Unable to issue or renew certificates

Help
1

My domain is: ykkosbasaari.fi

I ran this command: Install SSL via CentOS Web Panel

It produced this output:

[Fri Sep 27 11:50:07 EEST 2019] _main_domain='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:07 EEST 2019] _alt_domains='ykkosbasaari.fi'
[Fri Sep 27 11:50:07 EEST 2019] Using config home:/root/.acme.sh
[Fri Sep 27 11:50:07 EEST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:07 EEST 2019] DOMAIN_PATH='/root/.acme.sh/cwp_certs/www.ykkosbasaari.fi'
[Fri Sep 27 11:50:07 EEST 2019] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:50:07 EEST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:50:07 EEST 2019] GET
[Fri Sep 27 11:50:07 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:07 EEST 2019] timeout=
[Fri Sep 27 11:50:07 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:08 EEST 2019] ret='0'
[Fri Sep 27 11:50:08 EEST 2019] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Fri Sep 27 11:50:08 EEST 2019] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Fri Sep 27 11:50:08 EEST 2019] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Fri Sep 27 11:50:08 EEST 2019] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Fri Sep 27 11:50:08 EEST 2019] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Fri Sep 27 11:50:08 EEST 2019] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Fri Sep 27 11:50:08 EEST 2019] ACME_NEW_NONCE
[Fri Sep 27 11:50:08 EEST 2019] ACME_VERSION
[Fri Sep 27 11:50:08 EEST 2019] _on_before_issue
[Fri Sep 27 11:50:08 EEST 2019] _chk_main_domain='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] _chk_alt_domains='ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] Le_LocalAddress
[Fri Sep 27 11:50:08 EEST 2019] d='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] Check for domain='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] _currentRoot='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:50:08 EEST 2019] d='ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] Check for domain='ykkosbasaari.fi'
[Fri Sep 27 11:50:08 EEST 2019] _currentRoot='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:50:08 EEST 2019] d
[Fri Sep 27 11:50:08 EEST 2019] _saved_account_key_hash is not changed, skip register account.
[Fri Sep 27 11:50:08 EEST 2019] Read key length:
[Fri Sep 27 11:50:08 EEST 2019] Creating domain key
[Fri Sep 27 11:50:08 EEST 2019] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
[Fri Sep 27 11:50:08 EEST 2019] Using config home:/root/.acme.sh
[Fri Sep 27 11:50:08 EEST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:08 EEST 2019] Use length 2048
[Fri Sep 27 11:50:08 EEST 2019] Using RSA: 2048
[Fri Sep 27 11:50:09 EEST 2019] The domain key is here: /root/.acme.sh/cwp_certs/www.ykkosbasaari.fi/www.ykkosbasaari.fi.key
[Fri Sep 27 11:50:09 EEST 2019] _createcsr
[Fri Sep 27 11:50:09 EEST 2019] Multi domain='DNS:www.ykkosbasaari.fi,DNS:ykkosbasaari.fi'
[Fri Sep 27 11:50:09 EEST 2019] Getting domain auth token for each domain
[Fri Sep 27 11:50:09 EEST 2019] d='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:09 EEST 2019] Getting webroot for domain='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:09 EEST 2019] _w='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:50:09 EEST 2019] _currentRoot='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:50:09 EEST 2019] Getting new-authz for domain='www.ykkosbasaari.fi'
[Fri Sep 27 11:50:09 EEST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:50:09 EEST 2019] Try new-authz for the 0 time.
[Fri Sep 27 11:50:09 EEST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Fri Sep 27 11:50:09 EEST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.ykkosbasaari.fi"}}'
[Fri Sep 27 11:50:09 EEST 2019] RSA key
[Fri Sep 27 11:50:09 EEST 2019] GET
[Fri Sep 27 11:50:09 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:09 EEST 2019] timeout=
[Fri Sep 27 11:50:09 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:10 EEST 2019] ret='0'
[Fri Sep 27 11:50:10 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:12 EEST 2019] GET
[Fri Sep 27 11:50:12 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:12 EEST 2019] timeout=
[Fri Sep 27 11:50:12 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:13 EEST 2019] ret='0'
[Fri Sep 27 11:50:13 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:15 EEST 2019] GET
[Fri Sep 27 11:50:15 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:15 EEST 2019] timeout=
[Fri Sep 27 11:50:15 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:16 EEST 2019] ret='0'
[Fri Sep 27 11:50:16 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:18 EEST 2019] GET
[Fri Sep 27 11:50:18 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:18 EEST 2019] timeout=
[Fri Sep 27 11:50:18 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:19 EEST 2019] ret='0'
[Fri Sep 27 11:50:19 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:21 EEST 2019] GET
