# Server Error in '/letsencrypt' Application

**URL:** <https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599>\
**Category:** Help\
**Created:** [April 16, 2018, 9:29am UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599 "2018-04-16T09:29:28Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![rekaonline](https://avatars.discourse-cdn.com/v4/letter/r/59ef9b/32.png) [@rekaonline](https://community.letsencrypt.org/u/rekaonline)\
**Post date:** [April 16, 2018, 9:29am UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/1 "2018-04-16T09:29:28Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:  
rekaonline.shop  
I ran this command:  
I was trying to update my certificate  
It produced this output:

```
   [HttpRequestException: Response status code does not indicate success: 403 (Forbidden).]
   System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() +92620
   LetsEncrypt.Azure.Core.Services.WebAppCertificateService.Install(ICertificateInstallModel model) in J:\Projects\letsencrypt-siteextension\LetsEncrypt.SiteExtension.Core\Services\WebAppCertificateService.cs:56
   LetsEncrypt.Azure.Core.<RequestAndInstallInternalAsync>d__13.MoveNext() in J:\Projects\letsencrypt-siteextension\LetsEncrypt.SiteExtension.Core\CertificateManager.cs:187
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +99
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +61
   LetsEncrypt.SiteExtension.Controllers.<Install>d__7.MoveNext() +595
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +99
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +61
   System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult) +97
   System.Web.Mvc.Async.<>c __DisplayClass37.<BeginInvokeAsynchronousActionMethod>b__ 36(IAsyncResult asyncResult) +17
   System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeActionMethod(IAsyncResult asyncResult) +32
   System.Web.Mvc.Async.AsyncInvocationWithFilters.<InvokeActionMethodFilterAsynchronouslyRecursive>b__3d() +50
   System.Web.Mvc.Async.<>c __DisplayClass46.<InvokeActionMethodFilterAsynchronouslyRecursive>b__ 3f() +228
   System.Web.Mvc.Async.<>c __DisplayClass33.<BeginInvokeActionMethodWithFilters>b__ 32(IAsyncResult asyncResult) +10
   System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeActionMethodWithFilters(IAsyncResult asyncResult) +34
   System.Web.Mvc.Async.<>c __DisplayClass2b.<BeginInvokeAction>b__ 1c() +26
   System.Web.Mvc.Async.<>c __DisplayClass21.<BeginInvokeAction>b__ 1e(IAsyncResult asyncResult) +100
   System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeAction(IAsyncResult asyncResult) +27
   System.Web.Mvc.Controller.<BeginExecuteCore>b__1d(IAsyncResult asyncResult, ExecuteCoreState innerState) +13
   System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +29
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult) +36
   System.Web.Mvc.Controller.<BeginExecute>b__15(IAsyncResult asyncResult, Controller controller) +12
   System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +22
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult) +26
   System.Web.Mvc.Controller.System.Web.Mvc.Async.IAsyncController.EndExecute(IAsyncResult asyncResult) +10
   System.Web.Mvc.MvcHandler.<BeginProcessRequest>b__5(IAsyncResult asyncResult, ProcessRequestState innerState) +21
   System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +29
   System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49
   System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult) +28
   System.Web.Mvc.MvcHandler.System.Web.IHttpAsyncHandler.EndProcessRequest(IAsyncResult result) +9
   System.Web.CallHandlerExecutionStep.InvokeEndHandler(IAsyncResult ar) +152
   System.Web.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar) +125

```

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:  
Azure  
I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

---

<div class="post-metadata">

**Author:** ![bytecamp](https://avatars.discourse-cdn.com/v4/letter/b/54ee81/32.png) [@bytecamp](https://community.letsencrypt.org/u/bytecamp)\
**Post date:** [April 16, 2018, 11:33am UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/2 "2018-04-16T11:33:52Z")

</div>

Which command did you run?

