OpenBSD acme-client times out

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: displ.nl

I ran this command: acme-client -vvv -F irc.displ.nl

It produced this output:

[root ssl]# acme-client -vvv -F irc.displ.nl
acme-client: /etc/acme/letsencrypt-privkey.pem: loaded account key
acme-client: /etc/ssl/private/irc.displ.nl.key: loaded domain key
acme-client: /etc/ssl/irc.displ.nl.crt: certificate renewable: 26 days left
acme-client: https://acme-v02.api.letsencrypt.org/directory: directories
acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248
acme-client: acme-v02.api.letsencrypt.org: DNS: 2606:4700:60:0:f53d:5624:85c7:3a2c
acme-client: transfer buffer: [{
  "iQm_tMYkR0o": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "profiles": {
      "classic": "https://letsencrypt.org/docs/profiles#classic",
      "shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
      "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
      "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
    },
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.7-June-04-2026.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}] (1031 bytes)
acme-client: account key: https://acme-v02.api.letsencrypt.org/acme/acct/93633489
acme-client: transfer buffer: [{
  "key": {
    "kty": "RSA",
    "n": "qa2EDzBo9I1eQYX-S7XASi3KvEM7hi_8VxeHIMfLrMbUjhnTDd0f0ps_KnRBWokTnBlhF-c8SeItXZ-JwysZjfsPi3oD2UusJmmlH_R7Go80zxOp51uOerXG8ddpUtE6PlW-k41cXoHXOYVfrGRSo1OKaKS-j_k18OZw68hqFubM_9M6fznPUDVbog0DmWJeJyRKg3BQvwl8q8Ojr2dt3jj8P4iw4Cmd8CMpE1CsnhFlKxGggUv7sZIKhLSLzvPtTv-jGU_L1FMu1fZlLXqU1pD9emtrRq21OS-ttCl6PWJ0tb20nzzHUy-E85DMcHuvxR4BcMWyIXWDu6qpZ427OAPGD9yA73Utg_HwOHyH_-3PLtMu3gbKE0nV9nxAaFPT4MT_Fa2V41BgSFZGSLr66Bi7vQHA4hKJBy9nWXaiw4yBuqMokAV-AqQajH7UnfS2QVyEW7IbvLbvYuaEqea0G4DsW7kXo-pJEEHpWKnzrusXOY-xsl9ei5nOAAQvxeJe-E9y7a5UThOVbYH5D4141PkDcdDN6WyqVlrmMYndSGkFOVW9d4-88z1vnhVOx76yxdfC3HHl8hHxHCQG38Vs64-3ODvkVUock1z3QNstUbHkUB_3c5tt9ugcm5QebDDOoJAZF74LM1-Pv9p_M5SSatqnYZXtaev0I1PdkwMWDvk",
    "e": "AQAB"
  },
  "createdAt": "2020-08-11T07:35:25Z",
  "status": "valid"
}] (808 bytes)
acme-client: transfer buffer: [{
  "status": "pending",
  "expires": "2026-06-27T22:41:20Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "irc.displ.nl"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523682614746"
}] (342 bytes)
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256
acme-client: transfer buffer: [{
  "identifier": {
    "type": "dns",
    "value": "irc.displ.nl"
  },
  "status": "pending",
  "expires": "2026-06-27T22:41:20Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/RHnObA",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/nR5_3g",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    }
  ]
}] (814 bytes)
acme-client: challenge, token: UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ, status: 0
acme-client: /var/www/acme/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ: challenge
acme-client: transfer buffer: [{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
  "status": "pending",
  "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
}] (193 bytes)
acme-client: transfer buffer: [{
  "status": "pending",
  "expires": "2026-06-27T22:41:20Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "irc.displ.nl"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523682614746"
}] (342 bytes)
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256
acme-client: transfer buffer: [{
  "identifier": {
    "type": "dns",
    "value": "irc.displ.nl"
  },
  "status": "pending",