[Fri Sep 27 11:50:21 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:21 EEST 2019] timeout=
[Fri Sep 27 11:50:21 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:22 EEST 2019] ret='0'
[Fri Sep 27 11:50:22 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:24 EEST 2019] GET
[Fri Sep 27 11:50:24 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:24 EEST 2019] timeout=
[Fri Sep 27 11:50:24 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:25 EEST 2019] ret='0'
[Fri Sep 27 11:50:25 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:27 EEST 2019] GET
[Fri Sep 27 11:50:27 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:27 EEST 2019] timeout=
[Fri Sep 27 11:50:27 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:28 EEST 2019] ret='0'
[Fri Sep 27 11:50:28 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:30 EEST 2019] GET
[Fri Sep 27 11:50:30 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:30 EEST 2019] timeout=
[Fri Sep 27 11:50:30 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:31 EEST 2019] ret='0'
[Fri Sep 27 11:50:31 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:33 EEST 2019] GET
[Fri Sep 27 11:50:33 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:33 EEST 2019] timeout=
[Fri Sep 27 11:50:33 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:34 EEST 2019] ret='0'
[Fri Sep 27 11:50:34 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:36 EEST 2019] GET
[Fri Sep 27 11:50:36 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:36 EEST 2019] timeout=
[Fri Sep 27 11:50:36 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:37 EEST 2019] ret='0'
[Fri Sep 27 11:50:37 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:39 EEST 2019] GET
[Fri Sep 27 11:50:39 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:39 EEST 2019] timeout=
[Fri Sep 27 11:50:39 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:40 EEST 2019] ret='0'
[Fri Sep 27 11:50:40 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:42 EEST 2019] GET
[Fri Sep 27 11:50:42 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:42 EEST 2019] timeout=
[Fri Sep 27 11:50:42 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:43 EEST 2019] ret='0'
[Fri Sep 27 11:50:43 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:45 EEST 2019] GET
[Fri Sep 27 11:50:45 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:45 EEST 2019] timeout=
[Fri Sep 27 11:50:45 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:46 EEST 2019] ret='0'
[Fri Sep 27 11:50:46 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:48 EEST 2019] GET
[Fri Sep 27 11:50:48 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:48 EEST 2019] timeout=
[Fri Sep 27 11:50:48 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:49 EEST 2019] ret='0'
[Fri Sep 27 11:50:49 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:51 EEST 2019] GET
[Fri Sep 27 11:50:51 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:51 EEST 2019] timeout=
[Fri Sep 27 11:50:51 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:52 EEST 2019] ret='0'
[Fri Sep 27 11:50:52 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:54 EEST 2019] GET
[Fri Sep 27 11:50:54 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:54 EEST 2019] timeout=
[Fri Sep 27 11:50:54 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:55 EEST 2019] ret='0'
[Fri Sep 27 11:50:55 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:50:57 EEST 2019] GET
[Fri Sep 27 11:50:57 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:50:57 EEST 2019] timeout=
[Fri Sep 27 11:50:57 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:50:58 EEST 2019] ret='0'
[Fri Sep 27 11:50:58 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:00 EEST 2019] GET
[Fri Sep 27 11:51:00 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:00 EEST 2019] timeout=
[Fri Sep 27 11:51:00 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:01 EEST 2019] ret='0'
[Fri Sep 27 11:51:01 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:03 EEST 2019] GET
[Fri Sep 27 11:51:03 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:03 EEST 2019] timeout=
[Fri Sep 27 11:51:03 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:04 EEST 2019] ret='0'
[Fri Sep 27 11:51:04 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:06 EEST 2019] GET
[Fri Sep 27 11:51:06 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:06 EEST 2019] timeout=
[Fri Sep 27 11:51:06 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:07 EEST 2019] ret='0'
[Fri Sep 27 11:51:07 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:09 EEST 2019] The new-authz request is ok.
[Fri Sep 27 11:51:09 EEST 2019] entry
[Fri Sep 27 11:51:09 EEST 2019] Error, can not get domain token entry www.ykkosbasaari.fi
[Fri Sep 27 11:51:09 EEST 2019] pid
[Fri Sep 27 11:51:09 EEST 2019] No need to restore nginx, skip.
