| Server IP : 52.202.253.110 / Your IP : 216.73.217.139 Web Server : Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8 System : Linux ip-172-32-10-67.ec2.internal 6.1.49-70.116.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 6 22:13:07 UTC 2023 x86_64 User : ec2-user ( 1000) PHP Version : 8.2.9 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/log/letsencrypt/ |
Upload File : |
2026-02-07 07:34:15,314:DEBUG:certbot._internal.main:certbot version: 2.6.0
2026-02-07 07:34:15,315:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-02-07 07:34:15,315:DEBUG:certbot._internal.main:Arguments: []
2026-02-07 07:34:15,315:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-02-07 07:34:15,340:DEBUG:certbot._internal.log:Root logging level set at 30
2026-02-07 07:34:15,341:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/airage.com.conf
2026-02-07 07:34:15,358:DEBUG:certbot._internal.plugins.selection:Requested authenticator <certbot._internal.cli.cli_utils._Default object at 0x7f96f92974f0> and installer <certbot._internal.cli.cli_utils._Default object at 0x7f96f92974f0>
2026-02-07 07:34:15,394:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/airage.com/cert3.pem
2026-02-07 07:34:15,397:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:33:54 UTC.
2026-02-07 07:34:15,397:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:15,397:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:15,543:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:15,808:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f925e9a0>
Prep: True
2026-02-07 07:34:15,809:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f925e9a0>
Prep: True
2026-02-07 07:34:15,809:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f925e9a0> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f925e9a0>
2026-02-07 07:34:15,809:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:15,855:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:15,856:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:15,859:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:16,044:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:16,044:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:16 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"8vmyBu1SZlE": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-02-07 07:34:16,046:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for airage.com
2026-02-07 07:34:16,051:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:16,051:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:16,113:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:16,113:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:16 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TG2T4UQKCqTCYMrrLI5HRJviajf84bH_Saea5SFLoqitg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:16,113:DEBUG:acme.client:Storing nonce: NeKnt8TG2T4UQKCqTCYMrrLI5HRJviajf84bH_Saea5SFLoqitg
2026-02-07 07:34:16,114:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "airage.com"\n }\n ]\n}'
2026-02-07 07:34:16,116:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhURzJUNFVRS0NxVENZTXJyTEk1SFJKdmlhamY4NGJIX1NhZWE1U0ZMb3FpdGciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "MRhvE_cuf-x76xSK-Y2FNMWWPjTEmTS1Ud2-VLFxiNtpkehxUs-KpLXDVy-r_jYxfajfcG2cvg-JEwX5FnbB72ZhHaiI6nk_m-4dLSMc-IZhXn5hIDLrz4Ka2yVd8Tu2e5p5JICOQEkQqFEZJBRXNvf90Q_MT9VS-39e1UJhWuZM30LnElilW2-VpPYJu5_tuxBaMml_ufHJ5Ujvd9iKF72ty7x_1mTDDNvEGjp0HjKg7zmkjeH0PosIgdTagc-V6HdLtnzy2h30pjsDcZfWmIidkkdVK1xVaZtVBK1ChtsBR2il9UQLzYzMevnaDzfzwekwHa3yZy1W9xxyjWreJg",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImFpcmFnZS5jb20iCiAgICB9CiAgXQp9"
}
2026-02-07 07:34:16,214:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 344
2026-02-07 07:34:16,215:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:16 GMT
Content-Type: application/json
Content-Length: 344
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477687865136
Replay-Nonce: NeKnt8TGV_56m_LeNOJbQlAnVA8c-1jtZVyAF-QWDTbr3xM13pg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:16Z",
"identifiers": [
{
"type": "dns",
"value": "airage.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940236826"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477687865136"
}
2026-02-07 07:34:16,215:DEBUG:acme.client:Storing nonce: NeKnt8TGV_56m_LeNOJbQlAnVA8c-1jtZVyAF-QWDTbr3xM13pg
2026-02-07 07:34:16,215:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:16,216:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940236826:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR1ZfNTZtX0xlTk9KYlFsQW5WQThjLTFqdFpWeUFGLVFXRFRicjN4TTEzcGciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjM2ODI2In0",
"signature": "C-ymaZU22E5ZkbUJoLE43hzjYTJHgVOWJCVk0N3gEV9ZAK0_i9UoVpU6wJ5s34eRCczT870pC2pJ_f6mWantoJoP1IKI_CYdB39wdTV2NzaUWE4qdldantKS-V1Nb38SqAhLB-Idae0OMyVXjqvB0uRTd0SiK0wa7lG35WbSFi9gYu7fSFqqBoQr0uPg9MWfkKQzXUyVLRrG15rmwGt82Y4-Ld3H9aPNPtH8tl7QrmYzYzU-9UYa1jjOPyhtBo2xYM8ZEPrsTYPx2MTxsDwIPGZ_vj0f_9527CRHa9F9-l3aNyjIiaWieSUn5hjIxe1pXbgyMYOVOo5Q_McDWPNoGg",
"payload": ""
}
2026-02-07 07:34:16,280:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940236826 HTTP/1.1" 200 818
2026-02-07 07:34:16,280:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:16 GMT
Content-Type: application/json
Content-Length: 818
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGURek9yKTuekbZ-K2SjgHzTGJ4hcVdkQW9K6R_jDRCVg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airage.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:16Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/jR0EHg",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/gusQYw",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
}
]
}
2026-02-07 07:34:16,280:DEBUG:acme.client:Storing nonce: NeKnt8TGURek9yKTuekbZ-K2SjgHzTGJ4hcVdkQW9K6R_jDRCVg
2026-02-07 07:34:16,281:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:16,281:INFO:certbot._internal.auth_handler:http-01 challenge for airage.com
2026-02-07 07:34:16,293:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: airage.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:16,293:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: airage.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:16,294:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:16,294:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:16,295:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:16,374:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:16,375:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:16,375:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:19,552:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:19,554:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR1VSZWs5eUtUdWVrYlotSzJTamdIelRHSjRoY1Zka1FXOUs2Ul9qRFJDVmciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMjM2ODI2L1k3M3d5dyJ9",
"signature": "F4IMo1iFbE17zRlxeOUJ6lZ5J2jQJAUTK-R28ONtSIL15SacwlQzxITZkQg60T6N71rW73bdD6kvkVrU69bGLl1wK5ynXhSqXoAySI1VDk9r_5spIfiWXsVWGu4iwoBZFyewCEVT6jjt9nRTO7jyIsJ5XwKLbEjf1dz2XjzUwqjbT_RoqpCere5wiIbRAvYyMXx7TCpOGSDTigx3rseKUVnlFEuUnUuZURsCFvukPl2G-9KwnfMz14ZhtxLfoMZlxnSjsypV4fju1LSi0yhzDP1g16VYuY-BhduLRnsZMUX14UpE-0DTl-2Cq5DnDQ_6szlKEHTmbtKv7yr1UT5wyA",
"payload": "e30"
}
2026-02-07 07:34:19,632:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940236826/Y73wyw HTTP/1.1" 200 195
2026-02-07 07:34:19,633:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:19 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940236826>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw
Replay-Nonce: 4AH-2vvBSCb62qpfXV-BF8vip3PWwWrHJT8n6UixtiwMdJDQpqI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
}
2026-02-07 07:34:19,633:DEBUG:acme.client:Storing nonce: 4AH-2vvBSCb62qpfXV-BF8vip3PWwWrHJT8n6UixtiwMdJDQpqI
2026-02-07 07:34:19,634:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:34:20,635:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:20,636:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940236826:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QlNDYjYycXBmWFYtQkY4dmlwM1BXd1dySEpUOG42VWl4dGl3TWRKRFFwcUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjM2ODI2In0",
"signature": "I_iN64PUZcCYoH7OCMiZ8PzKNrUK5sFZvixyn9bckCvwfDPf23DAVgQnlt5hUN-HVnCZnF5P6FWckcqshAuHTW5FfnwDCmrQ2tdhKEFVDPtts2FnDm2wlhE6KJm0WJKxb6fnta_QMp5xAS8xP3P3K1skfbHSUe4n8G77L7QMN238PsAtDVSziDO1xYav9Nap1mfWAD_8RfXDLH3m2ub-Tos3psV-qY-Kj27HT4Q4NdHlo93E_RPttQdXE8Skw7neX4wM0RT_5hbmXE1r4OUArBD_-UN4pUDzpeP0jZBYGfzIJHp7c7Hm5tdZVy2JeCdw0Xnbq3OmjrVRLMcid3f9sA",
"payload": ""
}
2026-02-07 07:34:20,699:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940236826 HTTP/1.1" 200 818
2026-02-07 07:34:20,700:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:20 GMT
Content-Type: application/json
Content-Length: 818
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGmlDniePwLGLYA-M65e8epi1qkImlWo5j-gwbLB70XT0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airage.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:16Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/gusQYw",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/jR0EHg",
"status": "pending",
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48"
}
]
}
2026-02-07 07:34:20,700:DEBUG:acme.client:Storing nonce: NeKnt8TGmlDniePwLGLYA-M65e8epi1qkImlWo5j-gwbLB70XT0
2026-02-07 07:34:23,703:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:23,704:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940236826:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR21sRG5pZVB3TEdMWUEtTTY1ZThlcGkxcWtJbWxXbzVqLWd3YkxCNzBYVDAiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjM2ODI2In0",
"signature": "AcIWAPsZ9z8jUr2iBI_p3N1MhAVEYnIvFiLar8BHdSqDZSQQ-jvdk4sD35nhMCnCqcz_-6qrdm_mV-xsBk14pZ8EiWQzbU5nz_IclzebNytKY8taIB7otTbkEflDwBx9ZN6zjsnDTuk3UfdAAfkL6ntwiJlfDsru8hM6uTxbpgoy8AmiF9PxsKJDtXCq60Z4TMHB83hhNWoTb2k7Vp9ow9JoFpzUghOU8M5KgFIv0sKFf3C91EzJ6GIs8YZrLy5F4VsL2G2ssGj-EdFbx2Wn86bUS9bU6Fc0ahqxNs1bmQ4npHhZ0NpIOQ2JnE5rGsJQihNcP9_L8pbZ-P4Xp0lQ_g",
"payload": ""
}
2026-02-07 07:34:23,769:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940236826 HTTP/1.1" 200 1704
2026-02-07 07:34:23,770:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:23 GMT
Content-Type: application/json
Content-Length: 1704
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TG9z9pAJu7eANxNyUf1lKFx6G5w-wZhJbNnuzARCLoMLY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airage.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:16Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940236826/Y73wyw",
"status": "invalid",
"validated": "2026-02-07T07:34:19Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "54.146.93.33: Invalid response from https://www.airage.com/: \"\u003c!DOCTYPE html\u003e\\r\\n\u003chtml lang=\\\"en-US\\\"\u003e\\r\\n\u003chead\u003e\\r\\n\\t\u003c!-- onecount code --\u003e\\r\\n\\t\u003c!-- \u003cscript type='text/javascript' src=\\\"https://airage-\"",
"status": 403
},
"token": "DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48",
"validationRecord": [
{
"url": "http://airage.com/.well-known/acme-challenge/DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48",
"hostname": "airage.com",
"port": "80",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://airage.com/.well-known/acme-challenge/DmP1XRrzNYPZdIqikCSavGF29IBKFnI9UndKc5iCS48",
"hostname": "airage.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://www.airage.com/",
"hostname": "www.airage.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
}
]
}
]
}
2026-02-07 07:34:23,770:DEBUG:acme.client:Storing nonce: NeKnt8TG9z9pAJu7eANxNyUf1lKFx6G5w-wZhJbNnuzARCLoMLY
2026-02-07 07:34:23,770:INFO:certbot._internal.auth_handler:Challenge failed for domain airage.com
2026-02-07 07:34:23,770:INFO:certbot._internal.auth_handler:http-01 challenge for airage.com
2026-02-07 07:34:23,771:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: airage.com
Type: unauthorized
Detail: 54.146.93.33: Invalid response from https://www.airage.com/: "<!DOCTYPE html>\r\n<html lang=\"en-US\">\r\n<head>\r\n\t<!-- onecount code -->\r\n\t<!-- <script type='text/javascript' src=\"https://airage-"
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:34:23,772:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:23,772:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:34:23,773:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:34:23,937:ERROR:certbot._internal.renewal:Failed to renew certificate airage.com with error: Some challenges have failed.