  "expires": "2026-06-27T22:41:20Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/RHnObA",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    },
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/nR5_3g",
      "status": "pending",
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
    }
  ]
}] (814 bytes)
acme-client: challenge, token: UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ, status: 0
acme-client: /var/www/acme/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ: challenge
acme-client: transfer buffer: [{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
  "status": "pending",
  "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ"
}] (193 bytes)
acme-client: transfer buffer: [{
  "status": "pending",
  "expires": "2026-06-27T22:41:20Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "irc.displ.nl"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523682614746"
}] (342 bytes)
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256
acme-client: transfer buffer: [{
  "identifier": {
    "type": "dns",
    "value": "irc.displ.nl"
  },
  "status": "invalid",
  "expires": "2026-06-27T22:41:20Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
      "status": "invalid",
      "validated": "2026-06-20T22:41:23Z",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "23.238.12.143: Fetching http://irc.displ.nl/.well-known/acme-challenge/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ: Timeout during connect (likely firewall problem)",
        "status": 400
      },
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ",
      "validationRecord": [
        {
          "url": "http://irc.displ.nl/.well-known/acme-challenge/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ",
          "hostname": "irc.displ.nl",
          "port": "80",
          "addressesResolved": [
            "23.238.12.143"
          ],
          "addressUsed": "23.238.12.143"
        }
      ]
    }
  ]
}] (1052 bytes)
acme-client: challenge, token: UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ, status: -1
acme-client: transfer buffer: [{
  "status": "invalid",
  "expires": "2026-06-27T22:41:20Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "irc.displ.nl"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523682614746"
}] (342 bytes)
acme-client: order.status -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725345501256
acme-client: transfer buffer: [{
  "identifier": {
    "type": "dns",
    "value": "irc.displ.nl"
  },
  "status": "invalid",
  "expires": "2026-06-27T22:41:20Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725345501256/BhCMZQ",
      "status": "invalid",
      "validated": "2026-06-20T22:41:23Z",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "23.238.12.143: Fetching http://irc.displ.nl/.well-known/acme-challenge/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ: Timeout during connect (likely firewall problem)",
        "status": 400
      },
      "token": "UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ",
      "validationRecord": [
        {
          "url": "http://irc.displ.nl/.well-known/acme-challenge/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ",
          "hostname": "irc.displ.nl",
          "port": "80",
          "addressesResolved": [
            "23.238.12.143"
          ],
          "addressUsed": "23.238.12.143"
        }
      ]
    }
  ]
}] (1052 bytes)
acme-client: 23.238.12.143: Fetching http://irc.displ.nl/.well-known/acme-challenge/UmW1FATAbZi99eq9s9sDsjoBQfx5rJstGgKdin7YCoQ: Timeout during connect (likely firewall problem)
acme-client: bad exit: netproc(1478579): 1

