n\xede\t\x98\xcab\xe0\x8bm\xdb\xb7\r\x9an\xd3\x82yt\x995\x8e@\xf5\x99\x8eH\x04\x12\xd1\xd8y[\'<\t\'\nY\xady\xedP8+V=6HS2.:_v\x1foP\x10B\xe5\x087\xb2\x8aH\xc1gU\x9d\xde\xd8\x01\xe0,\xb6T_?\x84\xdc\xc4",H\x95\xf93\x11<\x00\x18\x8cy\xd8\xcd\x7fs\x03b\r\n0\x93\x08Y\x05\xe7\x14\xf3w\x94\xac{m\xc2^q\x1c\xb1I?8Q\x9c\r,t\x80g[\xf0\xd3<\x0bQ\xe9\x18N\x9d\x01/\x0b[\xa9\xaajp&C\xbay\xba5\xdf\xf5T\x00\x98\xf0\xef\xf6\xb5'
2015-12-01 17:35:58,106:DEBUG:acme.client:Storing nonce: ']\xa2v\x1aNjKK\xbar\xc2\x11\x05\xea\xa1\xa2\xc7\x01\x02^ge\xa0\xd8\xb8\xb3\x11wLW\x98\xbd'
2015-12-01 17:35:58,107:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '1328', 'Expires': 'Tue, 01 Dec 2015 17:35:59 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/cert/015f82c4974deb26e6b5c527bda0efa35dba', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:35:59 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'XaJ2Gk5qS0u6csIRBeqhoscBAl5nZaDYuLMRd0xXmL0'}): '0\x82\x05,0\x82\x04\x14\xa0\x03\x02\x01\x02\x02\x12\x01_\x82\xc4\x97M\xeb&\xe6\xb5\xc5\'\xbd\xa0\xef\xa3]\xba0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X10\x1e\x17\r151201163600Z\x17\r160229163600Z0 1\x1e0\x1c\x06\x03U\x04\x03\x13\x15hoekoudishetbuiten.nl0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x95\xe5\xf6\xb3p\xe8\x08Acg\xa3\x15Y7lPN\xd7d\x1e8\xe5YP\x9ab\x12dU\xc6\xe4#\x9eF\x8bo\xcde\x13\x1f\x91\x96\xedAu\xb8&j\xb1\x9d\xe8\x06\xe4\xa9D\xdb~\xe5\xe2\x0b\x94\xfc\xe0\xb0\xa2!=%=\rLL\x01\xf9X\x8f\x01\xd1\xf49\x1ena\x9dQ\x1f2}\xe36\xc7\xd5\x8d)\x88X\x12N\x849BvM|\xd8\x8cf\x01\x94\'\xc2 g\xb1\x970\xa49R\xd8\x9c\x03\x9ey\x0cnp \x02\x8a\x8d;G\xf8SB\xf9R\x19\x8b\xba\x0bA\xd1\xd0\xfc\xa6\x17\xb3\n\xa7"\x9b\xd4e\x87RB\xa6 \xfe\x971G\xf9\\\xec}K\xd3\x86\xb7S3\xc0\xcd|\xb0n\x14\x9e\\d\xe6Z/5\x83\xff\xff6\x06\x1780\xfe~\xc6<\x1a\xa1:\xfe|\xda\xe7\xa5\xc3\x1e\x9b\xc5\xf6\xc6D\x18\xbf\x97\x05\xc78\xa7\x18y\xeae\xa6\xa39Y\xfd\x1bY\x07\x12\x9b\x8f\xc6\xf8\xb0y\x8b\xa2\xc8\x90q\x07e\x02\x04\'\x1a\x91\x82=\xf4\x11\x02\x03\x01\x00\x01\xa3\x82\x0240\x82\x0200\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x05\xa00\x1d\x06\x03U\x1d%\x04\x160\x14\x06\x08+\x06\x01\x05\x05\x07\x03\x01\x06\x08+\x06\x01\x05\x05\x07\x03\x020\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\x83;\xc0\xbd\xc8\xe3\x0f/\xb8\xf0"0\x97\xf5\x16\xa5QK;\xb90\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10p\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04d0b0/\x06\x08+\x06\x01\x05\x05\x070\x01\x86#http://ocsp.int-x1.letsencrypt.org/0/\x06\x08+\x06\x01\x05\x05\x070\x02\x86#http://cert.int-x1.letsencrypt.org/0;\x06\x03U\x1d\x11\x04402\x82\x15hoekoudishetbuiten.nl\x82\x19www.hoekoudishetbuiten.nl0\x82\x01\x00\x06\x03U\x1d \x04\x81\xf80\x81\xf50\n\x06\x06g\x81\x0c\x01\x02\x010\x000\x81\xe6\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x010\x81\xd60&\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16\x1ahttp://cps.letsencrypt.org0\x81\xab\x06\x08+\x06\x01\x05\x05\x07\x02\x020\x81\x9e\x0c\x81\x9bThis Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00$\xe6\xdb\xf5\x90+\x19nYi\x84`\xf5\xee\x04\xd3-z\xfb,uh\xa4\xabn\x1f\x82\xa2`\xffik\xf3\xdcOO\x0e\x13\x0fJ\xef\xad\xd8\xae\xaa\xe0FB\xcc\xa8\xfc\x830z/\x9d\xddR\xef6\xbcX\xda\x11\x12\xbbj\xef6v\xf2\x9eP\x05\xa57!J\x97\xda\x91\x99\x0fw\x13\x80\xad\xdf\xce!\xa3\xe4\xb9\n\xede\t\x98\xcab\xe0\x8bm\xdb\xb7\r\x9an\xd3\x82yt\x995\x8e@\xf5\x99\x8eH\x04\x12\xd1\xd8y[\'<\t\'\nY\xady\xedP8+V=6HS2.:_v\x1foP\x10B\xe5\x087\xb2\x8aH\xc1gU\x9d\xde\xd8\x01\xe0,\xb6T_?\x84\xdc\xc4",H\x95\xf93\x11<\x00\x18\x8cy\xd8\xcd\x7fs\x03b\r\n0\x93\x08Y\x05\xe7\x14\xf3w\x94\xac{m\xc2^q\x1c\xb1I?8Q\x9c\r,t\x80g[\xf0\xd3<\x0bQ\xe9\x18N\x9d\x01/\x0b[\xa9\xaajp&C\xbay\xba5\xdf\xf5T\x00\x98\xf0\xef\xf6\xb5'
2015-12-01 17:35:58,142:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/issuer-cert. args: (), kwargs: {'headers': {'Accept': 'application/pkix-cert'}}
2015-12-01 17:35:58,144:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-01 17:40:12,935:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/issuer-cert HTTP/1.1" 200 1196
2015-12-01 17:40:12,939:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1196', 'Expires': 'Tue, 01 Dec 2015 17:40:13 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:40:13 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'LvhGLzuKqmaplruH2T-xFl9B9xgqM7UQSVG-ILE2x58'}. Content: '0\x82\x04\xa80\x82\x03\x90\xa0\x03\x02\x01\x02\x02\x11\x00\x98\x13\xf4u\x13\xe5u\x0bC\xe7C\x1e\x97\x1eD\xbd0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000?1$0"\x06\x03U\x04\n\x13\x1bDigital Signature Trust Co.1\x170\x15\x06\x03U\x04\x03\x13\x0eDST Root CA X30\x1e\x17\r151019223336Z\x17\r201019223336Z0J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X10\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x9c\xd3\x0c\xf0Z\xe5.G\xb7r]7\x83\xb3hc0\xea\xd75&\x19%\xe1\xbd\xbe5\xf1p\x92/\xb7\xb8KA\x05\xab\xa9\x9e5\x08X\xec\xb1*\xc4h\x87\x0b\xa3\xe3u\xe4\xe6\xf3\xa7bq\xbay\x81`\x1f\xd7\x91\x9a\x9f\xf3\xd0xgq\xc8i\x0e\x95\x91\xcf\xfe\xe6\x99\xe9`<H\xcc~\xcaMw\x12$\x9dG\x1bZ\xeb\xb9\xec\x1e7\x00\x1c\x9c\xac{\xa7\x05\xea\xceJ\xeb\xbdA\xe56\x98\xb9\xcb\xfdm<\x96h\xdf#*B\x90\x0c\x86tg\xc8\x7f\xa5\x9a\xb8Ra\x14\x13?e\xe9\x82\x87\xcb\xdb\xfa\x0eV\xf6\x86\x89\xf3\x85?\x97\x86\xaf\xb0\xdc\x1a\xefk\r\x95\x16}\xc4+\xa0e\xb2\x99\x046u\x80k\xacJ\xf3\x1b\x90Ix/\xa2\x96O* %)\x04\xc6t\xc0\xd01\xcd\x8f18\x95\x16\xba\xa83\xb8C\xf1\xb1\x1f\xc30\x7f\xa2y1\x13=-6\xf8\xe3\xfc\xf23j\xb991\xc5\xaf\xc4\x8d\r\x1dd\x163\xaa\xfa\x84)\xb6\xd4\x0b\xc0\xd8}\xc3\x93\x02\x03\x01\x00\x01\xa3\x82\x01\x920\x82\x01\x8e0\x12\x06\x03U\x1d\x13\x01\x01\xff\x04\x080\x06\x01\x01\xff\x02\x01\x000\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\x860\x7f\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04s0q02\x06\x08+\x06\x01\x05\x05\x070\x01\x86&http://isrg.trustid.ocsp.identrust.com0;\x06\x08+\x06\x01\x05\x05\x070\x02\x86/http://apps.identrust.com/roots/dstrootcax3.p7c0\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xc4\xa7\xb1\xa4{,q\xfa\xdb\xe1K\x90u\xff\xc4\x15`\x85\x89\x100T\x06\x03U\x1d \x04M0K0\x08\x06\x06g\x81\x0c\x01\x02\x010?