It’s OK…
It was an iptables rule that I forgot:
iptables -A INPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
I had put “output” rule, but not “input”.
And now, the certificate was renewed.
Thank’s for your help.
A last question: letsencrypt use only 80 or 80 + 443 ?