2026-02-07 07:34:23,943:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:23,945:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/airagestore.com.conf
2026-02-07 07:34:23,964:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/airagestore.com/cert2.pem
2026-02-07 07:34:23,965:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:34:05 UTC.
2026-02-07 07:34:23,965:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:23,965:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:24,054:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:24,314:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f92db400>
Prep: True
2026-02-07 07:34:24,315:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f92db400>
Prep: True
2026-02-07 07:34:24,315:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f92db400> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f92db400>
2026-02-07 07:34:24,315:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:24,357:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:24,358:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:24,359:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:24,541:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:24,542:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:24 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"Fiw7-cGUDxo": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-02-07 07:34:24,543:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for airagestore.com and www.airagestore.com
2026-02-07 07:34:24,545:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:24,546:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:24,606:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:24,606:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:24 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGuKdcLhPl3KPMbudypM64pmwNp4_jHkvxOHBLarzP1p8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:24,606:DEBUG:acme.client:Storing nonce: NeKnt8TGuKdcLhPl3KPMbudypM64pmwNp4_jHkvxOHBLarzP1p8
2026-02-07 07:34:24,607:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "airagestore.com"\n },\n {\n "type": "dns",\n "value": "www.airagestore.com"\n }\n ]\n}'
2026-02-07 07:34:24,609:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR3VLZGNMaFBsM0tQTWJ1ZHlwTTY0cG13TnA0X2pIa3Z4T0hCTGFyelAxcDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "OOnnA70YBf07SJAMB0FUbRtJvJMbicpi4Za8k-1SkiK7zEWFCg345awPkwnd3zXTnHZ8vAES0N3URX0csBzBbHHQfAkHlED034VS3f1fzU09ZziZ5b0Xrwo02P95PDViEjuFNhXiF9BklZfobNc6DnrnM1fIfXWtOFQhhL_io8cpHz_hfGbWuIpLz4ZSkWsIivzANknNHQIk_UxXj_h7bos4yomQDb3Svo1z_EMW8b2aanN_-fogfbpaYjkRcKAy1BaHQW09HNzx-glLuuvJ4WirXnbu9__VBYXh5-lyBUquubA9wObnvGGXowjZacAoUb_CHUAbWZpFVPYEHRPFIA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImFpcmFnZXN0b3JlLmNvbSIKICAgIH0sCiAgICB7CiAgICAgICJ0eXBlIjogImRucyIsCiAgICAgICJ2YWx1ZSI6ICJ3d3cuYWlyYWdlc3RvcmUuY29tIgogICAgfQogIF0KfQ"
}
2026-02-07 07:34:24,688:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 499
2026-02-07 07:34:24,689:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:24 GMT
Content-Type: application/json
Content-Length: 499
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477687897296
Replay-Nonce: 4AH-2vvBF-WAZCfsHe07LLRUmTc1eXqvAH84r921jJp7dbS0_WU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:24Z",
"identifiers": [
{
"type": "dns",
"value": "airagestore.com"
},
{
"type": "dns",
"value": "www.airagestore.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281476",
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281486"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477687897296"
}
2026-02-07 07:34:24,689:DEBUG:acme.client:Storing nonce: 4AH-2vvBF-WAZCfsHe07LLRUmTc1eXqvAH84r921jJp7dbS0_WU
2026-02-07 07:34:24,689:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:24,690:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281476:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QkYtV0FaQ2ZzSGUwN0xMUlVtVGMxZVhxdkFIODRyOTIxakpwN2RiUzBfV1UiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjgxNDc2In0",
"signature": "OaqJq21RP3cwrBsqDxx0TV3mA54gEeeB35WaEyuzPtwrllepDs7a0oxkLYp_IdaZRE-AbbjjDrIcJxiNWdGX6kwPDbCKkJ5URmpJztW7HvYzXhbs1JIwusIcAZw6JhcBYzrc8FiEKiL6btrD3NKLEMIbXm-ag8aYcmnLRiUHJVC2Ww1VWwWctvKrJQDCBOyA2yc-tEI172WRHTEm2jt1qF2malo0iljljjHAyMjc7Ychk38dTHBrWQZUyOzMJHmQMz59RMFBk80-GCMdwH1iXOINaA2nbJsAVhIAex3F_x6iCiHLbGjmfsbFCrrE6DBLRJccSw91UU4fJ0cZyf-rOA",
"payload": ""
}
2026-02-07 07:34:24,765:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940281476 HTTP/1.1" 200 823
2026-02-07 07:34:24,765:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:24 GMT
Content-Type: application/json
Content-Length: 823
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBEtbXeUyB5yZNEwRVj5RV0AZGD2QqcPsR6jechPBxFlY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airagestore.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:24Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/xd4Wag",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/7kH7Tg",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
}
]
}
2026-02-07 07:34:24,766:DEBUG:acme.client:Storing nonce: 4AH-2vvBEtbXeUyB5yZNEwRVj5RV0AZGD2QqcPsR6jechPBxFlY
2026-02-07 07:34:24,766:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:24,767:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281486:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QkV0YlhlVXlCNXlaTkV3UlZqNVJWMEFaR0QyUXFjUHNSNmplY2hQQnhGbFkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjgxNDg2In0",
"signature": "REAvT-rodh8NYG4Iw_W6e-eIYxu9bPTn0NIp3NnbdDu7_4GYdA6JAB32SV9v02WTuAgckfowbtQ5BVfr07gQZQ-fDdhEVDyR7KUQppjGHYb4jxfqky_gPFzHKEnG7eJIcDERjkaVVN5FDlo1Trk_WLHDcMn_oF8SV8uH8KcX_Ajw_YRks31EgcmSO4CuuwNjnEovB6tlP4ueENVAqfzMmc9DVC1rgPhXsMmJSGlPCZmkQQnG-Nq3V1cRGZNR2LWVLVh5EfApYyIMqFvw7RtEoInWKAUO1ukWUnDamNSlLuhCW75tlRPR9q-t9CvYWWaIu1O6X83iU-GmDDMuBReFJQ",
"payload": ""
}
2026-02-07 07:34:24,831:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940281486 HTTP/1.1" 200 827
2026-02-07 07:34:24,832:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:24 GMT
Content-Type: application/json
Content-Length: 827
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGM9tAprh0BNUtGPlo4np2Zh8hoqpR9s0i5nk8yaaqzSc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.airagestore.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:24Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/58lz-A",
"status": "pending",
"token": "MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/KTdpTA",
"status": "pending",
"token": "MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/pkx_RA",
"status": "pending",
"token": "MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4"
}
]
}
2026-02-07 07:34:24,832:DEBUG:acme.client:Storing nonce: NeKnt8TGM9tAprh0BNUtGPlo4np2Zh8hoqpR9s0i5nk8yaaqzSc
2026-02-07 07:34:24,832:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:24,832:INFO:certbot._internal.auth_handler:http-01 challenge for airagestore.com
2026-02-07 07:34:24,833:INFO:certbot._internal.auth_handler:http-01 challenge for www.airagestore.com
2026-02-07 07:34:24,842:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: airagestore.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:24,842:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: airagestore.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:24,842:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:24,843:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:24,843:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:24,923:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:24,923:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:24,923:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:28,103:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:28,105:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR005dEFwcmgwQk5VdEdQbG80bnAyWmg4aG9xcFI5czBpNW5rOHlhYXF6U2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMjgxNDc2LzIxcDQ0QSJ9",
"signature": "YdYK8Oya2ASUpFVj7CJKmdGSnZdGnmBjazhO4OHQxyWlHjgieBev6U5wInSXPletLLvViLp-SuqQC3y1pDPm22rOJGyFWC3OENCEDowGJR1qrGQRAbfizxtuxeb8Qq2TRnSz9Cu8OMBfBHOnpqRDqDsUnq7P2iB65P7L5GoMCWakEXGT5Yt6Z_9fTljVgx6QG4OzLIsLCAiyr6iQJQRwvAhxYTvpNGhxhpRf-JArpXZs-Wqkrjzjp_O81TcZ2vb8-bh-aBtH4zjFoCGi_3zWE-t9imkxbDHArgqCv9O5Z_n6-PyTpm7CzQeSAVPHtlbJ2yin7u29iIMTRntRH1pasQ",
"payload": "e30"
}
2026-02-07 07:34:28,228:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940281476/21p44A HTTP/1.1" 200 195
2026-02-07 07:34:28,229:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:28 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281476>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A
Replay-Nonce: 4AH-2vvBzBbw2ez3N9bruFa5D1Zzn3coWpl4WvY7N01TLJNsXh4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
}
2026-02-07 07:34:28,229:DEBUG:acme.client:Storing nonce: 4AH-2vvBzBbw2ez3N9bruFa5D1Zzn3coWpl4WvY7N01TLJNsXh4
2026-02-07 07:34:28,229:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:28,230:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/58lz-A:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QnpCYncyZXozTjlicnVGYTVEMVp6bjNjb1dwbDRXdlk3TjAxVExKTnNYaDQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMjgxNDg2LzU4bHotQSJ9",
"signature": "dDjDFccDa1Drrn7cXvgsiXb-SSK85fEyaaFq5rthM1v98HBpzRdDAStPa1lP2MfnNk193fNy8KmRVbA1pCtezhqyUsU01vhWS75yYvhMxdjlYzCHLpEsioEqeWTqkEKP8HzChRCpVA24tyVFWUCJLG39StQz1hXJ5228UflGbV953oHK4URoi2ch_iFu3FvPfVHt8wBGCP_YZuTNJKkul_sScYNiyPuSSFB5o1POva6QgDdUDY-2dat-dP9Z9HsrBjq82_0SKTuP9QD8RA4vGoCq2OUqYjjpg8jQMZn8Qemnc-f1KkQsnKvWGm6dhPbjZ5HJ0FgOG0t-BR72kjIniQ",
"payload": "e30"
}
2026-02-07 07:34:28,312:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940281486/58lz-A HTTP/1.1" 200 195
2026-02-07 07:34:28,312:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:28 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281486>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/58lz-A
Replay-Nonce: NeKnt8TG19-RifAdkpB_526jrZk0yDHwb1PbuxBGGv0WJub6j2g
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/58lz-A",
"status": "pending",
"token": "MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4"
}
2026-02-07 07:34:28,312:DEBUG:acme.client:Storing nonce: NeKnt8TG19-RifAdkpB_526jrZk0yDHwb1PbuxBGGv0WJub6j2g
2026-02-07 07:34:28,312:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:34:29,313:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:29,314:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281476:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhURzE5LVJpZkFka3BCXzUyNmpyWmsweURId2IxUGJ1eEJHR3YwV0p1YjZqMmciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjgxNDc2In0",