---

<div class="post-metadata">

**Author:** ![rekaonline](https://avatars.discourse-cdn.com/v4/letter/r/59ef9b/32.png) [@rekaonline](https://community.letsencrypt.org/u/rekaonline)\
**Post date:** [April 16, 2018, 12:36pm UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/3 "2018-04-16T12:36:50Z")

</div>

I was trying to renew my certificate via Azure

---

<div class="post-metadata">

**Author:** ![Patches](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/patches/32/17145_2.png) [@Patches](https://community.letsencrypt.org/u/Patches)\
**Post date:** [April 16, 2018, 5:17pm UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/4 "2018-04-16T17:17:01Z")

</div>

> [@rekaonline](#):
>
> ```nohighlight
> [HttpRequestException: Response status code does not indicate success: 403 (Forbidden).]
> 
> ```

Looks like you're getting an error from the Let's Encrypt CA, but this message doesn't tell you what it is.

Please [enable debug logging as instructed here](https://github.com/sjkp/letsencrypt-siteextension/wiki/How-to-debug), try and renew your certificate again, and copy and paste the messages logged here.

---

<div class="post-metadata">

**Author:** ![rekaonline](https://avatars.discourse-cdn.com/v4/letter/r/59ef9b/32.png) [@rekaonline](https://community.letsencrypt.org/u/rekaonline)\
**Post date:** [April 17, 2018, 10:32am UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/5 "2018-04-17T10:32:36Z")

</div>

2018-04-17T10:31:43 PID[7488] Information Installing certificate D:\home\siteextensions\letsencrypt\config\[httpsacme-staging.api.letsencrypt.org](http://httpsacme-staging.api.letsencrypt.org)\rekaonline.shop-all.pfx on azure with server farm id /subscriptions/2580b6f3-76db-4f71-8fb7-cb544fc443dc/resourceGroups/Reka2/providers/Microsoft.Web/serverfarms/ServicePlan96ee7b01-b72e  
2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - AcquireTokenHandlerBase: === Token Acquisition started:  
Authority: [https://login.windows.net/rekaonlineoutlook.onmicrosoft.com/](https://login.windows.net/rekaonlineoutlook.onmicrosoft.com/)  
Resource: [https://management.core.windows.net/](https://management.core.windows.net/)  
ClientId: 4f746daf-7c28-4787-8d9e-52b000cd9d26  
CacheType: Microsoft.IdentityModel.Clients.ActiveDirectory.TokenCache (1 items)  
Authentication Target: Client

2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - TokenCache: Looking up cache for a token…  
2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - TokenCache: An item matching the requested resource was found in the cache  
2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - TokenCache: 49.9287215483333 minutes left until token in cache expires  
2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - TokenCache: A matching item (access token or refresh token or both) was found in the cache  
2018-04-17T10:31:43 PID[7488] Information 04/17/2018 10:31:43: 6bb58701-d8b5-46b1-8f64-bbc49bed7824 - AcquireTokenHandlerBase: === Token Acquisition finished successfully. An access token was retuned:  
Access Token Hash: AEYl+7SdK8uvBDCIuONm3NRqJI1v6FN4n3DJxa2sNwY=  
Refresh Token Hash: [No Refresh Token]  
Expiration Time: 04/17/2018 11:21:39 +00:00  
User Hash: null

---

<div class="post-metadata">

**Author:** ![rekaonline](https://avatars.discourse-cdn.com/v4/letter/r/59ef9b/32.png) [@rekaonline](https://community.letsencrypt.org/u/rekaonline)\
**Post date:** [April 17, 2018, 10:34am UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/6 "2018-04-17T10:34:18Z")