[Fri Sep 27 11:51:09 EEST 2019] _clearupdns
[Fri Sep 27 11:51:09 EEST 2019] skip dns.
[Fri Sep 27 11:51:09 EEST 2019] _on_issue_err
[Fri Sep 27 11:51:09 EEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Fri Sep 27 11:51:09 EEST 2019] _main_domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:09 EEST 2019] _alt_domains='no'
[Fri Sep 27 11:51:09 EEST 2019] Using config home:/root/.acme.sh
[Fri Sep 27 11:51:09 EEST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:09 EEST 2019] DOMAIN_PATH='/root/.acme.sh/cwp_certs/ykkosbasaari.fi'
[Fri Sep 27 11:51:09 EEST 2019] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:51:09 EEST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:51:09 EEST 2019] GET
[Fri Sep 27 11:51:09 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:09 EEST 2019] timeout=
[Fri Sep 27 11:51:09 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:10 EEST 2019] ret='0'
[Fri Sep 27 11:51:10 EEST 2019] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Fri Sep 27 11:51:10 EEST 2019] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Fri Sep 27 11:51:10 EEST 2019] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Fri Sep 27 11:51:10 EEST 2019] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Fri Sep 27 11:51:10 EEST 2019] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Fri Sep 27 11:51:10 EEST 2019] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Fri Sep 27 11:51:10 EEST 2019] ACME_NEW_NONCE
[Fri Sep 27 11:51:10 EEST 2019] ACME_VERSION
[Fri Sep 27 11:51:10 EEST 2019] _on_before_issue
[Fri Sep 27 11:51:10 EEST 2019] _chk_main_domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:10 EEST 2019] _chk_alt_domains
[Fri Sep 27 11:51:10 EEST 2019] Le_LocalAddress
[Fri Sep 27 11:51:10 EEST 2019] d='ykkosbasaari.fi'
[Fri Sep 27 11:51:10 EEST 2019] Check for domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:10 EEST 2019] _currentRoot='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:51:10 EEST 2019] d
[Fri Sep 27 11:51:11 EEST 2019] _saved_account_key_hash is not changed, skip register account.
[Fri Sep 27 11:51:11 EEST 2019] Read key length:
[Fri Sep 27 11:51:11 EEST 2019] Creating domain key
[Fri Sep 27 11:51:11 EEST 2019] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
[Fri Sep 27 11:51:11 EEST 2019] Using config home:/root/.acme.sh
[Fri Sep 27 11:51:11 EEST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:11 EEST 2019] Use length 2048
[Fri Sep 27 11:51:11 EEST 2019] Using RSA: 2048
[Fri Sep 27 11:51:11 EEST 2019] The domain key is here: /root/.acme.sh/cwp_certs/ykkosbasaari.fi/ykkosbasaari.fi.key
[Fri Sep 27 11:51:11 EEST 2019] _createcsr
[Fri Sep 27 11:51:11 EEST 2019] Single domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:11 EEST 2019] Getting domain auth token for each domain
[Fri Sep 27 11:51:11 EEST 2019] d='ykkosbasaari.fi'
[Fri Sep 27 11:51:11 EEST 2019] Getting webroot for domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:11 EEST 2019] _w='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:51:11 EEST 2019] _currentRoot='/usr/local/apache/autossl_tmp/'
[Fri Sep 27 11:51:11 EEST 2019] Getting new-authz for domain='ykkosbasaari.fi'
[Fri Sep 27 11:51:11 EEST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Fri Sep 27 11:51:11 EEST 2019] Try new-authz for the 0 time.
[Fri Sep 27 11:51:11 EEST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Fri Sep 27 11:51:11 EEST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "ykkosbasaari.fi"}}'
[Fri Sep 27 11:51:11 EEST 2019] RSA key
[Fri Sep 27 11:51:11 EEST 2019] GET
[Fri Sep 27 11:51:11 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:11 EEST 2019] timeout=
[Fri Sep 27 11:51:11 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:12 EEST 2019] ret='0'
[Fri Sep 27 11:51:12 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:14 EEST 2019] GET
[Fri Sep 27 11:51:14 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:14 EEST 2019] timeout=
[Fri Sep 27 11:51:14 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:15 EEST 2019] ret='0'
[Fri Sep 27 11:51:15 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:17 EEST 2019] GET
[Fri Sep 27 11:51:17 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:17 EEST 2019] timeout=
[Fri Sep 27 11:51:17 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:18 EEST 2019] ret='0'
[Fri Sep 27 11:51:18 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:20 EEST 2019] GET
[Fri Sep 27 11:51:20 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:20 EEST 2019] timeout=
[Fri Sep 27 11:51:20 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:21 EEST 2019] ret='0'
[Fri Sep 27 11:51:21 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:23 EEST 2019] GET
[Fri Sep 27 11:51:23 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:23 EEST 2019] timeout=
[Fri Sep 27 11:51:23 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:24 EEST 2019] ret='0'