"signature": "G9S-OesIpfav94Ef7FsPcaRuWHpft8ll4xmjDNkOzja4URW1lIvJF0pVJy7YZjC29uyQOAy8hri7wuFqyY36BvRd69uLgZp4td-Lc_qKft0uWwz0W_5HWBudRmngSTzsb73G1OJadKY12-nSrp7IY7qe4T8Amh-xprmL7FrI1he2XCcNqVEGVpCD0-OJZZuLSdF8f--OTtEYxqEB7zr1NIzWHZlWWnFOJtkoiVGP7P5IE2H_EHVnKeZQnVTygcTh2SNvlLqbb4rlozA4QuUgtToma0dsUr1F9NxXt7xln3W7NeZPyIwIxZayq-dmQPNxyAzmgwyKxT4Wo-NNoYrLGw",
"payload": ""
}
2026-02-07 07:34:29,378:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940281476 HTTP/1.1" 200 823
2026-02-07 07:34:29,378:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:29 GMT
Content-Type: application/json
Content-Length: 823
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBEC_tcBaC6UwqSlj1PwGt93VJe9TYhyvJT3pzYB6QqqI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airagestore.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:24Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/7kH7Tg",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/xd4Wag",
"status": "pending",
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM"
}
]
}
2026-02-07 07:34:29,378:DEBUG:acme.client:Storing nonce: 4AH-2vvBEC_tcBaC6UwqSlj1PwGt93VJe9TYhyvJT3pzYB6QqqI
2026-02-07 07:34:29,379:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:29,380:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281486:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QkVDX3RjQmFDNlV3cVNsajFQd0d0OTNWSmU5VFloeXZKVDNwellCNlFxcUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjgxNDg2In0",
"signature": "gQb3rWlmAstueAV4McmvtqoOi5SliLQHKq-cLNqDMzUEP2AZxItIMLUrTF6P6_Kj3Cv-wmmFDLq1m1RGf0hqgcGk6jZZN-LUmQLgpXz_rHQlokx8qpyxRegqEoqgxi6dwG60reRTtetmPz02_2rvU8BTW_Vx0O7-Y7ji30CAf6YdkCnH2-B-1llito6lMLYurvLteeZLA7m2ALp-u1CPy1kJCCc5cT1lKtzKnPA3BKs-67oMcIAWgkcD5PJGDNoZyvY3_RtLwZ-KNDjsu_qiTj9BD9pAn2HIOff3sVxsSs2uMNqj5xbafKE4dZDiA3Dt6iHq7AOQsCZC8B0sChcddw",
"payload": ""
}
2026-02-07 07:34:29,443:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940281486 HTTP/1.1" 200 1373
2026-02-07 07:34:29,443:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:29 GMT
Content-Type: application/json
Content-Length: 1373
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBJ7vUAuFN_lTPP9HBv3omZEWt_sWTlkEq8X1r1rtd1n4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.airagestore.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:24Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281486/58lz-A",
"status": "invalid",
"validated": "2026-02-07T07:34:28Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "54.146.93.33: Invalid response from https://www.airagestore.com/.well-known/acme-challenge/MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4: 404",
"status": 403
},
"token": "MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4",
"validationRecord": [
{
"url": "http://www.airagestore.com/.well-known/acme-challenge/MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4",
"hostname": "www.airagestore.com",
"port": "80",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://www.airagestore.com/.well-known/acme-challenge/MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4",
"hostname": "www.airagestore.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
}
]
}
]
}
2026-02-07 07:34:29,444:DEBUG:acme.client:Storing nonce: 4AH-2vvBJ7vUAuFN_lTPP9HBv3omZEWt_sWTlkEq8X1r1rtd1n4
2026-02-07 07:34:29,444:INFO:certbot._internal.auth_handler:Challenge failed for domain www.airagestore.com
2026-02-07 07:34:32,447:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:32,449:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940281476:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2Qko3dlVBdUZOX2xUUFA5SEJ2M29tWkVXdF9zV1Rsa0VxOFgxcjFydGQxbjQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMjgxNDc2In0",
"signature": "f-PBAYjP54nBTWA28FAGVmSGESD-064-7IXWBMD1lsMrc0dh7a666HZgAUouh5y48D5wtsBM9-oyg2cHSSAx-_I3WTZgj2nkhWj_mn0eKmwIS_j1jnO4ydGooytYobPJyofc502G4H33C2pN6OhK8zSa4byRDX8q3UjS2QTHRuZqwpnEYoLYDPqV1T5MK5fxpEiEmBTGIm1fsAqnVqAREKubMubcRLFGEEpWKPi1pagOs9rmGzWAxSysL98z59c9PVgJdEzMQXKx_KRvHWD3DYFGsVc_US0SyFvc7NW1g7CSRfqpWHBGPYsb10P66bYSP8A4qmcfQa36m5wPnYhjOg",
"payload": ""
}
2026-02-07 07:34:32,543:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940281476 HTTP/1.1" 200 1676
2026-02-07 07:34:32,544:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:32 GMT
Content-Type: application/json
Content-Length: 1676
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBueEVztAHSigvLYj7kScOc-VnbhgNFBxt9SMZqLmm2ns
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "airagestore.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:24Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940281476/21p44A",
"status": "invalid",
"validated": "2026-02-07T07:34:28Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "54.146.93.33: Invalid response from https://www.airagestore.com/.well-known/acme-challenge/jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM: 404",
"status": 403
},
"token": "jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM",
"validationRecord": [
{
"url": "http://airagestore.com/.well-known/acme-challenge/jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM",
"hostname": "airagestore.com",
"port": "80",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://airagestore.com/.well-known/acme-challenge/jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM",
"hostname": "airagestore.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://www.airagestore.com/.well-known/acme-challenge/jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM",
"hostname": "www.airagestore.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
}
]
}
]
}
2026-02-07 07:34:32,544:DEBUG:acme.client:Storing nonce: 4AH-2vvBueEVztAHSigvLYj7kScOc-VnbhgNFBxt9SMZqLmm2ns
2026-02-07 07:34:32,544:INFO:certbot._internal.auth_handler:Challenge failed for domain airagestore.com
2026-02-07 07:34:32,544:INFO:certbot._internal.auth_handler:http-01 challenge for www.airagestore.com
2026-02-07 07:34:32,545:INFO:certbot._internal.auth_handler:http-01 challenge for airagestore.com
2026-02-07 07:34:32,545:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: www.airagestore.com
Type: unauthorized
Detail: 54.146.93.33: Invalid response from https://www.airagestore.com/.well-known/acme-challenge/MbN2iSAxH-rciOESWkS3xcUswVVpxeRr3LFRMIz2RI4: 404
Domain: airagestore.com
Type: unauthorized
Detail: 54.146.93.33: Invalid response from https://www.airagestore.com/.well-known/acme-challenge/jywMMdguzBFYeqG0n36TSdG6zWM0ZuBOfT2cbHwRuWM: 404
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:34:32,545:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:32,545:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:34:32,545:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:34:32,713:ERROR:certbot._internal.renewal:Failed to renew certificate airagestore.com with error: Some challenges have failed.
2026-02-07 07:34:32,714:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:32,717:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/anothertablespoon.com.conf
2026-02-07 07:34:32,743:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/anothertablespoon.com/cert17.pem
2026-02-07 07:34:32,744:DEBUG:certbot._internal.display.obj:Notifying user: Certificate not yet due for renewal
2026-02-07 07:34:32,746:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:32,750:DEBUG:certbot._internal.plugins.selection:Selecting plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90f1a30>
2026-02-07 07:34:32,751:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded
2026-02-07 07:34:32,751:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/ats.awscirrata.com.conf
2026-02-07 07:34:32,773:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/ats.awscirrata.com/cert11.pem
2026-02-07 07:34:32,774:DEBUG:certbot._internal.display.obj:Notifying user: Certificate not yet due for renewal
2026-02-07 07:34:32,775:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:32,778:DEBUG:certbot._internal.plugins.selection:Selecting plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90f1160>
2026-02-07 07:34:32,778:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded
2026-02-07 07:34:32,778:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/cirrata.com.conf
2026-02-07 07:34:32,792:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/cirrata.com/cert13.pem
2026-02-07 07:34:32,793:DEBUG:certbot._internal.display.obj:Notifying user: Certificate not yet due for renewal
2026-02-07 07:34:32,794:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:32,796:DEBUG:certbot._internal.plugins.selection:Selecting plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90ece20>
2026-02-07 07:34:32,796:DEBUG:certbot.plugins.storage:Plugin storage file /etc/letsencrypt/.pluginstorage.json was empty, no values loaded
2026-02-07 07:34:32,796:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/dcxvault.diecastxmagazine.com.conf
2026-02-07 07:34:32,810:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/dcxvault.diecastxmagazine.com/cert2.pem
2026-02-07 07:34:32,811:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:34:17 UTC.
2026-02-07 07:34:32,811:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:32,811:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:32,895:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:33,171:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90ec400>
Prep: True
2026-02-07 07:34:33,171:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90ec400>
Prep: True
2026-02-07 07:34:33,171:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90ec400> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90ec400>
2026-02-07 07:34:33,171:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:33,213:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:33,214:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:33,215:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:33,361:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:33,361:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:33 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"C9b544uQC1k": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-02-07 07:34:33,363:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for dcxvault.diecastxmagazine.com
2026-02-07 07:34:33,365:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:33,365:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:33,414:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:33,414:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:33 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtfXa3oLnxm3MHpy_j3bdFW3_dzSK2ZFrLywzPXOlJKqX8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:33,414:DEBUG:acme.client:Storing nonce: qLPTsdtfXa3oLnxm3MHpy_j3bdFW3_dzSK2ZFrLywzPXOlJKqX8
