Renew failed: The client lacks sufficient authorization

Hi @damianlewis

you use the webroot authenticator:

If that doesn't work, your webroot may be wrong.

What's the content of your config file:

/etc/letsencrypt/renewal

What says

nginx -T

Your main configuration looks ok ( https://check-your-website.server-daten.de/?q=laurdan.co.uk ):

Domainname Http-Status redirect Sec. G
http://laurdan.co.uk/
46.101.88.208 301 https://laurdan.co.uk/ 0.047 A
http://www.laurdan.co.uk/
46.101.88.208 301 https://www.laurdan.co.uk/ 0.063 A
https://laurdan.co.uk/
46.101.88.208 200 3.767 N
Certificate error: RemoteCertificateChainErrors
https://www.laurdan.co.uk/
46.101.88.208 200 3.390 N
Certificate error: RemoteCertificateChainErrors
http://laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
46.101.88.208 301 https://laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 0.063 A
Visible Content: 301 Moved Permanently nginx/1.15.5
http://www.laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
46.101.88.208 301 https://www.laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 0.064 A
Visible Content: 301 Moved Permanently nginx/1.15.5
https://laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 404 3.296 N
Not Found
Certificate error: RemoteCertificateChainErrors
Visible Content:
https://www.laurdan.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 404 3.283 N
Not Found
Certificate error: RemoteCertificateChainErrors

But you have a redirect http -> https. So you have to use the https - webroot.