The Let's Encrypt-made scheduled task on a Windows 2016 Essentials box did not renew an SSL. Task Scheduler's "Last Run Result" says:
0x8000809A
And its history ends with:
Task Scheduler successfully completed task ... \2.1.14 x64 pluggable\wacs.exe" with return code 2147516570.
If I run the scheduled task manually I get the same result.
I tried some different things and ended up deleting the certificate and canceling renewals and starting over. wacs.exe did everything normally and I have a new certificate but if I run the (new) scheduled task manually I get the same result.
Additionally if I run a renewal by relaunching wacs.exe manually it works fine, though one line warns me:
Using cached certificate for [IIS] (any site), (any host). To force issue of a new certificate within 1 days, delete the .pfx file from the CertificatePath or run with the --force switch. Be ware that you might run into rate limits doing so.
It runs through the rest of its stuff and ends with
Next renewal scheduled at 2025/10/14 8:32:00
Renewal for [IIS] (any site), (any host) succeeded
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
What can that be?
Thanks