2026-02-07 07:34:33,414:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "dcxvault.diecastxmagazine.com"\n }\n ]\n}'
2026-02-07 07:34:33,417:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZlhhM29MbnhtM01IcHlfajNiZEZXM19kelNLMlpGckx5d3pQWE9sSktxWDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "YmdKRM2_WPjNuvJb71SiLZUSaZUh5pvJLdUUcWAfBYd1l5oayAXWCYApFnuJcjQj64zdWPvcpbFAdQpAp_WBNPC2qxlYMYvPXPNGs8wLsVxuSSptChJZ__uHxD9qWYSD4BE96EyiguS12jV7oSEf9KJrkh4LGucGe4e-lJdSvvIerGRkHbo7lmueIY4tZbxOUT_edNM8kymj1lSJmxmb2cUH00H-trueeEGQq3Cw9ZshcWnyihZpcQBv4tK0ub0TfxiKujYK5U-7cUfCZs3ECesnWn-cUeBVsbNQWu97FXA50fje1-E8X2UFDulxRKxc1rWqKhQxUHiXCQJxxmkvlA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImRjeHZhdWx0LmRpZWNhc3R4bWFnYXppbmUuY29tIgogICAgfQogIF0KfQ"
}
2026-02-07 07:34:33,573:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 363
2026-02-07 07:34:33,574:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:33 GMT
Content-Type: application/json
Content-Length: 363
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477687928786
Replay-Nonce: qLPTsdtf5rvTOqIk_dRK-LRh6pQJusQlj0YFk6kGxnEd7LAmslw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:33Z",
"identifiers": [
{
"type": "dns",
"value": "dcxvault.diecastxmagazine.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940325806"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477687928786"
}
2026-02-07 07:34:33,574:DEBUG:acme.client:Storing nonce: qLPTsdtf5rvTOqIk_dRK-LRh6pQJusQlj0YFk6kGxnEd7LAmslw
2026-02-07 07:34:33,574:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:33,575:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940325806:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZjVydlRPcUlrX2RSSy1MUmg2cFFKdXNRbGowWUZrNmtHeG5FZDdMQW1zbHciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzI1ODA2In0",
"signature": "Cou3tOBBDaqrfQdjmy9t95sz4LUH08vu5HqD5zXHEU-t3rh_pSspZvZpaH4NSmVKvbKoEv46GaUSRGdOFS3i-S3UJPco5rk65o4Wv1OxW3NARRYtrLpJxsRggNYL7EgYpJIWVIboPtg_I6RQ-G2iCYTtZfCE85jNjqGfWKnLSCrpn-IDuRTMfR6it5Kv3KWAvDbOzKzE27n4vEt-jEKREx9U57Y5k6BgtLWW8rDMBA3-8f0DaEuxoPyzp1dsF-fzpD67RBa0vOqmRfC_s59Abb_KE249ybU3iqqSEHOcKRHvIcjYff1T9SVAaF057brN9v_UckrmtuPcA_caPGx9ag",
"payload": ""
}
2026-02-07 07:34:33,639:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940325806 HTTP/1.1" 200 837
2026-02-07 07:34:33,639:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:33 GMT
Content-Type: application/json
Content-Length: 837
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAfPYyMu10Zhu73d7tXnx6qYXPwZb7sZ5ygqWosbEKljf8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "dcxvault.diecastxmagazine.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:33Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/uSLBpw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/3UKVpw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
}
]
}
2026-02-07 07:34:33,639:DEBUG:acme.client:Storing nonce: QkEzerAfPYyMu10Zhu73d7tXnx6qYXPwZb7sZ5ygqWosbEKljf8
2026-02-07 07:34:33,640:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:33,640:INFO:certbot._internal.auth_handler:http-01 challenge for dcxvault.diecastxmagazine.com
2026-02-07 07:34:33,648:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: dcxvault.diecastxmagazine.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:33,648:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: dcxvault.diecastxmagazine.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:33,649:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:33,649:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:33,649:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:33,728:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:33,728:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:33,729:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:36,903:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:36,905:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZlBZeU11MTBaaHU3M2Q3dFhueDZxWVhQd1piN3NaNXlncVdvc2JFS2xqZjgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMzI1ODA2LzdsUjdwdyJ9",
"signature": "Ej5siw56tfukrhj48mgH_XWQzi8GdJGYg8O_wRH9BzmHUN1_QCCj9KRIqGe_v_Y1ht6ZgY1fiN3QZ_9uoCwLIkNagXnoWvToi8Rrw-BpEuKf74Be0AzJaMjAaYcfzFKDeLGFPgrXWovh_9cD2ayou8S-kciQPa2UgAOe4QIuij-eCC3H0xTKD2OcrfO-f-_RN5W3nxLndXrACd-1iSYkzR3XZEcUL4WL9NWqRQeAiBRUr5QeNGp7tYu_218f_gz9vVZEfZNsOBvKxJ7tZHzPmDu6BFQdW6QcLjnLD7EYnbhsZJF_q69CGeRaY9Idqn-i924ys7vICHFvHxgW2lpD6g",
"payload": "e30"
}
2026-02-07 07:34:36,970:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940325806/7lR7pw HTTP/1.1" 200 195
2026-02-07 07:34:36,971:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:36 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940325806>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw
Replay-Nonce: qLPTsdtfwmxVf05DwnZX1L4WIlKnrtEWPcaBMN5JSck1FAX9qso
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
}
2026-02-07 07:34:36,971:DEBUG:acme.client:Storing nonce: qLPTsdtfwmxVf05DwnZX1L4WIlKnrtEWPcaBMN5JSck1FAX9qso
2026-02-07 07:34:36,971:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:34:37,973:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:37,974:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940325806:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZndteFZmMDVEd25aWDFMNFdJbEtucnRFV1BjYUJNTjVKU2NrMUZBWDlxc28iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzI1ODA2In0",
"signature": "Vx1NSuIZhA9A-lGYP6ETS5w5ckiZj0nz16_As-Ldnadn94NjpVCtoTmHWtCO-yDaOUcYY-7fn2n2DtfuOtcfkyMkz6RPdplbJ4Wlnp-s5MMe68hh6MhZqSHET2DgQ2UJTEj2g9e6rtRPBw_7qcdXxMDfe46ibk4t3o2BpavwqWa3msLc_X2iKSExVRozoxcHdVv2cYTy6Pd1pkg1HkG8YsMroF-P882iT_pdsN7AEvcaKqGeq971v2rhzwPISM_eUyd-7kRxuW3reoqZ31nA5S_H_NKhqaL8rY3ecSK44JfAhPtVJoGY1Aj0QInYSkvZKZqmKSY05fNFC13RzMWoJw",
"payload": ""
}
2026-02-07 07:34:38,037:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940325806 HTTP/1.1" 200 837
2026-02-07 07:34:38,037:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:38 GMT
Content-Type: application/json
Content-Length: 837
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtf0mY1hF1lK-47p0290ifNuRymj0rjARuLWtGU74yTfV0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "dcxvault.diecastxmagazine.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:33Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/3UKVpw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/uSLBpw",
"status": "pending",
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q"
}
]
}
2026-02-07 07:34:38,037:DEBUG:acme.client:Storing nonce: qLPTsdtf0mY1hF1lK-47p0290ifNuRymj0rjARuLWtGU74yTfV0
2026-02-07 07:34:41,041:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:41,042:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940325806:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZjBtWTFoRjFsSy00N3AwMjkwaWZOdVJ5bWowcmpBUnVMV3RHVTc0eVRmVjAiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzI1ODA2In0",
"signature": "C1qq0Qmt4H2SzsxWQA27TVDSPHjcHrn4qRNH5u2GMrjZ7pLRHkxT_GQ_q-AroYPSO-hxXIrT6iFx6tBd34VSGkTV9rQdX8aM1lLA-oanx9c4zACsTbzZkrE7UKLuAju5Zunu8HZL49VIW4bOy7nNzvZP9Zlx3iyzXlcIUUod3HIxCQKaQzu6T930mx3stz2bnpdLXkollfxS_HeaLLrBSw2q9m311SdswjmXn5LF2y4Z8zBRlcCGLWYB43IVOhjXRCIC_I6nHLC4Sc744yV9-JCzhXe3GYyqzzEtl935kLOLDY13aU_PnyGYiWcpUH4IUciV2JeaHRcd8di034Hqwg",
"payload": ""
}
2026-02-07 07:34:41,094:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940325806 HTTP/1.1" 200 1748
2026-02-07 07:34:41,095:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:41 GMT
Content-Type: application/json
Content-Length: 1748
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAflGC5mfc8eB4rd9LzPow7Jfs7HPRPs_NlAQ7bK1VtAac
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "dcxvault.diecastxmagazine.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:33Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940325806/7lR7pw",
"status": "invalid",
"validated": "2026-02-07T07:34:36Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "The key authorization file from the server did not match this challenge. Expected \"muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q.Wc8VD4_8K_w_Py22KLn8Z2gdioWW_LL5n_y6U5KAAkU\" (got \"\")",
"status": 403
},
"token": "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q",
"validationRecord": [
{
"url": "http://dcxvault.diecastxmagazine.com/.well-known/acme-challenge/muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q",
"hostname": "dcxvault.diecastxmagazine.com",
"port": "80",
"addressesResolved": [
"3.215.60.208"
],
"addressUsed": "3.215.60.208"
},
{
"url": "https://dcxvault.diecastxmagazine.com/.well-known/acme-challenge/muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q",
"hostname": "dcxvault.diecastxmagazine.com",
"port": "443",
"addressesResolved": [
"3.215.60.208"
],
"addressUsed": "3.215.60.208"
},
{
"url": "https://dcxvault.diecastxmagazine.com/404.php",
"hostname": "dcxvault.diecastxmagazine.com",
"port": "443",
"addressesResolved": [
"3.215.60.208"
],
"addressUsed": "3.215.60.208"
}
]
}
]
}
2026-02-07 07:34:41,095:DEBUG:acme.client:Storing nonce: QkEzerAflGC5mfc8eB4rd9LzPow7Jfs7HPRPs_NlAQ7bK1VtAac
2026-02-07 07:34:41,095:INFO:certbot._internal.auth_handler:Challenge failed for domain dcxvault.diecastxmagazine.com
2026-02-07 07:34:41,095:INFO:certbot._internal.auth_handler:http-01 challenge for dcxvault.diecastxmagazine.com
2026-02-07 07:34:41,096:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: dcxvault.diecastxmagazine.com
Type: unauthorized
Detail: The key authorization file from the server did not match this challenge. Expected "muAnOVkVEbJWC79f-eou7ID0F1F2ZnvjZtIYponP41Q.Wc8VD4_8K_w_Py22KLn8Z2gdioWW_LL5n_y6U5KAAkU" (got "")
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:34:41,096:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:41,096:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:34:41,096:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:34:41,276:ERROR:certbot._internal.renewal:Failed to renew certificate dcxvault.diecastxmagazine.com with error: Some challenges have failed.
2026-02-07 07:34:41,277:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:41,280:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/diecastxmagazine.com.conf
2026-02-07 07:34:41,299:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/diecastxmagazine.com/cert2.pem
2026-02-07 07:34:41,301:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:34:29 UTC.