My web server is (include version):
httpd

The operating system my web server runs on is (include version):
OpenBSD

My hosting provider, if applicable, is:
racknerd

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
acme-client

2

I have been using this same setup previously without any issues, but just when my server ip got changed, I cannot renew the certificate anymore. I don't know what is causing the issues. I know for sure port 80 is open, Any pointers on how to debug this?

3

Similar issue with my other subdomains,

acme-client -vvvv -F displ.nl

acme-client: /etc/ssl/private/displ.nl.key: loaded domain key
acme-client: /etc/ssl/displ.nl.crt: certificate renewable: 26 days left
acme-client: /etc/acme/letsencrypt-privkey.pem: loaded account key
acme-client: https://acme-v02.api.letsencrypt.org/directory: directories
acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248
acme-client: transfer buffer: [{ "hZNTfRuFdLs": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived", "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.7-June-04-2026.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" }] (1031 bytes)
acme-client: transfer buffer: [{ "key": { "kty": "RSA", "n": "qa2EDzBo9I1eQYX-S7XASi3KvEM7hi_8VxeHIMfLrMbUjhnTDd0f0ps_KnRBWokTnBlhF-c8SeItXZ-JwysZjfsPi3oD2UusJmmlH_R7Go80zxOp51uOerXG8ddpUtE6PlW-k41cXoHXOYVfrGRSo1OKaKS-j_k18OZw68hqFubM_9M6fznPUDVbog0DmWJeJyRKg3BQvwl8q8Ojr2dt3jj8P4iw4Cmd8CMpE1CsnhFlKxGggUv7sZIKhLSLzvPtTv-jGU_L1FMu1fZlLXqU1pD9emtrRq21OS-ttCl6PWJ0tb20nzzHUy-E85DMcHuvxR4BcMWyIXWDu6qpZ427OAPGD9yA73Utg_HwOHyH_-3PLtMu3gbKE0nV9nxAaFPT4MT_Fa2V41BgSFZGSLr66Bi7vQHA4hKJBy9nWXaiw4yBuqMokAV-AqQajH7UnfS2QVyEW7IbvLbvYuaEqea0G4DsW7kXo-pJEEHpWKnzrusXOY-xsl9ei5nOAAQvxeJe-E9y7a5UThOVbYH5D4141PkDcdDN6WyqVlrmMYndSGkFOVW9d4-88z1vnhVOx76yxdfC3HHl8hHxHCQG38Vs64-3ODvkVUock1z3QNstUbHkUB_3c5tt9ugcm5QebDDOoJAZF74LM1-Pv9p_M5SSatqnYZXtaev0I1PdkwMWDvk", "e": "AQAB" }, "createdAt": "2020-08-11T07:35:25Z", "status": "valid" }] (808 bytes)
acme-client: transfer buffer: [{ "status": "pending", "expires": "2026-06-27T22:51:22Z", "identifiers": [ { "type": "dns", "value": "autoconfig.displ.nl" }, { "type": "dns", "value": "displ.nl" }, { "type": "dns", "value": "fsl.displ.nl" }, { "type": "dns", "value": "ice.displ.nl" }, { "type": "dns", "value": "mta-sts.displ.nl" }, { "type": "dns", "value": "my.displ.nl" }, { "type": "dns", "value": "rad.displ.nl" }, { "type": "dns", "value": "wkd.displ.nl" }, { "type": "dns", "value": "www.displ.nl" }, { "type": "dns", "value": "xcyl.displ.nl" }, { "type": "dns", "value": "zeta.displ.nl" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391366", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391386", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391416", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391436", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391456", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391466", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391486", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391516", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391526", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391536", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391546" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523684956656" }] (1760 bytes)
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391366
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "autoconfig.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/bJUFaA", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/YZiYpg", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" } ] }] (821 bytes)
acme-client: challenge, token: DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA, status: 0
acme-client: /var/www/acme/DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391386
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/u8YaVQ", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/Fen1qg", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" } ] }] (810 bytes)
acme-client: challenge, token: oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A, status: 0
acme-client: /var/www/acme/oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391416
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "fsl.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/yLX-TA", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/93_5QA", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" } ] }] (814 bytes)
acme-client: challenge, token: Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw, status: 0
acme-client: /var/www/acme/Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391436
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "ice.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/NfXecQ", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/7hBMsw", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" } ] }] (814 bytes)
acme-client: challenge, token: vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ, status: 0
acme-client: /var/www/acme/vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391456
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "mta-sts.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/BwoMJA", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/7KKGBA", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" } ] }] (818 bytes)
acme-client: challenge, token: xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg, status: 0
acme-client: /var/www/acme/xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391466
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "my.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ", "status": "pending", "token": "7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/oHvahA", "status": "pending", "token": "7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/vxVv-A", "status": "pending", "token": "7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0" } ] }] (813 bytes)
acme-client: challenge, token: 7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ, status: 0
acme-client: /var/www/acme/7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391486
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "rad.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ", "status": "pending", "token": "LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/eU4FjA", "status": "pending", "token": "LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/quUhDQ", "status": "pending", "token": "LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g" } ] }] (814 bytes)
