Unable to renew certificate

Help
2

I'm not familiar with that script, but from searching around, it looks to be something based on Posh-ACME. I have some generic advice that may or may not help:

  1. Can you make sure you are on the latest version of that script, and that it's using the latest version of Posh-ACME??

  2. Can you run with -LogLevel Debug which I'm hoping will give more helpful information?

  3. Is there any chance this has been broken for you since May? Around that time, Let's Encrypt's API servers changed to use an ECDSA certificate instead of an RSA one, and some Windows servers have been overly "hardened" and have disabled those ciphers. You can find more information in these threads, which are for a different Windows client but the fix would be the same if that's the problem.

    Certify the Web Cannot create secure channel error

    Fix: "Could not create SSL/TLS secure channel." when attempting a certificate order with Let's Encrypt (or "CA ACME Directory is not accessible") - Announcements - Certify The Web - Support Community

4 Likes