2026-02-07 07:34:41,301:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:41,301:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:41,406:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:41,680:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f920d910>
Prep: True
2026-02-07 07:34:41,680:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f920d910>
Prep: True
2026-02-07 07:34:41,680:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f920d910> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f920d910>
2026-02-07 07:34:41,680:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:41,724:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:41,725:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:41,726:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:41,870:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:41,871:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:41 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
"wlmlYPUaetM": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2026-02-07 07:34:41,872:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for diecastxmagazine.com and www.diecastxmagazine.com
2026-02-07 07:34:41,874:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:41,874:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:41,922:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:41,923:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:41 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAfmhnNoV8HLxyc-ng0EHwH0kAcp2blk0vO7eRWCXjtzXI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:41,923:DEBUG:acme.client:Storing nonce: QkEzerAfmhnNoV8HLxyc-ng0EHwH0kAcp2blk0vO7eRWCXjtzXI
2026-02-07 07:34:41,923:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "diecastxmagazine.com"\n },\n {\n "type": "dns",\n "value": "www.diecastxmagazine.com"\n }\n ]\n}'
2026-02-07 07:34:41,926:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZm1obk5vVjhITHh5Yy1uZzBFSHdIMGtBY3AyYmxrMHZPN2VSV0NYanR6WEkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "e9K1J-SoFV-Q8wPM-aPpT2LOqIXITL4y7EPH_FZmcYXYfWCKtbAeDqc-XipzsissAV8N3vraKD3VQ0WTdiMndly4J7HXqcCvqWCW3Qobh9l9gmhN179J_K9bJpciBhqyDNLqgdGCuphT9gXjIBB0v0kKp-I_qTJxn32kTnKp7ONMXIpR3oneJQOnzvlNF-jGtnJ0eU2avj2OL1f2nwHTqpHpwUo5qc9q1LN2aEkklfBRxnIdJ0k4ppXtsE3wUKhoSzqYFXX6MmF-oSvnVgLiN8VchCfoOUVEi4cps1y8DS-_Hryru8gnLmF9Uvh1iwaJyJOJ14EBO2ZrQiYoz2EooA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImRpZWNhc3R4bWFnYXppbmUuY29tIgogICAgfSwKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInd3dy5kaWVjYXN0eG1hZ2F6aW5lLmNvbSIKICAgIH0KICBdCn0"
}
2026-02-07 07:34:42,680:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 509
2026-02-07 07:34:42,681:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:42 GMT
Content-Type: application/json
Content-Length: 509
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477687959116
Replay-Nonce: qLPTsdtfAM7BSDPbVCHSDVSkuwxt3NItYrMw6JIQbzxI11KEEJU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:42Z",
"identifiers": [
{
"type": "dns",
"value": "diecastxmagazine.com"
},
{
"type": "dns",
"value": "www.diecastxmagazine.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369006",
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369256"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477687959116"
}
2026-02-07 07:34:42,681:DEBUG:acme.client:Storing nonce: qLPTsdtfAM7BSDPbVCHSDVSkuwxt3NItYrMw6JIQbzxI11KEEJU
2026-02-07 07:34:42,681:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:42,683:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369006:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZkFNN0JTRFBiVkNIU0RWU2t1d3h0M05JdFlyTXc2SklRYnp4STExS0VFSlUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzY5MDA2In0",
"signature": "DSMhyOJ9ACw3o385re7-PiAdKy3PL1ewB9GpOWv5ob4Vv534-YFq9OL5sAgS3dgNbM07tA8bFvkBhCLhXHOQnWggyzn9p7duDZC3G4WrHEqIzA_QNVDUWMvHJUK7KKUsVqrvOkorptkKORfB8F5yGJel8zQwKnbddu8vQRnNMuGHsJvS49XN9gUTnO4TKDvICtJGaGaFvjVubhhMRLYPDDrEWcR_6PmpaqEnNGhRev6PRcXN84JhW3LDtWpK4xHFJF1v0VvLV0_oPeEI6U1KssNj8VU9sSnvuGkR11YJYLl1LNUNL1uGm7Q2x0XQtbS340HztbxSw9Pks46eL3j3XA",
"payload": ""
}
2026-02-07 07:34:42,733:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940369006 HTTP/1.1" 200 828
2026-02-07 07:34:42,734:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:42 GMT
Content-Type: application/json
Content-Length: 828
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAfqeGkoddrcs9PjQU6V9cKGWjp31K4BqM1iGNzAvNi4DM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "diecastxmagazine.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:42Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/Q9U6pg",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/A2g68g",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
}
]
}
2026-02-07 07:34:42,734:DEBUG:acme.client:Storing nonce: QkEzerAfqeGkoddrcs9PjQU6V9cKGWjp31K4BqM1iGNzAvNi4DM
2026-02-07 07:34:42,734:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:42,736:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369256:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZnFlR2tvZGRyY3M5UGpRVTZWOWNLR1dqcDMxSzRCcU0xaUdOekF2Tmk0RE0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzY5MjU2In0",
"signature": "fENy-AtZROUHbJuIquxY4VGwFOXRbXMo8OH4cJg-YA70tMecAYOmDUKIl8XfLF-PBZs2oHcpgkJCKoF2O95RPJRhopBoLdSqEIgSYKDU1rRYHG-f0U93PF94cGkupSdVexLrwDYP69iITOzbAybRZ5mg5rYj1QoU2b8QLPMfCGaViFeCwkRuuoCdlRL_16fNxejzPjytFZfRWp5Q0ySRBb1yKL-bK_iEo9seaYki03LLRxcVwHkgferulVymmrMeSkVBj4RaI6uTfDjkL_X1CYxo9ojay2-hy-20DjqQ2vpIFjX-pNsS5WatZfMkyY6sfxux8t94UWpkMAtyBDYYVQ",
"payload": ""
}
2026-02-07 07:34:42,787:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940369256 HTTP/1.1" 200 832
2026-02-07 07:34:42,787:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:42 GMT
Content-Type: application/json
Content-Length: 832
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtfDwH4JR6DPN0uhUr0AFW1PkMk430tw-kPbM9HVrUUwMI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.diecastxmagazine.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:42Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/C0nsxw",
"status": "pending",
"token": "4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/kOG2cA",
"status": "pending",
"token": "4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/VZP85g",
"status": "pending",
"token": "4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10"
}
]
}
2026-02-07 07:34:42,787:DEBUG:acme.client:Storing nonce: qLPTsdtfDwH4JR6DPN0uhUr0AFW1PkMk430tw-kPbM9HVrUUwMI
2026-02-07 07:34:42,788:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:42,788:INFO:certbot._internal.auth_handler:http-01 challenge for diecastxmagazine.com
2026-02-07 07:34:42,788:INFO:certbot._internal.auth_handler:http-01 challenge for www.diecastxmagazine.com
2026-02-07 07:34:42,797:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: diecastxmagazine.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:42,798:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: diecastxmagazine.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:42,798:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:42,798:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:42,798:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:42,881:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:42,881:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:42,882:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:46,063:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:46,065:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZkR3SDRKUjZEUE4wdWhVcjBBRlcxUGtNazQzMHR3LWtQYk05SFZyVVV3TUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMzY5MDA2LzVMOWRrUSJ9",
"signature": "DMy7TzF7gQY6YDtdB8pAia6r-H4nQa4vKSINr1Jm5S8AbbDDDpLu4tREpeVC6xDEg8HTuNhWFH4SS3DdJQNxwbDNetKroBEA_CvInaLIzw1aJudhhDMhuIw4BSw6JGzI89tDfaWiO3lFWHtLPaycJB1bFDyxyx6dPir3u_8Xq680Id4OH9YD7sfHqWMR2RaxzMstT7-G04S7XuB6utRWyshhv8y_orlI6DnmIOYuyxvJ2nLm7h5P8t6UXcai-m2Xdhhh7K3FJ5Nwz5VR0ufHsaWtGeoohR3c_SA-16uGeESuUgS31xMyYsblvg3GCY4rDeuPdXus17haw67AXTkcyA",
"payload": "e30"
}
2026-02-07 07:34:46,129:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940369006/5L9dkQ HTTP/1.1" 200 195
2026-02-07 07:34:46,130:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:46 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369006>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ
Replay-Nonce: qLPTsdtfYJZ9kta3BwAghSW6gWyaq2fOGVqh6d9EeeXpN4iXnpw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
}
2026-02-07 07:34:46,130:DEBUG:acme.client:Storing nonce: qLPTsdtfYJZ9kta3BwAghSW6gWyaq2fOGVqh6d9EeeXpN4iXnpw
2026-02-07 07:34:46,131:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:46,132:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/VZP85g:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZllKWjlrdGEzQndBZ2hTVzZnV3lhcTJmT0dWcWg2ZDlFZWVYcE40aVhucHciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwMzY5MjU2L1ZaUDg1ZyJ9",
"signature": "BSOMS8UIqVRtpOjGEYLr8sTB1-Uwf5p0f0td3BWPpx68Z5ux7mdgoMXQItVdRtfNisSdghJaUo2971B4eRF2XOzYYDqA6EMmWK4bNs7hB0g8abwgG3QCfxVuN7DWrb_P0unU2rGOaD9MjPqC3XcoKepfFFNmcuXrN4AL2rUetkIURCqmOVSIngWCt7VK6vzxEE_T3SNzrZNd9GE-P-Orjl57p1vrggYEB-gRJE9LX9Z6jdjAJQNITrO0DK3ezavRhjgjIQIuX8KVF3yNhxRIpxKY89UW2T2jNiDOz5JJdZggfWvkjTSp8UoqF_PObBMZ4h4rc2z5GwzGQiMla8dsug",
"payload": "e30"
}
2026-02-07 07:34:46,184:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940369256/VZP85g HTTP/1.1" 200 195
2026-02-07 07:34:46,185:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:46 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369256>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/VZP85g
Replay-Nonce: QkEzerAf8L5P3O5zXu-65KtnoJOzQPBC7X-dYSaClCHq3yIuXQ8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/VZP85g",
"status": "pending",
"token": "4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10"
}
2026-02-07 07:34:46,185:DEBUG:acme.client:Storing nonce: QkEzerAf8L5P3O5zXu-65KtnoJOzQPBC7X-dYSaClCHq3yIuXQ8
2026-02-07 07:34:46,185:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:34:47,186:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:47,188:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369006:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZjhMNVAzTzV6WHUtNjVLdG5vSk96UVBCQzdYLWRZU2FDbENIcTN5SXVYUTgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzY5MDA2In0",
"signature": "jXEOMZ-EmQoAqatNtyyj5jUt9KKq9u-RwreBmSrW1dozWW8iVhyA-9AapjDwA6e4kMZwMXDF3iUypoFFISgyoTy4MhgL63xp3gHpO1a-gWB3gXxyuLAg1zEiK6jhfFpPCNIoHjBbAJdeLykRZCvnFzS0m-aTTC7YSkscxzAzc7Y_zNycOUsM3hIEjSjh9AXu6ut21fGzAPqhnjqVw17uLGpB2MpfFAjCrahLsByRgYwxbhKsbWMiReeMJElaD_nDhL56qGuTJsuKzwVXNABCRToHjakkPdEjZyIhmYiH9oDhnegnkcL3pdodgE3nUaaX8d-jGr9RP9bP7pQp1VPd_w",
"payload": ""
}
2026-02-07 07:34:47,238:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940369006 HTTP/1.1" 200 828
2026-02-07 07:34:47,239:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:47 GMT
Content-Type: application/json
Content-Length: 828
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAfvsCz3L1rtKVH7ot3HchN1h_oN2iGVJXwJy4aowVlsk8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "diecastxmagazine.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:42Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/A2g68g",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/Q9U6pg",
"status": "pending",
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM"
}
]
}
2026-02-07 07:34:47,239:DEBUG:acme.client:Storing nonce: QkEzerAfvsCz3L1rtKVH7ot3HchN1h_oN2iGVJXwJy4aowVlsk8
2026-02-07 07:34:47,239:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:47,241:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369256:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZnZzQ3ozTDFydEtWSDdvdDNIY2hOMWhfb04yaUdWSlh3Snk0YW93VmxzazgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzY5MjU2In0",
"signature": "iKbAVcn9m41RXUUpeMjJ2iKkAAohizn0QExRSTvvaLM6PFY_a17JLHDMRXCCgG94bZ56EHKMFmPgrA2E9-TjivVT3p0W59CTAcET4kuY1gsH-cM07yA91Dv2Fg6pt2-p6hw0UAochem2f4e59e3bwhbYBHXAXnmx0GqdaHhZkyO1ZfdS3uVNbaEHPCe4selDD8IlYURIUELpNyblOKznMIxkaUvP5rfqYfYmngTVvcCVFP4AatpD-5zdIb0nWsafm-_J5MwxNBw4dK-GpBT5SDnO61FCNjm-BhqW0ws24xUPji6D0DaY9a590zbk0SKv5PUg_V24reF3U3PHfOULEQ",
"payload": ""
}
2026-02-07 07:34:47,291:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940369256 HTTP/1.1" 200 1403
2026-02-07 07:34:47,292:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:47 GMT
Content-Type: application/json
Content-Length: 1403
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAffR717LWjW307-T0CA5XOabakrevZk0_bvgAwOUwIK6k
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.diecastxmagazine.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:42Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369256/VZP85g",
"status": "invalid",
"validated": "2026-02-07T07:34:46Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "52.206.51.51: Invalid response from https://www.diecastxmagazine.com/.well-known/acme-challenge/4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10: 404",
"status": 403
},
"token": "4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10",
"validationRecord": [
{
"url": "http://www.diecastxmagazine.com/.well-known/acme-challenge/4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10",
"hostname": "www.diecastxmagazine.com",
"port": "80",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://www.diecastxmagazine.com/.well-known/acme-challenge/4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10",
"hostname": "www.diecastxmagazine.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
}
]
}
]
}
2026-02-07 07:34:47,292:DEBUG:acme.client:Storing nonce: QkEzerAffR717LWjW307-T0CA5XOabakrevZk0_bvgAwOUwIK6k
2026-02-07 07:34:47,292:INFO:certbot._internal.auth_handler:Challenge failed for domain www.diecastxmagazine.com
2026-02-07 07:34:50,295:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:50,297:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940369006:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZmZSNzE3TFdqVzMwNy1UMENBNVhPYWJha3JldlprMF9idmdBd09Vd0lLNmsiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwMzY5MDA2In0",
"signature": "QvkJaDBX4mzjrjLq_zAC52P50B0nwkvhRWg_otAnga6yQbsG8uDKXMoWveCbtpMdwUbnJq47SIroOokbKeqRqQTlsswiC0fMUpafWb_mpuRwbzz2ETlS3WfiMLunweRCcryZMQ4sdzJfuHsOZnPpu9Ar3L3zLwuD_P7TUKW0JihZ-85Y_4ZFppnCRcNaR2gCS4WmNxy06JUDc5i2VNTrCP3kouwH9rvinhoCJXqCsXj7Sb5EAdRPCFcfM_F2M09jvOsQACfPr50wFOru1hMdxHNeazxZ9pMCkC_RzeKgZosIPO96eAMZrpY-oHk10Ii6hXj24UF0TQmoVcoIhLZQvg",
"payload": ""
}
2026-02-07 07:34:50,346:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940369006 HTTP/1.1" 200 1716
2026-02-07 07:34:50,347:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:50 GMT
Content-Type: application/json
Content-Length: 1716
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtfqVN5m3UBLJyW1wSOPPmTH4C7Rbc9yXPbxxEu3bv-JYQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "diecastxmagazine.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:42Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940369006/5L9dkQ",
"status": "invalid",
"validated": "2026-02-07T07:34:46Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "52.206.51.51: Invalid response from https://www.diecastxmagazine.com/.well-known/acme-challenge/f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM: 404",
"status": 403
},
"token": "f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM",
"validationRecord": [
{
"url": "http://diecastxmagazine.com/.well-known/acme-challenge/f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM",
"hostname": "diecastxmagazine.com",
"port": "80",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://diecastxmagazine.com/.well-known/acme-challenge/f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM",
"hostname": "diecastxmagazine.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://www.diecastxmagazine.com/.well-known/acme-challenge/f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM",
"hostname": "www.diecastxmagazine.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
}
]
}
]
}
2026-02-07 07:34:50,347:DEBUG:acme.client:Storing nonce: qLPTsdtfqVN5m3UBLJyW1wSOPPmTH4C7Rbc9yXPbxxEu3bv-JYQ
2026-02-07 07:34:50,347:INFO:certbot._internal.auth_handler:Challenge failed for domain diecastxmagazine.com
2026-02-07 07:34:50,347:INFO:certbot._internal.auth_handler:http-01 challenge for www.diecastxmagazine.com
2026-02-07 07:34:50,348:INFO:certbot._internal.auth_handler:http-01 challenge for diecastxmagazine.com
2026-02-07 07:34:50,348:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: www.diecastxmagazine.com
Type: unauthorized
Detail: 52.206.51.51: Invalid response from https://www.diecastxmagazine.com/.well-known/acme-challenge/4YEHW4oH3UG_GVQhi1Dnea182n0gKUR119lXpxaYV10: 404
Domain: diecastxmagazine.com
Type: unauthorized
Detail: 52.206.51.51: Invalid response from https://www.diecastxmagazine.com/.well-known/acme-challenge/f5xH0LLIcO7uQS4cPZfbpXJ-VMAp7cNU89W6EKJnKXM: 404
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:34:50,348:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:50,348:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:34:50,348:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:34:50,521:ERROR:certbot._internal.renewal:Failed to renew certificate diecastxmagazine.com with error: Some challenges have failed.