acme-client: challenge, token: LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ, status: 0
acme-client: /var/www/acme/LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391516
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "wkd.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/-UnJyw", "status": "pending", "token": "MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g", "status": "pending", "token": "MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/9yBEhw", "status": "pending", "token": "MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM" } ] }] (814 bytes)
acme-client: challenge, token: MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g, status: 0
acme-client: /var/www/acme/MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391526
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "www.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/jMOVHw", "status": "pending", "token": "GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/wvXOKw", "status": "pending", "token": "GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ", "status": "pending", "token": "GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE" } ] }] (814 bytes)
acme-client: challenge, token: GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ, status: 0
acme-client: /var/www/acme/GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391536
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "xcyl.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/1Idg4A", "status": "pending", "token": "_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw", "status": "pending", "token": "_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/8Ymsdg", "status": "pending", "token": "_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY" } ] }] (815 bytes)
acme-client: challenge, token: _SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw, status: 0
acme-client: /var/www/acme/_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391546
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "zeta.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/3p3mFA", "status": "pending", "token": "2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw", "status": "pending", "token": "2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/Zl4k3w", "status": "pending", "token": "2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY" } ] }] (815 bytes)
acme-client: challenge, token: 2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw, status: 0
acme-client: /var/www/acme/2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ", "status": "pending", "token": "7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ", "status": "pending", "token": "LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g", "status": "pending", "token": "MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ", "status": "pending", "token": "GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw", "status": "pending", "token": "_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY" }] (193 bytes)
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw: challenge
acme-client: transfer buffer: [{ "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw", "status": "pending", "token": "2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY" }] (193 bytes)
acme-client: transfer buffer: [{ "status": "pending", "expires": "2026-06-27T22:51:22Z", "identifiers": [ { "type": "dns", "value": "autoconfig.displ.nl" }, { "type": "dns", "value": "displ.nl" }, { "type": "dns", "value": "fsl.displ.nl" }, { "type": "dns", "value": "ice.displ.nl" }, { "type": "dns", "value": "mta-sts.displ.nl" }, { "type": "dns", "value": "my.displ.nl" }, { "type": "dns", "value": "rad.displ.nl" }, { "type": "dns", "value": "wkd.displ.nl" }, { "type": "dns", "value": "www.displ.nl" }, { "type": "dns", "value": "xcyl.displ.nl" }, { "type": "dns", "value": "zeta.displ.nl" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391366", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391386", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391416", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391436", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391456", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391466", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391486", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391516", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391526", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391536", "https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391546" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/93633489/523684956656" }] (1760 bytes)
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391366
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "autoconfig.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/bJUFaA", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/YZiYpg", "status": "pending", "token": "DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g" } ] }] (821 bytes)
acme-client: challenge, token: DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA, status: 0
acme-client: /var/www/acme/DJLSJhXzbeg4O1J2EJbU13FHA6q4t-96QwVzWp6Ah5g: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391386
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/Fen1qg", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/u8YaVQ", "status": "pending", "token": "oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA" } ] }] (810 bytes)
acme-client: challenge, token: oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391386/TfCD1A, status: 0
acme-client: /var/www/acme/oSqPDkXE1ArKQhDWw5MZpAWp1loffwIifoNapjOT5PA: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391416
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "fsl.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/yLX-TA", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/93_5QA", "status": "pending", "token": "Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ" } ] }] (814 bytes)
acme-client: challenge, token: Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391416/l05oLw, status: 0
