The server could not connect to the client to verify the domain

[schoen]

@Cqc

So if I want to automate the renewal process in the future, is there a way I can do that without enabling ports 443 or 80 which I used during the --standalone step for the first get of the certificates. With a 90 day renewal, without an automted process, it is not very practical to maintain, IMO.

I'm not sure what you mean by "enabling"; can you clarify that?