2026-02-07 07:34:50,522:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:50,526:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/flightjournal.com.conf
2026-02-07 07:34:50,543:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/flightjournal.com/cert2.pem
2026-02-07 07:34:50,544:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:34:40 UTC.
2026-02-07 07:34:50,544:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:50,544:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:50,631:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:50,898:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90a6e50>
Prep: True
2026-02-07 07:34:50,898:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90a6e50>
Prep: True
2026-02-07 07:34:50,898:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90a6e50> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90a6e50>
2026-02-07 07:34:50,898:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:50,943:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:50,943:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:50,945:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:51,128:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:51,129:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:51 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"k-7sSyVJT7o": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-02-07 07:34:51,130:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for flightjournal.com and www.flightjournal.com
2026-02-07 07:34:51,132:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:51,132:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:51,193:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:51,194:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:51 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBf14WRPUxxIy5FSt4AIWT66R3S2w9owWrM_z0q0FcDeM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:51,194:DEBUG:acme.client:Storing nonce: 4AH-2vvBf14WRPUxxIy5FSt4AIWT66R3S2w9owWrM_z0q0FcDeM
2026-02-07 07:34:51,194:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "flightjournal.com"\n },\n {\n "type": "dns",\n "value": "www.flightjournal.com"\n }\n ]\n}'
2026-02-07 07:34:51,196:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QmYxNFdSUFV4eEl5NUZTdDRBSVdUNjZSM1Mydzlvd1dyTV96MHEwRmNEZU0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "OaJcQ-IVjFmw7i4LyH4LQP53G7u6y2YtKnjuQ8525Tjxeva7cvZp1XIDwBKcp_s33h2ggaU_YtfIDeOSnNyjP54pJhCQ_DKRW6VIwubcEBnyREFhGGhr4o14qYKqCUwngBv45ndzPMgJj0LjIyCRz5EfM2AB4MEby2VQcOAjab23NjvmxBt0BM6I-6nvUMCH-XtB-ehH6X4yLqF35aH6VzkHReYhNjldJSCPuvs4ObI7U4uyih3ePopT8_1y1eck--ZNDdOX1uj-ulGn9ws1BB1fDzvvFXv_BxZIKn9By1zYaqWQku5dPVK72noNNPbljmLL_YwaVwi92N-531fJVA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImZsaWdodGpvdXJuYWwuY29tIgogICAgfSwKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInd3dy5mbGlnaHRqb3VybmFsLmNvbSIKICAgIH0KICBdCn0"
}
2026-02-07 07:34:51,289:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 503
2026-02-07 07:34:51,289:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:51 GMT
Content-Type: application/json
Content-Length: 503
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477687991576
Replay-Nonce: 4AH-2vvBWWbviRQnJtogS0pActC-cPdzO1s3d1NqwMe_RRkyBUM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:51Z",
"identifiers": [
{
"type": "dns",
"value": "flightjournal.com"
},
{
"type": "dns",
"value": "www.flightjournal.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412706",
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412716"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477687991576"
}
2026-02-07 07:34:51,289:DEBUG:acme.client:Storing nonce: 4AH-2vvBWWbviRQnJtogS0pActC-cPdzO1s3d1NqwMe_RRkyBUM
2026-02-07 07:34:51,290:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:51,291:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412706:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QldXYnZpUlFuSnRvZ1MwcEFjdEMtY1Bkek8xczNkMU5xd01lX1JSa3lCVU0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDEyNzA2In0",
"signature": "gbgk6GIOKi1hMeB5BSOM_ESJaxQPPm8-x628tIFQgbAcLIAZnJTe6R-zoc3T_OK-cchSfJsTDpAJf2v9gkH5WODs3UTBSS93yipjMddkDoTTvc6cp1DrfTufQG6BLrlfWaP5grWdI5uTQhZZtDN-isnQDAxg4Tnik4hZ3m_cU4aP5KjVYfQEU94SDWify3MNvudofl0-BItTRuxGAM5zh9a_Nv0fEdX7lh6jKXg3hoYR3eKznJBRp1DpA16CJJhDg2oQJoYVFpH97whF4s8mvuDZpA0FBeYWQsDdF0lJBvVvhl0Lz4LkB0VqdWvPQCgrEHvQHhfkWTXhloWi515Ohw",
"payload": ""
}
2026-02-07 07:34:51,354:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940412706 HTTP/1.1" 200 825
2026-02-07 07:34:51,354:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:51 GMT
Content-Type: application/json
Content-Length: 825
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBMatKXaPvRRdxIOhDTIikLMTAo7G-X7miwY7sgoG2gIw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "flightjournal.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:51Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/DXuPBQ",
"status": "pending",
"token": "argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/sIaQtA",
"status": "pending",
"token": "argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/uVE9fw",
"status": "pending",
"token": "argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ"
}
]
}
2026-02-07 07:34:51,354:DEBUG:acme.client:Storing nonce: 4AH-2vvBMatKXaPvRRdxIOhDTIikLMTAo7G-X7miwY7sgoG2gIw
2026-02-07 07:34:51,355:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:51,356:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412716:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2Qk1hdEtYYVB2UlJkeElPaERUSWlrTE1UQW83Ry1YN21pd1k3c2dvRzJnSXciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDEyNzE2In0",
"signature": "RXouStbof_OUShOIx8EPttsxeKcNXX0g2nhyucdw8QQNsplRut6TrY8Sw8aFt2Mi-6pORcO84hlwKqdzk4v4O7tZgL4MyIA0MN7u9FkClzmnbJHYIASY8bFcMTfGEDS6SC1qjW3kcasNz8ZmzIcgsVKUKKX6KNu4GCicRJfetFhZVt8yVnypLLy35iNuPM6GWDf18N0tKb5zo_ev-EqeglQiZ-D_jXJ4nUOvth_nK_wd40qnJ7O8tKoEw395O8g7nh6t2AR4cZS_sPaFEww_HVqcHaR1wglWEc51pBbQeSrW08BCf2mcBZk9PowiEz6NcaWXhr74nzwjV8RcB7qVxg",
"payload": ""
}
2026-02-07 07:34:51,418:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940412716 HTTP/1.1" 200 829
2026-02-07 07:34:51,418:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:51 GMT
Content-Type: application/json
Content-Length: 829
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvB6KtB-8qst-vpomihTbt2oK0z7_qhPLIIHaeYhWfFPQQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.flightjournal.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:51Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/HOgbgQ",
"status": "pending",
"token": "Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/aFEkwg",
"status": "pending",
"token": "Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/U3kcfw",
"status": "pending",
"token": "Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE"
}
]
}
2026-02-07 07:34:51,419:DEBUG:acme.client:Storing nonce: 4AH-2vvB6KtB-8qst-vpomihTbt2oK0z7_qhPLIIHaeYhWfFPQQ
2026-02-07 07:34:51,419:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:51,419:INFO:certbot._internal.auth_handler:http-01 challenge for flightjournal.com
2026-02-07 07:34:51,419:INFO:certbot._internal.auth_handler:http-01 challenge for www.flightjournal.com
2026-02-07 07:34:51,429:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: flightjournal.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:51,429:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: flightjournal.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:51,429:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:51,429:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:51,430:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:51,510:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:51,511:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:51,511:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:54,695:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:54,697:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/uVE9fw:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QjZLdEItOHFzdC12cG9taWhUYnQyb0swejdfcWhQTElJSGFlWWhXZkZQUVEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwNDEyNzA2L3VWRTlmdyJ9",
"signature": "HM1tBBiSSTssQoJH3J_woMlWTSnVvEFBpGdT5wDedhI5Shc9gpdSqRMO8N6feW6b7vTbLUlAOsObR_q7tgHi9Krn9QhnI9gPtGGpXK0y25foNHjyI87WhX-cjthWM-g0iwPxDejy3qLGP4GTx498obL42P3RRq0R7WUcrmkOkv5o4Bjd3lDMP1RWfTZ1YEtXooq_njxvexw1zu85Y0KmswItN4TgSOeurxaNYQplIK1XtzgupYbFWqIjRp-MmN9X-7t_R3jSav9oaRPW1MmPTPb3Usgjo4whHXTRbUItBg8-1ZYwTj5ZQ95plH51nrsBYEXG7HqtqnNyjIO9UInvZg",
"payload": "e30"
}
2026-02-07 07:34:54,761:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940412706/uVE9fw HTTP/1.1" 200 195
2026-02-07 07:34:54,761:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:54 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412706>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/uVE9fw
Replay-Nonce: NeKnt8TGFjbxm5Bsbnq52oZr7VWTcKjI_Qp6PHVyajq48w3N5QI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/uVE9fw",
"status": "pending",
"token": "argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ"
}
2026-02-07 07:34:54,762:DEBUG:acme.client:Storing nonce: NeKnt8TGFjbxm5Bsbnq52oZr7VWTcKjI_Qp6PHVyajq48w3N5QI
2026-02-07 07:34:54,762:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:34:54,763:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/U3kcfw:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR0ZqYnhtNUJzYm5xNTJvWnI3VldUY0tqSV9RcDZQSFZ5YWpxNDh3M041UUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwNDEyNzE2L1Uza2NmdyJ9",
"signature": "K8b2j3xd7NrDV-R3bctES80C9uqntNquiMBEZ60pnrQ671MSwt53oFqQtJxUwc4sIWtG48seWrLNHRsnvahB87nxEBgTwnVr7Wrr6o2dd3uxq1py_-LICjCNlQn3_mjhD-EOHlpwYvofU8M2DsT0PSrAV7G2jMCd7tINeIDTElgwfbt-dFEojg45IyaMYaKv_X1iwuJA5BKbajzLdexAtvXltu8e0rWfk73ocd0T15mCWMueK0zHrLcstyJyESA0DezeUKB7cl0jbVUJCNi_CJR9x4xS5jVZNRUjcMxk9Ov6NlAgxpXLN-ph_YbwhYiv0k0wuZAvX2IJtUcKkhnB_g",
"payload": "e30"
}
2026-02-07 07:34:54,840:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940412716/U3kcfw HTTP/1.1" 200 195
2026-02-07 07:34:54,841:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:54 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412716>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/U3kcfw
Replay-Nonce: 4AH-2vvBGGvKoA2v1m7lg1ni5anjWebM5AxjAY16NLwaMQUwyAo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/U3kcfw",
"status": "pending",
"token": "Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE"
}
2026-02-07 07:34:54,841:DEBUG:acme.client:Storing nonce: 4AH-2vvBGGvKoA2v1m7lg1ni5anjWebM5AxjAY16NLwaMQUwyAo
2026-02-07 07:34:54,841:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:34:55,842:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:55,844:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412706:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QkdHdktvQTJ2MW03bGcxbmk1YW5qV2ViTTVBeGpBWTE2Tkx3YU1RVXd5QW8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDEyNzA2In0",
"signature": "K7p5dDLB9OSxDlR7jCQwSrd2ArijDV8gbiE1RQRDxHSjOJsMa99KVOcS_eenhXJQbQunWnF_xZF2CTe37WTYVUPZNFQCn8Rj90MfPQQnRmttkygA0Uqey8bKv8gsFiv5P-G9WSBqaXz4s4OH4IeKBylETRwCVWoW62mgeVcZtHn5YTJpLbZtBTZy-c9HZwAusu4RkeJ2nn_kt-FwORtMGKpQelVYfx4QSv45s5APo8xrE2Z6xlpcqiMOrD7mHXL_gYg518cIefoxg2I4tNae0GbgDOdf76IvVEauV77Gkp8zIV4T3_5YHxNv_fl6QaBwiQVgDERuwenHw-vleM07eg",