\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x01000.\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16"http://cps.root-x1.letsencrypt.org0<\x06\x03U\x1d\x1f\x0450301\xa0/\xa0-\x86+http://crl.identrust.com/DSTROOTCAX3CRL.crl0\x13\x06\x03U\x1d\x1e\x04\x0c0\n\xa1\x080\x06\x82\x04.mil0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xd1\xc8"K\xac\xef\xe3\t\x89\x96P\xb1\x8dxp*\x01\x1bX]\xbfBv\xd3\xf1rZ\x8ei\xa6w\xe3/\xbf\x12\xdaN,\xd8b\xd1\'\xb8\x83\xf5\x90\xca\x12\xb9\xdd\xbd\xb3E\x19\xcb\x16\xfb\xd9\n+\xf4\xe7cma\xa7\x80\xdd!;\xfcK\xd6XC\xba\x1a\xa2\xab;\x1f\x08D1\x8fl\x89\xb1\x03\xe1\xa5\xf0\xd3\xdck%\x94\xc2\xf72\xb5\xb8\x87\xd6\xea\xde]\x1d\x08\xee9k\xfe\x1cz\x16f{\xa9\xcb\x1al\x11IDhV\xfe\xfd \x88\xe0\xa0\x92\x05\xd0,c\x10\x1c\xb0v\x08\xe7\x1cD#\x82\xee\xb4zz\xb3s\x93\xd8[\x8e\xf7E\x9fv\xc2$\xea\xae\xfc8\xc4\x9d\x9f\xce\xf9l\xd8\xdd\x05\x80*\xc5Jv\xfc\xb1\x08\x1d\xf0\xc1\x90\xba\x10\xcfHE&l\x00m\x86\xa1\xa8\xa6\x8b\x9f\xbd\xcf\x00\t\xb5_i#\x7f\\<\r\xd9\xe4i\xb3\x8b\x19\xe3\x95r?KC\xeb:\xee\xf0r\x93\x1e\x1a\x9d8\xd4FF\xeaf\xc9T\x11K\'\xdaNqz\xe6\xb6\xcdI'
2015-12-01 17:40:12,940:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1196', 'Expires': 'Tue, 01 Dec 2015 17:40:13 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 01 Dec 2015 17:40:13 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'LvhGLzuKqmaplruH2T-xFl9B9xgqM7UQSVG-ILE2x58'}): '0\x82\x04\xa80\x82\x03\x90\xa0\x03\x02\x01\x02\x02\x11\x00\x98\x13\xf4u\x13\xe5u\x0bC\xe7C\x1e\x97\x1eD\xbd0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000?1$0"\x06\x03U\x04\n\x13\x1bDigital Signature Trust Co.1\x170\x15\x06\x03U\x04\x03\x13\x0eDST Root CA X30\x1e\x17\r151019223336Z\x17\r201019223336Z0J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X10\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x9c\xd3\x0c\xf0Z\xe5.G\xb7r]7\x83\xb3hc0\xea\xd75&\x19%\xe1\xbd\xbe5\xf1p\x92/\xb7\xb8KA\x05\xab\xa9\x9e5\x08X\xec\xb1*\xc4h\x87\x0b\xa3\xe3u\xe4\xe6\xf3\xa7bq\xbay\x81`\x1f\xd7\x91\x9a\x9f\xf3\xd0xgq\xc8i\x0e\x95\x91\xcf\xfe\xe6\x99\xe9`<H\xcc~\xcaMw\x12$\x9dG\x1bZ\xeb\xb9\xec\x1e7\x00\x1c\x9c\xac{\xa7\x05\xea\xceJ\xeb\xbdA\xe56\x98\xb9\xcb\xfdm<\x96h\xdf#*B\x90\x0c\x86tg\xc8\x7f\xa5\x9a\xb8Ra\x14\x13?e\xe9\x82\x87\xcb\xdb\xfa\x0eV\xf6\x86\x89\xf3\x85?