[Fri Sep 27 11:51:24 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:26 EEST 2019] GET
[Fri Sep 27 11:51:26 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:26 EEST 2019] timeout=
[Fri Sep 27 11:51:26 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:27 EEST 2019] ret='0'
[Fri Sep 27 11:51:27 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:29 EEST 2019] GET
[Fri Sep 27 11:51:29 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:29 EEST 2019] timeout=
[Fri Sep 27 11:51:29 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:30 EEST 2019] ret='0'
[Fri Sep 27 11:51:30 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:32 EEST 2019] GET
[Fri Sep 27 11:51:32 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:32 EEST 2019] timeout=
[Fri Sep 27 11:51:32 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:33 EEST 2019] ret='0'
[Fri Sep 27 11:51:33 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:35 EEST 2019] GET
[Fri Sep 27 11:51:35 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:35 EEST 2019] timeout=
[Fri Sep 27 11:51:35 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:36 EEST 2019] ret='0'
[Fri Sep 27 11:51:36 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:38 EEST 2019] GET
[Fri Sep 27 11:51:38 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:38 EEST 2019] timeout=
[Fri Sep 27 11:51:38 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:39 EEST 2019] ret='0'
[Fri Sep 27 11:51:39 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:41 EEST 2019] GET
[Fri Sep 27 11:51:41 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:41 EEST 2019] timeout=
[Fri Sep 27 11:51:41 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:42 EEST 2019] ret='0'
[Fri Sep 27 11:51:42 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:44 EEST 2019] GET
[Fri Sep 27 11:51:44 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:44 EEST 2019] timeout=
[Fri Sep 27 11:51:44 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:45 EEST 2019] ret='0'
[Fri Sep 27 11:51:45 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:47 EEST 2019] GET
[Fri Sep 27 11:51:47 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:47 EEST 2019] timeout=
[Fri Sep 27 11:51:47 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:48 EEST 2019] ret='0'
[Fri Sep 27 11:51:48 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:50 EEST 2019] GET
[Fri Sep 27 11:51:50 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:50 EEST 2019] timeout=
[Fri Sep 27 11:51:50 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:51 EEST 2019] ret='0'
[Fri Sep 27 11:51:51 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:53 EEST 2019] GET
[Fri Sep 27 11:51:53 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:53 EEST 2019] timeout=
[Fri Sep 27 11:51:53 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:54 EEST 2019] ret='0'
[Fri Sep 27 11:51:54 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:56 EEST 2019] GET
[Fri Sep 27 11:51:56 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:56 EEST 2019] timeout=
[Fri Sep 27 11:51:56 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:51:57 EEST 2019] ret='0'
[Fri Sep 27 11:51:57 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:51:59 EEST 2019] GET
[Fri Sep 27 11:51:59 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:51:59 EEST 2019] timeout=
[Fri Sep 27 11:51:59 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:52:00 EEST 2019] ret='0'
[Fri Sep 27 11:52:00 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:52:02 EEST 2019] GET
[Fri Sep 27 11:52:02 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:52:02 EEST 2019] timeout=
[Fri Sep 27 11:52:02 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:52:03 EEST 2019] ret='0'
[Fri Sep 27 11:52:03 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:52:05 EEST 2019] GET
[Fri Sep 27 11:52:05 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:52:05 EEST 2019] timeout=
[Fri Sep 27 11:52:05 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:52:06 EEST 2019] ret='0'
[Fri Sep 27 11:52:06 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:52:08 EEST 2019] GET
[Fri Sep 27 11:52:08 EEST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Fri Sep 27 11:52:08 EEST 2019] timeout=
[Fri Sep 27 11:52:08 EEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Fri Sep 27 11:52:09 EEST 2019] ret='0'
[Fri Sep 27 11:52:09 EEST 2019] Could not get nonce, let's try again.
[Fri Sep 27 11:52:11 EEST 2019] The new-authz request is ok.
[Fri Sep 27 11:52:11 EEST 2019] entry
[Fri Sep 27 11:52:11 EEST 2019] Error, can not get domain token entry ykkosbasaari.fi
[Fri Sep 27 11:52:11 EEST 2019] pid
[Fri Sep 27 11:52:11 EEST 2019] No need to restore nginx, skip.
[Fri Sep 27 11:52:11 EEST 2019] _clearupdns
[Fri Sep 27 11:52:11 EEST 2019] skip dns.
[Fri Sep 27 11:52:11 EEST 2019] _on_issue_err
[Fri Sep 27 11:52:11 EEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log