"payload": ""
}
2026-02-07 07:34:55,907:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940412706 HTTP/1.1" 200 1692
2026-02-07 07:34:55,908:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:55 GMT
Content-Type: application/json
Content-Length: 1692
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGAs10fkrvAJYjme4GG0GlpknmoVqxZ2uwKFsz-OzFbPs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "flightjournal.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:51Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412706/uVE9fw",
"status": "invalid",
"validated": "2026-02-07T07:34:54Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "52.206.51.51: Invalid response from https://www.flightjournal.com/.well-known/acme-challenge/argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ: 404",
"status": 403
},
"token": "argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ",
"validationRecord": [
{
"url": "http://flightjournal.com/.well-known/acme-challenge/argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ",
"hostname": "flightjournal.com",
"port": "80",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://flightjournal.com/.well-known/acme-challenge/argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ",
"hostname": "flightjournal.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://www.flightjournal.com/.well-known/acme-challenge/argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ",
"hostname": "www.flightjournal.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
}
]
}
]
}
2026-02-07 07:34:55,908:DEBUG:acme.client:Storing nonce: NeKnt8TGAs10fkrvAJYjme4GG0GlpknmoVqxZ2uwKFsz-OzFbPs
2026-02-07 07:34:55,908:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:55,910:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940412716:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR0FzMTBma3J2QUpZam1lNEdHMEdscGtubW9WcXhaMnV3S0Zzei1PekZiUHMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDEyNzE2In0",
"signature": "UwHOqL2l-o6KN45H9r7lRqb-8XrCDK-quHo3fL9CaZxq-jJHWdGdwdAek2AGaelcQPA78dZVxOLIzW5mA71ICqdFD10OP48MIs_yOw1Wk7Ifk8xEVuNrvqh3PvpzjAjIyLm_5eVodf2fVXRs3LGHLg7Nm2oq5enz9xFSL6U7fJVEBRCAIraQExzoB0EeDac-eIJl2759y8gJqy8H5sZNfisq3LZPH4GNIAO6pLd2q1tlmt2SKYMDEY2WsCF-zNH2yGrlG_1yF5KZYvAgQeGc5nFIqXF_s5tD-qVHiDn2D5Hl6gtSB9-hkuwbjI14UURMyGvSbahX4rzUYzA6uJv-dQ",
"payload": ""
}
2026-02-07 07:34:55,972:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940412716 HTTP/1.1" 200 1385
2026-02-07 07:34:55,972:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:55 GMT
Content-Type: application/json
Content-Length: 1385
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGlYenpt5g4nGcYJal2QvaWWL979_h2kATtwJyaRlLdc8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.flightjournal.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:51Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940412716/U3kcfw",
"status": "invalid",
"validated": "2026-02-07T07:34:54Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "52.206.51.51: Invalid response from https://www.flightjournal.com/.well-known/acme-challenge/Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE: 404",
"status": 403
},
"token": "Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE",
"validationRecord": [
{
"url": "http://www.flightjournal.com/.well-known/acme-challenge/Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE",
"hostname": "www.flightjournal.com",
"port": "80",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
},
{
"url": "https://www.flightjournal.com/.well-known/acme-challenge/Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE",
"hostname": "www.flightjournal.com",
"port": "443",
"addressesResolved": [
"52.206.51.51"
],
"addressUsed": "52.206.51.51"
}
]
}
]
}
2026-02-07 07:34:55,973:DEBUG:acme.client:Storing nonce: NeKnt8TGlYenpt5g4nGcYJal2QvaWWL979_h2kATtwJyaRlLdc8
2026-02-07 07:34:55,973:INFO:certbot._internal.auth_handler:Challenge failed for domain flightjournal.com
2026-02-07 07:34:55,973:INFO:certbot._internal.auth_handler:Challenge failed for domain www.flightjournal.com
2026-02-07 07:34:55,973:INFO:certbot._internal.auth_handler:http-01 challenge for flightjournal.com
2026-02-07 07:34:55,973:INFO:certbot._internal.auth_handler:http-01 challenge for www.flightjournal.com
2026-02-07 07:34:55,973:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: flightjournal.com
Type: unauthorized
Detail: 52.206.51.51: Invalid response from https://www.flightjournal.com/.well-known/acme-challenge/argIiDkecAM45rn4mTukN0Wi9j7ixAhp_xv3dTldfmQ: 404
Domain: www.flightjournal.com
Type: unauthorized
Detail: 52.206.51.51: Invalid response from https://www.flightjournal.com/.well-known/acme-challenge/Hufk9bwBUhvio-o83GP3JusZZ-dMXy1Tp4jUswK42FE: 404
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:34:55,974:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:55,974:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:34:55,974:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:34:56,162:ERROR:certbot._internal.renewal:Failed to renew certificate flightjournal.com with error: Some challenges have failed.
2026-02-07 07:34:56,163:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:34:56,167:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mediakits.airage.com.conf
2026-02-07 07:34:56,184:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/mediakits.airage.com/cert2.pem
2026-02-07 07:34:56,185:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:34:52 UTC.
2026-02-07 07:34:56,185:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:34:56,185:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:34:56,271:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:34:56,541:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c4b20>
Prep: True
2026-02-07 07:34:56,541:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c4b20>
Prep: True
2026-02-07 07:34:56,541:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c4b20> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c4b20>
2026-02-07 07:34:56,541:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:34:56,586:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:34:56,586:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:34:56,587:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:34:56,769:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:34:56,770:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:56 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
"yWDDnnzwpEM": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2026-02-07 07:34:56,771:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mediakits.airage.com
2026-02-07 07:34:56,774:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:34:56,774:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:34:56,835:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:34:56,835:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:56 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBxd_5XiLy6g1qn3DJHAIPBlxPAndkaBvkEpvSnJhMj_w
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:34:56,835:DEBUG:acme.client:Storing nonce: 4AH-2vvBxd_5XiLy6g1qn3DJHAIPBlxPAndkaBvkEpvSnJhMj_w
2026-02-07 07:34:56,836:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mediakits.airage.com"\n }\n ]\n}'
2026-02-07 07:34:56,838:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QnhkXzVYaUx5NmcxcW4zREpIQUlQQmx4UEFuZGthQnZrRXB2U25KaE1qX3ciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "eNMF8xzwsa31LGTEy1OCS33ku4Yx1k03q_t4hwVKoK9qb2Kj1W4cOUVrDAaiEjK5qehqPh3zmAJmKAZoP4qZJo9PVQQISlpDGdgaT6EoalI1D2QiZROZLbzfzBWi-Ke1RNCncTCuVuczdrfj1NmwTOaRO1nOjfQ9YToKY_TtQbNhuLo_RDeeZoMRie4TJLEraraDIbNk5lYiWFEh3-t_Z4Go10X05AVQMYW3NDx90SzE8bhyXn6MoZlePOfi35Yzr9q5NK984c-vqbNanlqKdZOXQKzwIovMoUO75ph33yuImRFnbMY0Q_mLeE2UlCxsdxfzKfnsoNeT3HiJjT6Eeg",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1lZGlha2l0cy5haXJhZ2UuY29tIgogICAgfQogIF0KfQ"
}
2026-02-07 07:34:56,929:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 354
2026-02-07 07:34:56,930:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:34:56 GMT
Content-Type: application/json
Content-Length: 354
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477688012436
Replay-Nonce: NeKnt8TGnK4YxpmxhzvK-G37_ewvpfCV0nOVvbHV9LxuZtkQxI4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:34:56Z",
"identifiers": [
{
"type": "dns",
"value": "mediakits.airage.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940443626"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477688012436"
}
2026-02-07 07:34:56,930:DEBUG:acme.client:Storing nonce: NeKnt8TGnK4YxpmxhzvK-G37_ewvpfCV0nOVvbHV9LxuZtkQxI4
2026-02-07 07:34:56,930:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:34:56,931:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940443626:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR25LNFl4cG14aHp2Sy1HMzdfZXd2cGZDVjBuT1Z2YkhWOUx4dVp0a1F4STQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDQzNjI2In0",
"signature": "OWJPBvhzv_fzzhTpZqkVMzJCnz6OYBbX0apRGLOyOYadqdBdj4frIJVoCnNXSb6DKsJSi5EWahgd3f9cYQ9RMGco7f3SkltqbgS9QA305ATuoDlUV9kpYV4IRFRPbFSxDGh-tTPgt68crRmAUcueyddLMlnDJqx8cN2ECoO_GcNRcUcm7mTIFx1ioq7mnpiAwxUYlqjZ7htcxZ3rmx9IfJS8oVn6yym50KaTyJicDsLGVJCdbWaC9yOcfrBs6KsCdvs2_aGLqEOGMaDT3ZuZ3pEywkNM0P7Oyqh0ae5e057JSRVDDN86ivVbJeUWWwcb-fCfxvzQvwmhxqBGE4tdeg",
"payload": ""
}
2026-02-07 07:34:56,993:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940443626 HTTP/1.1" 200 828
2026-02-07 07:34:56,994:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:34:56 GMT
Content-Type: application/json
Content-Length: 828
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBbSTQZCXyHlLlpROY-uifasVKhgLgOMRsaCbuW7HugBQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mediakits.airage.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:56Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/ycJYuA",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Khv29Q",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
}
]
}
2026-02-07 07:34:56,994:DEBUG:acme.client:Storing nonce: 4AH-2vvBbSTQZCXyHlLlpROY-uifasVKhgLgOMRsaCbuW7HugBQ
2026-02-07 07:34:56,994:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:34:56,994:INFO:certbot._internal.auth_handler:http-01 challenge for mediakits.airage.com
2026-02-07 07:34:57,003:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: mediakits.airage.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:34:57,003:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: mediakits.airage.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:57,004:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:57,004:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:34:57,004:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:34:57,088:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:34:57,088:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:34:57,089:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:35:00,273:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:35:00,275:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QmJTVFFaQ1h5SGxMbHBST1ktdWlmYXNWS2hnTGdPTVJzYUNidVc3SHVnQlEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwNDQzNjI2L1BjOVg1ZyJ9",