\x97\x86\xaf\xb0\xdc\x1a\xefk\r\x95\x16}\xc4+\xa0e\xb2\x99\x046u\x80k\xacJ\xf3\x1b\x90Ix/\xa2\x96O* %)\x04\xc6t\xc0\xd01\xcd\x8f18\x95\x16\xba\xa83\xb8C\xf1\xb1\x1f\xc30\x7f\xa2y1\x13=-6\xf8\xe3\xfc\xf23j\xb991\xc5\xaf\xc4\x8d\r\x1dd\x163\xaa\xfa\x84)\xb6\xd4\x0b\xc0\xd8}\xc3\x93\x02\x03\x01\x00\x01\xa3\x82\x01\x920\x82\x01\x8e0\x12\x06\x03U\x1d\x13\x01\x01\xff\x04\x080\x06\x01\x01\xff\x02\x01\x000\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\x860\x7f\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04s0q02\x06\x08+\x06\x01\x05\x05\x070\x01\x86&http://isrg.trustid.ocsp.identrust.com0;\x06\x08+\x06\x01\x05\x05\x070\x02\x86/http://apps.identrust.com/roots/dstrootcax3.p7c0\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xc4\xa7\xb1\xa4{,q\xfa\xdb\xe1K\x90u\xff\xc4\x15`\x85\x89\x100T\x06\x03U\x1d \x04M0K0\x08\x06\x06g\x81\x0c\x01\x02\x010?\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x01000.\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16"http://cps.root-x1.letsencrypt.org0<\x06\x03U\x1d\x1f\x0450301\xa0/\xa0-\x86+http://crl.identrust.com/DSTROOTCAX3CRL.crl0\x13\x06\x03U\x1d\x1e\x04\x0c0\n\xa1\x080\x06\x82\x04.mil0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xd1\xc8"K\xac\xef\xe3\t\x89\x96P\xb1\x8dxp*\x01\x1bX]\xbfBv\xd3\xf1rZ\x8ei\xa6w\xe3/\xbf\x12\xdaN,\xd8b\xd1\'\xb8\x83\xf5\x90\xca\x12\xb9\xdd\xbd\xb3E\x19\xcb\x16\xfb\xd9\n+\xf4\xe7cma\xa7\x80\xdd!;\xfcK\xd6XC\xba\x1a\xa2\xab;\x1f\x08D1\x8fl\x89\xb1\x03\xe1\xa5\xf0\xd3\xdck%\x94\xc2\xf72\xb5\xb8\x87\xd6\xea\xde]\x1d\x08\xee9k\xfe\x1cz\x16f{\xa9\xcb\x1al\x11IDhV\xfe\xfd \x88\xe0\xa0\x92\x05\xd0,c\x10\x1c\xb0v\x08\xe7\x1cD#\x82\xee\xb4zz\xb3s\x93\xd8[\x8e\xf7E\x9fv\xc2$\xea\xae\xfc8\xc4\x9d\x9f\xce\xf9l\xd8\xdd\x05\x80*\xc5Jv\xfc\xb1\x08\x1d\xf0\xc1\x90\xba\x10\xcfHE&l\x00m\x86\xa1\xa8\xa6\x8b\x9f\xbd\xcf\x00\t\xb5_i#\x7f\\<\r\xd9\xe4i\xb3\x8b\x19\xe3\x95r?KC\xeb:\xee\xf0r\x93\x1e\x1a\x9d8\xd4FF\xeaf\xc9T\x11K\'\xdaNqz\xe6\xb6\xcdI'
2015-12-01 17:40:12,974:DEBUG:letsencrypt.storage:Archive directory /etc/letsencrypt/archive/hoekoudishetbuiten.nl and live directory /etc/letsencrypt/live/hoekoudishetbuiten.nl created.
2015-12-01 17:40:12,975:DEBUG:letsencrypt.storage:Writing certificate to /etc/letsencrypt/live/hoekoudishetbuiten.nl/cert.pem.
2015-12-01 17:40:12,975:DEBUG:letsencrypt.storage:Writing private key to /etc/letsencrypt/live/hoekoudishetbuiten.nl/privkey.pem.
2015-12-01 17:40:12,975:DEBUG:letsencrypt.storage:Writing chain to /etc/letsencrypt/live/hoekoudishetbuiten.nl/chain.pem.
2015-12-01 17:40:12,975:DEBUG:letsencrypt.storage:Writing full chain to /etc/letsencrypt/live/hoekoudishetbuiten.nl/fullchain.pem.
2015-12-01 17:40:12,976:DEBUG:letsencrypt.storage:Writing new config /etc/letsencrypt/renewal/hoekoudishetbuiten.nl.conf.
2015-12-01 17:40:12,980:INFO:letsencrypt.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/hoekoudishetbuiten.nl/fullchain.pem. Your cert will expire on 2016-02-29. To obtain a new version of the certificate in the future, simply run Let's Encrypt again.