acme-client: /var/www/acme/Hk2BF07aR7RiXLaj3QAejBtOitF-aAdZHqB1kVNwuXQ: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391436
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "ice.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/7hBMsw", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/NfXecQ", "status": "pending", "token": "vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc" } ] }] (814 bytes)
acme-client: challenge, token: vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391436/PO_ABQ, status: 0
acme-client: /var/www/acme/vRGpthVaZixEoVonCJuLi75SiGv5zhshvXhbP10NpCc: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391456
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "mta-sts.displ.nl" }, "status": "pending", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/7KKGBA", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/BwoMJA", "status": "pending", "token": "xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM" } ] }] (818 bytes)
acme-client: challenge, token: xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391456/pKPrqg, status: 0
acme-client: /var/www/acme/xvYu_-N1NA1WhL3tZguP18RtvYU8YTCf0MZy-WocFgM: created
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391466
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "my.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ", "status": "invalid", "validated": "2026-06-20T22:51:28Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://my.displ.nl/.well-known/acme-challenge/7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0", "validationRecord": [ { "url": "http://my.displ.nl/.well-known/acme-challenge/7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0", "hostname": "my.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1048 bytes)
acme-client: challenge, token: 7IydPkx5iiuoeR8TgyMnQoVA1Uy7ba25Q0OkLtkILy0, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391466/RC2vwQ, status: -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391486
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "rad.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ", "status": "invalid", "validated": "2026-06-20T22:51:28Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://rad.displ.nl/.well-known/acme-challenge/LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g", "validationRecord": [ { "url": "http://rad.displ.nl/.well-known/acme-challenge/LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g", "hostname": "rad.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1052 bytes)
acme-client: challenge, token: LYVXIGC5vkTRQ__RC409siyCJB2GR8uWbtWmuIlHP7g, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391486/tAVebQ, status: -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391516
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "wkd.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g", "status": "invalid", "validated": "2026-06-20T22:51:29Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://wkd.displ.nl/.well-known/acme-challenge/MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM", "validationRecord": [ { "url": "http://wkd.displ.nl/.well-known/acme-challenge/MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM", "hostname": "wkd.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1052 bytes)
acme-client: challenge, token: MLlUqpEZUgwBnhbqRN7rZcuWjBFVazFhpnOJx-byZuM, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391516/XMhh_g, status: -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391526
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "www.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ", "status": "invalid", "validated": "2026-06-20T22:51:29Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://www.displ.nl/.well-known/acme-challenge/GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE", "validationRecord": [ { "url": "http://www.displ.nl/.well-known/acme-challenge/GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE", "hostname": "www.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1052 bytes)
acme-client: challenge, token: GhYBDfDYzoB_tRMLo9dhDg6obkNTV0W0bknbM8-r3uE, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391526/Q6GmpQ, status: -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391536
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "xcyl.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw", "status": "invalid", "validated": "2026-06-20T22:51:29Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://xcyl.displ.nl/.well-known/acme-challenge/_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY", "validationRecord": [ { "url": "http://xcyl.displ.nl/.well-known/acme-challenge/_SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY", "hostname": "xcyl.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1056 bytes)
acme-client: challenge, token: _SauDff2vx63Muy4IySg6x-o2Tzz3KwbGmIYhb3MKMY, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391536/GO9YPw, status: -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/93633489/725349391546
acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "zeta.displ.nl" }, "status": "invalid", "expires": "2026-06-27T22:51:22Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw", "status": "invalid", "validated": "2026-06-20T22:51:30Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "23.238.12.143: Fetching http://zeta.displ.nl/.well-known/acme-challenge/2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY: Timeout during connect (likely firewall problem)", "status": 400 }, "token": "2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY", "validationRecord": [ { "url": "http://zeta.displ.nl/.well-known/acme-challenge/2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY", "hostname": "zeta.displ.nl", "port": "80", "addressesResolved": [ "23.238.12.143" ], "addressUsed": "23.238.12.143" } ] } ] }] (1056 bytes)
acme-client: challenge, token: 2agbGVa4P5uFXw9s7i9bshzYEeMRADOc67U4pAPxIhY, uri: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391546/ugjGsw, status: -1
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA: challenge
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/93633489/725349391366/RdUSFA: bad HTTP: 400
acme-client: transfer buffer: [{ "type": "urn:ietf:params:acme:error:malformed", "detail": "Unable to update challenge :: authorization must be pending", "status": 400 }] (144 bytes)
acme-client: bad exit: netproc(67462): 1
4

