Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
It produced this output: Could not obtain the current version of the Let’s Encrypt Terms of Service. Automatic renewals will be tried again during the next renewal attempt. Manual renewal can be attempted again at any time
My web server is (include version): Sophos UTM 9
The operating system my web server runs on is (include version):Linux for Sophos UTM 9
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Sophos UTM 9
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
2021:12:21-10:56:02 www letsencrypt[10887]: I Renew certificate: handling CSR REF_CaCsrCalendAseg2 for domain set [calendrier.aseg-nettoyage.fr]
2021:12:21-10:56:02 www letsencrypt[10887]: E Renew certificate: TOS_UNAVAILABLE: Could not obtain the current version of the Let's Encrypt Terms of Service
2021:12:21-10:56:02 www letsencrypt[10887]: I Renew certificate: sending notification WARN-603
2021:12:21-10:56:02 www letsencrypt[10887]: I Renew certificate: handling CSR REF_CaCsrCalendAseg for domain set [calendar.aseg-nettoyage.fr]
2021:12:21-10:56:02 www letsencrypt[10887]: E Renew certificate: TOS_UNAVAILABLE: Could not obtain the current version of the Let's Encrypt Terms of Service
2021:12:21-10:56:02 www letsencrypt[10887]: I Renew certificate: sending notification WARN-603
The messages in the log are not very helpful. You may need to contact your Sophos UTM support to explain what network error caused the TOS to be unavailable.
I see your last successful cert was on Sept 30. On Oct 1 the Let's Encrypt servers started using a different certificate chain. Perhaps you need to refresh your LE certs in the Sophos like this person did:
