Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
I ran this command:
wacs --renew --baseuri "https://acme-v02.api.letsencrypt.org/"
It produced this output:
[www.tdpickleball.org] Authorizing using http-01 validation (FileSystem)
Answer should now be browsable at http://www.tdpickleball.org/.well-known/acme-challenge/twJArJIi22Pn1oDWjKKBiy9SOx8DZoqdb1E1jOmqbLo
Preliminary validation failed, the server answered '(null)' instead of 'twJArJIi22Pn1oDWjKKBiy9SOx8DZoqdb1E1jOmqbLo.wQ3q8p4S_vZ0FLebw1vjtuPbqmCaJW7KrFcDyDtoY-0'. The ACME server might have a different perspective
[www.tdpickleball.org] Authorization result: invalid
"detail": "18.104.22.168: Invalid response from https://www.tdpickleball.org: "\ufeff\r\n<h"",
[www.tdpickleball.org] Deactivating pending authorization
[www.vanirbb.com] Deactivating pending authorization
[tdpickleball.org] Deactivating pending authorization
My web server is (include version):
The operating system my web server runs on is (include version):
Windows Server 2019
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of
certbot --version or
certbot-auto --version if you're using Certbot):
Note that the rest of my sites all renew as expected on this server, only the one fails. When I use letsdebug.net it finds no issues.