My A, CAA records are clear and this server doesn't have IPv6 set so I'm really unsure where things are going wrong.

5

So I tried the manual way with https://gethttpsforfree.com/,

My static httpd is ofcourse serving at,

$ curl http://sypl.displ.nl/.well-known/acme-challenge/R_2J5N3kHwBfkeeyL6T1uv-X6VDKlTPO3wET3n28zSo
R_2J5N3kHwBfkeeyL6T1uv-X6VDKlTPO3wET3n28zSo.r9JqE-Ki0jcAM79qnFBA9VkRyoSbAsiMszGLtVxLLHc

Even after all the pasting of keys there, I still get in that static page when I press "Check challenge status"

Error: Domain challenge failed. Please start back at Step 1. {"identifier":{"type":"dns","value":"sypl.displ.nl"},"status":"invalid","expires":"2026-06-28T00:48:21Z","challenges":[{"type":"http-01","url":"https://acme-v02.api.letsencrypt.org/acme/chall/3457282856/725399036876/vOxa8A","status":"invalid","validated":"2026-06-21T00:57:18Z","error":{"type":"urn:ietf:params:acme:error:connection","detail":"23.238.12.143: Fetching http://sypl.displ.nl/.well-known/acme-challenge/R_2J5N3kHwBfkeeyL6T1uv-X6VDKlTPO3wET3n28zSo: Timeout during connect (likely firewall problem)","status":400},"token":"R_2J5N3kHwBfkeeyL6T1uv-X6VDKlTPO3wET3n28zSo","validationRecord":[{"url":"http://sypl.displ.nl/.well-known/acme-challenge/R_2J5N3kHwBfkeeyL6T1uv-X6VDKlTPO3wET3n28zSo","hostname":"sypl.displ.nl","port":"80","addressesResolved":["23.238.12.143"],"addressUsed":"23.238.12.143"}]}]}

Is my IP geoblocked by let's encrypt server? Any idea, this should just work because I can run that curl on different network and still got the output, none is throwing "400".

Please any help is much appreciated.

6

No. LE does not have list of IP addresses blocked for requests outbound from its validation servers. A long time ago there were some IP addresses blocked from an ACME Client making http requests to the LE API server. There have never been, to my knowledge, IPs blocked out from the validation servers.

Sadly, this looks like some kind of backbone network problem. Those are often difficult to resolve. You might be better off trying a DNS Challenge or even a different Certificate Authority.

Cert requests for your domain using the Let's Encrypt staging system work as expected. It is only requests from LE production that timeout trying to reach you. And, it is the request from the primary LE center that fails not any of the (currently 4) secondary centers. We don't know if the secondary centers would work because when the primary fails they are not engaged.

To debug this you would need a good working relationship with your ISP and a good understanding of networking in general. It is not common but we do see these from time to time. Sometimes they resolve on their own as the backbone provider gets reports from others and they remedy the problem.

You might re-check there is no firewall blocking specific IP addresses. Or, any firewall doing "smart" blocking of any kind. Perhaps the requests from the LE production server are being selectively blocked.

For what it's worth, I can reach you from a variety of locations so it does seem unique to the traffic flowing to you from the LE production center. As a volunteer I don't have authority to run diagnostics on that system and I have never seen LE staff assist with single comms failures like this. Which is why I said "sadly" earlier :slight_smile:

7

Fair enough MikeMcQ, I too suspected this. I have request a change of subnet from my provider. Let's see how it goes, apart from Let's encrypt I also had issues with many sites but it didn't bother until TLS failures.

I'll keep updating the situation.

8

Hey MickMcQ, as we suspected, it was really an issue on the netowrk! I linked this thread and explained to my ISP and they gave me a different subnet on the same location.

And boom, let's encrypt accepted my token without any change in configuration. Now I have updated all my *.displ.nl certs. I have reported the issue about the previous subnet and gateway hopefully, it will be sorted in future to avoid issues for other users.

Thanks for supporting and quick reply.