</div>

Now I’m getting this error  
[HttpRequestException: Response status code does not indicate success: 403 (Forbidden).]  
System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() +92620  
LetsEncrypt.Azure.Core.Services.WebAppCertificateService.Install(ICertificateInstallModel model) in J:\Projects\letsencrypt-siteextension\LetsEncrypt.SiteExtension.Core\Services\WebAppCertificateService.cs:56  
LetsEncrypt.Azure.Core.d\_\_13.MoveNext() in J:\Projects\letsencrypt-siteextension\LetsEncrypt.SiteExtension.Core\CertificateManager.cs:187  
System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +99  
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +61  
LetsEncrypt.SiteExtension.Controllers.d\_\_7.MoveNext() +595  
System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +99  
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +61  
System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult) +97  
System.Web.Mvc.Async.\<\>c\_\_DisplayClass37.b\_\_36(IAsyncResult asyncResult) +17  
System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeActionMethod(IAsyncResult asyncResult) +32  
System.Web.Mvc.Async.AsyncInvocationWithFilters.b\_\_3d() +50  
System.Web.Mvc.Async.\<\>c\_\_DisplayClass46.b\_\_3f() +228  
System.Web.Mvc.Async.\<\>c\_\_DisplayClass33.b\_\_32(IAsyncResult asyncResult) +10  
System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeActionMethodWithFilters(IAsyncResult asyncResult) +34  
System.Web.Mvc.Async.\<\>c\_\_DisplayClass2b.b\_\_1c() +26  
System.Web.Mvc.Async.\<\>c\_\_DisplayClass21.b\_\_1e(IAsyncResult asyncResult) +100  
System.Web.Mvc.Async.WrappedAsyncResult`1.CallEndDelegate(IAsyncResult asyncResult) +10 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeAction(IAsyncResult asyncResult) +27  
System.Web.Mvc.Controller.b\_\_1d(IAsyncResult asyncResult, ExecuteCoreState innerState) +13  
System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +29 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult) +36  
System.Web.Mvc.Controller.b\_\_15(IAsyncResult asyncResult, Controller controller) +12  
System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +22 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult) +26  
System.Web.Mvc.Controller.System.Web.Mvc.Async.IAsyncController.EndExecute(IAsyncResult asyncResult) +10  
System.Web.Mvc.MvcHandler.b\_\_5(IAsyncResult asyncResult, ProcessRequestState innerState) +21  
System.Web.Mvc.Async.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult) +29 System.Web.Mvc.Async.WrappedAsyncResultBase`1.End() +49  
System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult) +28  
System.Web.Mvc.MvcHandler.System.Web.IHttpAsyncHandler.EndProcessRequest(IAsyncResult result) +9  
System.Web.CallHandlerExecutionStep.InvokeEndHandler(IAsyncResult ar) +152  
System.Web.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar) +125

---

<div class="post-metadata">

**Author:** ![Patches](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/patches/32/17145_2.png) [@Patches](https://community.letsencrypt.org/u/Patches)\
**Post date:** [April 17, 2018, 5:44pm UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/7 "2018-04-17T17:44:23Z")

</div>

> [@rekaonline](#):
>
> 2018-04-17T10:31:43 PID[7488] Information Installing certificate D:\home\siteextensions\letsencrypt\config\httpsacme-staging.api.letsencrypt.org\rekaonline.shop-all.pfx on azure with server farm id /subscriptions/2580b6f3-76db-4f71-8fb7-cb544fc443dc/resourceGroups/Reka2/providers/Microsoft.Web/serverfarms/ServicePlan96ee7b01-b72e

This suggests this client has already obtained a certificate from Let's Encrypt, and that the _403 Forbidden_ error you are getting is coming from some Azure endpoint for installing the certificate and not from Let's Encrypt.

I searched their issue tracker to see if this had already been reported, and I came across [a report](https://github.com/sjkp/letsencrypt-siteextension/issues/141) in which the plugin author explains that this error happens due to a permissions issue. Please make sure you have [granted the necessary permissions to the letsencrypt service account](https://github.com/sjkp/letsencrypt-siteextension/wiki/How-to-install#grant-permissions-to-the-service-principal) and try again.

If you continue to have trouble, please follow up with the plug-in author, since the error seems to be on the Azure side and not from Let's Encrypt.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 17, 2018, 5:44pm UTC](https://community.letsencrypt.org/t/server-error-in-letsencrypt-application/59599/8 "2018-05-17T17:44:36Z")

</div>

Closed on May 17, 2018, 5:44pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.