My web server is (include version): Apache/2.4.39

The operating system my web server runs on is (include version): CentOS Linux release 7.6.1810 (Core)

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Yes, CWPpro version: 0.9.8.894

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): acme.sh 2.8.0

Previously I had a problem with Let's Encrypt randomly not succeeding in issuing certificates and renewing them. We found a workaround for that in this thread Can't connect to Let's Encrypt server - #23 by Solsku by changing the IP address of acme-v01.api.letsencrypt.org in hosts-file to a custom one instead of using the one I get from DNS automatically.

Now this workaround doesn't seem applicable anymore, because acme-v01.api.letsencrypt.org always returns the same IP address 172.65.32.248 and I can't search for any alternative ones anymore to try and see which one works.

I managed to get this domain working by using an old IP address I had stored, but lots of old ones had already stopped working, so this solution is coming to its end.

When I did curl -v with the new address I received the following output:

curl -v https://acme-v01.api.letsencrypt.org

  • Trying 172.65.32.248...
  • TCP_NODELAY set
  • Connected to acme-v01.api.letsencrypt.org (172.65.32.248) port 443 (#0)
  • Initializing NSS with certpath: sql:/etc/pki/nssdb
  • CAfile: none
    CApath: none
  • loaded libnssckbi.so
  • ALPN, server accepted to use h2
  • SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • Server certificate:
  •   subject: CN=acme-v01.api.letsencrypt.org

  •   start date: Sep 13 17:57:16 2019 GMT

  •   expire date: Dec 12 17:57:16 2019 GMT

  •   common name: acme-v01.api.letsencrypt.org

  •   issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
  • Using HTTP2, server supports multi-use
  • Connection state changed (HTTP/2 confirmed)
  • Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
  • Using Stream ID: 1 (easy handle 0x2015e20)

GET / HTTP/2
Host: acme-v01.api.letsencrypt.org
User-Agent: curl/7.62.0
Accept: /

  • Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
    < HTTP/2 200
    < server: nginx
    < date: Fri, 27 Sep 2019 09:14:35 GMT
    < content-type: text/html
    < content-length: 2174
    < last-modified: Mon, 25 Feb 2019 20:15:27 GMT
    < etag: "5c744cdf-87e"
    < x-frame-options: DENY
    < strict-transport-security: max-age=604800
    < accept-ranges: bytes
    <
Boulder: The Let's Encrypt CA 

  <div class="col-xs-6 text-left">
    <h1>Boulder<br>
    <small>The Let's Encrypt CA</small></h1>
  </div>
</div>

<div class="row">
  <div class="col-xs-8 col-xs-offset-2 text-center">
    <h3>This is an <a href="https://github.com/letsencrypt/acme-spec/">ACME</a> Certificate Authority running <a href="https://github.com/letsencrypt/boulder">Boulder</a>.</h3>
    <p>This is a <em>programmatic</em> endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See <a href="https://letsencrypt.org/"><tt>https://letsencrypt.org/</tt></a> for help.</p>
    <p>If you're trying to use this service, note that the starting point, <em>the directory</em>, is available at this URL: <a href="https://acme-v02.api.letsencrypt.org/directory"><tt>https://acme-v02.api.letsencrypt.org/directory</a></tt>.</p>
  </div>
</div>
<div class="row">
  <div class="col-xs-4 col-xs-offset-2 text-center">
    <p><a href="https://letsencrypt.status.io" title="Twitter">
      <i class="fa fa-area-chart"></i>
      Service Status (letsencrypt.status.io)
    </a></p>
  </div>
  <div class="col-xs-4 text-center">
    <p><a href="https://twitter.com/letsencrypt" title="Twitter">
      <i class="fa fa-twitter"></i>
      Check with us on Twitter
    </a></p>
  </div>
</div> <!-- row -->
* Connection #0 to host acme-v01.api.letsencrypt.org left intact

I hope we can find the root cause of this problem. Thank you in advance.

1 Like
2

Hi @Solsku

Letsencrypt has changed the own CDN, so using an old ip can't work.

See

Your server is able to connect Letsencrypt, so that isn't the problem.

But you use acme.sh. There are changes. First step: Update your acme.sh.

Yep, the nonce-problem:

Could not get nonce, let's try again.

An update is required.

1 Like
3

Thank you for your answer. I updated acme.sh with parameter --upgrade, and it started to work using acme-v02.api

2 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.