# Server response (403) on Finalize order

**URL:** <https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968>\
**Category:** Help\
**Created:** [July 15, 2024, 3:47am UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968 "2024-07-15T03:47:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![cmilitzer](https://avatars.discourse-cdn.com/v4/letter/c/47e85d/32.png) [@cmilitzer](https://community.letsencrypt.org/u/cmilitzer)\
**Post date:** [July 15, 2024, 3:47am UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968/1 "2024-07-15T03:47:04Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: helloinneryou,com  
Please help me sort out this log entry and certificate renewal failure. It is failing on the last step after successful acme-challenges.

2024-07-14 22:30:51 [info] Sending request to challenge

2024-07-14 22:30:53 [info] Sending signed request to [https://acme-v02.api.letsencrypt.org/acme/chall-v3/377121777057/k3J0pg](https://acme-v02.api.letsencrypt.org/acme/chall-v3/377121777057/k3J0pg)

2024-07-14 22:30:53 [info] Verification ended with status: 'VALID' for the domain [helloinneryou.com](http://helloinneryou.com)

2024-07-14 22:30:53 [info] Sending request to challenge

2024-07-14 22:30:53 [info] Sending signed request to [https://acme-v02.api.letsencrypt.org/acme/chall-v3/377121777067/I8F-vQ](https://acme-v02.api.letsencrypt.org/acme/chall-v3/377121777067/I8F-vQ)

2024-07-14 22:30:53 [info] Verification ended with status: 'VALID' for the domain [www.helloinneryou.com](http://www.helloinneryou.com)

2024-07-14 22:30:53 [info] Sending signed request to [https://acme-v02.api.letsencrypt.org/acme/finalize/818647267/287360230457](https://acme-v02.api.letsencrypt.org/acme/finalize/818647267/287360230457)

2024-07-14 22:30:53 [error] Sorry, the Let's Encrypt™ server response (403) is unexpected. The complete server response is given below.

2024-07-14 22:30:53 [error]

```nohighlight
Array( [type] => urn:ietf:params:acme:error:orderNotReady [detail] => Order's status ("valid") is not acceptable for finalization [status] => 403)

```

2024-07-14 22:30:53 [error] Closing the connection

* * *

2024-07-14 22:30:53 [error] Invalid response code: 403, {"type":"urn:ietf:params:acme:error:orderNotReady","detail":"Order's status ("valid") is not acceptable for finalization","status":403}

---

<div class="post-metadata">

**Author:** ![bruncsak](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruncsak/32/18414_2.png) [@bruncsak](https://community.letsencrypt.org/u/bruncsak)\
**Post date:** [July 15, 2024, 7:27am UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968/2 "2024-07-15T07:27:23Z")

</div>

@cmilitzer , welcome to the community!

You did not fill up all the detailes of the questioner, is it a custom ACME client that you are using?  
The state of an order is "valid", when it is already finalized. It is not possible to finalize an order more than one time. An order can be finalized only if its state is "ready".

---

<div class="post-metadata">

**Author:** ![cmilitzer](https://avatars.discourse-cdn.com/v4/letter/c/47e85d/32.png) [@cmilitzer](https://community.letsencrypt.org/u/cmilitzer)\
**Post date:** [July 15, 2024, 2:47pm UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968/3 "2024-07-15T14:47:11Z")

</div>

I was not sure how to answer all of it. I am using the Auto-Install Free SSL 4.0.0 Plugin on a WordPress site. I have renewed the SLL manually several times on this site and have done it with multiple sites using this plugin. This is the first time that after doing the Acme checks that it has now created the certificate and it is telling me to check the log for this error. How can I change this from Valid to Ready?

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [July 15, 2024, 3:16pm UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968/4 "2024-07-15T15:16:38Z")

</div>

> [@cmilitzer](#):
>
> Auto-Install Free SSL 4.0.0 Plugin

Maybe someone here will know something about that product but you are probably better off asking at that Auto-Install support forum. They will know best how to debug what has gone wrong. That program has sent an invalid API request and it is being rejected (as it should) by Let's Encrypt.

> **[\[Free SSL Certificate WordPress Plugin, HTTPS Redirect, Renewal Reminder –...](https://wordpress.org/support/plugin/auto-install-free-ssl/)**

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 14, 2024, 3:17pm UTC](https://community.letsencrypt.org/t/server-response-403-on-finalize-order/221968/5 "2024-08-14T15:17:11Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