Ran with the latest master branch. Pulled from github right before executing.

Executed with;
./letsencrypt-auto certonly --standalone
–verbose --debug -d hoekoudishetbuiten.nl -d www.hoekoudishetbuiten.nl
–server https://acme-v01.api.letsencrypt.org/directory --agree-dev-preview


#2

Hello @ewout,

Yes, the timestamps are for December 1st, strange. Also, you said that you get an updated letsencrypt but log shows that letsencrypt version is 0.0.0.dev20151123 so maybe your virtualenv is a bit mess. Try to recreate your virtualenv removing previous one.

For example, if you get letsencrypt from github using clone method and you were in/root/ you will have letsencrypt here /root/letsencrypt/ and the virtualenv here/root/.local/share/letsencrypt/.

Backup /root/.local/share/letsencrypt/ and then remove it rm -rf /root/.local/share/letsencrypt/. Go to /root/letsencrypt/ and launch git pull to update your letsencrypt version, after that, launch ./letsencrypt-auto --version this will recreate your virtualenv.

Once finished without errors, try again your command but you can avoid the use of --server (in new versions there is no need to specfy it) and --agree-dev-preview (it is deprecated).

I see as well that you are using ipv6 and several persons reported same kind of issues (slowness), search the forum for ipv6 related issues.

Cheers,
sahsanu