"signature": "WwQwoaF0q5yqOEXsJdjINwogclq5zXtDMwH5dzDLOb5yACskCIqiqr89e9oaUouFnvFQ42CZOUn1k38-KG2A4_JQdnw4FxknSJv7nJkWLRYFxhb_CLXMkNW6UeqzpQukWpwJKwu6A5Jp4Jc3hS7tlKf5giEmAayzjfkGQCmcHen_5X41hazksCbFnUXZXoYBjGy6zXrZjrMxpGMc_aCYbtxuKTSwgEZFVC8PZ7RaAFJjY2D5rxMfGGMmxcdziBH_dbhoAa2yW4VsoAc5-wUPZrYp0cyzgJv9wI0O8dHJ4XdHDxCaj4uYU_PU21xuy_nJGbH1MWO5wNQ4MEbMWs2BAA",
"payload": "e30"
}
2026-02-07 07:35:00,341:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940443626/Pc9X5g HTTP/1.1" 200 195
2026-02-07 07:35:00,342:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:00 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940443626>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g
Replay-Nonce: NeKnt8TGQq0J_yhL8ysjkukgKgcqrtw9VgxeFoldNDbsxadLrf4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
}
2026-02-07 07:35:00,342:DEBUG:acme.client:Storing nonce: NeKnt8TGQq0J_yhL8ysjkukgKgcqrtw9VgxeFoldNDbsxadLrf4
2026-02-07 07:35:00,342:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:35:01,344:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:35:01,347:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940443626:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJOZUtudDhUR1FxMEpfeWhMOHlzamt1a2dLZ2NxcnR3OVZneGVGb2xkTkRic3hhZExyZjQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDQzNjI2In0",
"signature": "hD3EHsXTQJc9mIVkvOMZPvORboSLLI9SqUiy-2Sp5gWFL-akfI3wcOnolrMaEuJQKp-QUT0yFdM0l4hDI19sxnoLEGVhw0fd7wDzxqxi5GnSMVQNsVHGMrqjIaNAQzVhmX-QZ_o2Z4F1B8VHqTxLMBrMxoykENg_rWr92OSppUUuAkRku-mwvbvcY6SLLomulHXc7hwlribk3GkwFDTaB5wh7Y1jSfs-GwcS7_amtyspsmm9aORG_LfMt4cZleF4EkMfhLrjZIrU-XyuQqa-Ai4bpMNyoQqnT1kciZdf7xp-8OJ34Z37Qz5DMoLU9S-wZ653MPlncqWOyya6GSq0gw",
"payload": ""
}
2026-02-07 07:35:01,413:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940443626 HTTP/1.1" 200 828
2026-02-07 07:35:01,414:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:01 GMT
Content-Type: application/json
Content-Length: 828
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 4AH-2vvBeioR652u5NJUfU_ISsrIrAjcQEPxMnsB7vvvDWis_kU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mediakits.airage.com"
},
"status": "pending",
"expires": "2026-02-14T07:34:56Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/ycJYuA",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Khv29Q",
"status": "pending",
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho"
}
]
}
2026-02-07 07:35:01,414:DEBUG:acme.client:Storing nonce: 4AH-2vvBeioR652u5NJUfU_ISsrIrAjcQEPxMnsB7vvvDWis_kU
2026-02-07 07:35:04,417:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:35:04,419:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940443626:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICI0QUgtMnZ2QmVpb1I2NTJ1NU5KVWZVX0lTc3JJckFqY1FFUHhNbnNCN3Z2dkRXaXNfa1UiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDQzNjI2In0",
"signature": "ARB4qYrLoSWkxDliRXbh3jZx-EFvC_z-RiPLYOSQoUByUM_-8aEqkmTPqM7z94LPgkUa63Mxfb92fjZJxIbWHeRiJeNIM2vsIKGVg70TdnIBgqloxwOWiHDuXhF60UQB3_GLFmvNb9AI41sKsiKy35qVisq3AxASrx2_O6GsSpFTnzoXhp-c43mK3emfWLczJhG6fsCelJGCqDMtVdL3KSsBemchl9uNilAACWjP-j0kCRSH1Uwu6YwQNSQEmDWVJeTQOWE3-2SEtmADZ7xx0Bo1COLeCStR4XLdqecaOiIxC1wPLW8-r8_PgWMGpq99W3EKDpi6WcB4S3EFJfMq-Q",
"payload": ""
}
2026-02-07 07:35:04,482:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940443626 HTTP/1.1" 200 1379
2026-02-07 07:35:04,483:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:04 GMT
Content-Type: application/json
Content-Length: 1379
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: NeKnt8TGFiZxJClz5Je87y9BQdfItOzYecMGwmYbbNaXxLR5M1U
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mediakits.airage.com"
},
"status": "invalid",
"expires": "2026-02-14T07:34:56Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940443626/Pc9X5g",
"status": "invalid",
"validated": "2026-02-07T07:35:00Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "54.146.93.33: Invalid response from https://mediakits.airage.com/.well-known/acme-challenge/zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho: 404",
"status": 403
},
"token": "zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho",
"validationRecord": [
{
"url": "http://mediakits.airage.com/.well-known/acme-challenge/zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho",
"hostname": "mediakits.airage.com",
"port": "80",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
},
{
"url": "https://mediakits.airage.com/.well-known/acme-challenge/zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho",
"hostname": "mediakits.airage.com",
"port": "443",
"addressesResolved": [
"54.146.93.33"
],
"addressUsed": "54.146.93.33"
}
]
}
]
}
2026-02-07 07:35:04,483:DEBUG:acme.client:Storing nonce: NeKnt8TGFiZxJClz5Je87y9BQdfItOzYecMGwmYbbNaXxLR5M1U
2026-02-07 07:35:04,483:INFO:certbot._internal.auth_handler:Challenge failed for domain mediakits.airage.com
2026-02-07 07:35:04,483:INFO:certbot._internal.auth_handler:http-01 challenge for mediakits.airage.com
2026-02-07 07:35:04,483:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: mediakits.airage.com
Type: unauthorized
Detail: 54.146.93.33: Invalid response from https://mediakits.airage.com/.well-known/acme-challenge/zhW-6_dlE3LV5n9FoadEdWmva1YNGNHh37k5R9VSyho: 404
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
2026-02-07 07:35:04,484:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:35:04,484:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:35:04,484:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:35:04,662:ERROR:certbot._internal.renewal:Failed to renew certificate mediakits.airage.com with error: Some challenges have failed.
2026-02-07 07:35:04,663:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 533, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 1547, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/main.py", line 129, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/renewal.py", line 395, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/opt/certbot/lib64/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-02-07 07:35:04,667:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/membership.flightjournal.com.conf
2026-02-07 07:35:04,690:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/membership.flightjournal.com/cert2.pem
2026-02-07 07:35:04,691:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-03-05 04:35:00 UTC.
2026-02-07 07:35:04,691:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-02-07 07:35:04,692:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
2026-02-07 07:35:04,801:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.56
2026-02-07 07:35:05,083:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c48b0>
Prep: True
2026-02-07 07:35:05,084:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: Authenticator, Installer, Plugin
Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
Initialized: <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c48b0>
Prep: True
2026-02-07 07:35:05,084:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c48b0> and installer <certbot_apache._internal.override_fedora.FedoraConfigurator object at 0x7f96f90c48b0>
2026-02-07 07:35:05,084:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2026-02-07 07:35:05,127:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/1321460636', new_authzr_uri=None, terms_of_service=None), feef47df9030ef74186c265753112b53, Meta(creation_dt=datetime.datetime(2023, 9, 21, 13, 32, 32, tzinfo=<UTC>), creation_host='ip-172-32-10-67.ec2.internal', register_to_eff=None))>
2026-02-07 07:35:05,128:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-02-07 07:35:05,129:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-02-07 07:35:05,275:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2026-02-07 07:35:05,276:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:05 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
"vAyWt1CasIw": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2026-02-07 07:35:05,277:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for membership.flightjournal.com
2026-02-07 07:35:05,280:DEBUG:acme.client:Requesting fresh nonce
2026-02-07 07:35:05,280:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-02-07 07:35:05,328:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-02-07 07:35:05,329:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:05 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtff2GnsrfIi4gud7HhLYQmzHF-nb3jGPoLlP5840-XYkk
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-02-07 07:35:05,329:DEBUG:acme.client:Storing nonce: qLPTsdtff2GnsrfIi4gud7HhLYQmzHF-nb3jGPoLlP5840-XYkk
2026-02-07 07:35:05,329:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "membership.flightjournal.com"\n }\n ]\n}'
2026-02-07 07:35:05,331:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0ZmYyR25zcmZJaTRndWQ3SGhMWVFtekhGLW5iM2pHUG9MbFA1ODQwLVhZa2siLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "GnMZ0zB7OKiWHCcBIEWoAOOaw7WYCHDUbJycKADqrTarNOlZbuSrOWOqpuUzlv9EspA4-cKvLOFWuaoUfZxjqaaxJ2TyULU33QBwMQfiKXYeEdTfmCCsNp8ylAw4MNgX0Nvi1K-KXYy2QeTwl77WtxBBdiNax6iKYtgde-xG3ZRfW5eEuRVJsG3kiznPFe92xd0nMhdSVvT3RNphFermZD0vPWZUrHG3raqZQLwE-pc3N01u6igaC5faOOQCdzjiNTmrAE_IInFA5IAWcA1gP4TkDxi7qN5wMIL53FqSbaa-iL-QD4LjRPrtW6KFdJVWz7CDvGY8TL1zcrMEr0-l7Q",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1lbWJlcnNoaXAuZmxpZ2h0am91cm5hbC5jb20iCiAgICB9CiAgXQp9"
}
2026-02-07 07:35:05,490:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 362
2026-02-07 07:35:05,490:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 07 Feb 2026 07:35:05 GMT
Content-Type: application/json
Content-Length: 362
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/1321460636/477688045606
Replay-Nonce: QkEzerAfgi9ypmyiGJVW7STgEpbC8MlCZzVuPyTwpGuGKxuY-xM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-02-14T07:35:05Z",
"identifiers": [
{
"type": "dns",
"value": "membership.flightjournal.com"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940492766"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1321460636/477688045606"
}
2026-02-07 07:35:05,491:DEBUG:acme.client:Storing nonce: QkEzerAfgi9ypmyiGJVW7STgEpbC8MlCZzVuPyTwpGuGKxuY-xM
2026-02-07 07:35:05,491:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:35:05,492:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940492766:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZmdpOXlwbXlpR0pWVzdTVGdFcGJDOE1sQ1p6VnVQeVR3cEd1R0t4dVkteE0iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDkyNzY2In0",
"signature": "ISXgk--xAV2QLws1qEUJgNzTllgacrJ7pbIEEdecvj96DqbLelqerrT8kpbxo1i-h_jTO4X7R3VR0XbkPFLpnAXjVNBEOC8r6z_jV_F-fKT-pj09UkgY3jW7wHx6Nb4BFOY7N_6UjeJRKSAF_a0U0mjvDOsMrfG535fijyuvctV4YKYHLlFgzMPPR-iAheD6wE4zMzM8HQ6Z7a5VOn2XMZbTWyd-mch8aOIMSbojFcpySc7JvfiS7zExg-_brekVrseT3l7GmDCxYesXzIR4ibPjfrizf2R_CfV90EKzJRfcVbZb0huW8qOgyVXPy8LbLyzjpScRuTr-vy8xM0w7Aw",
"payload": ""
}
2026-02-07 07:35:05,556:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940492766 HTTP/1.1" 200 836
2026-02-07 07:35:05,556:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:05 GMT
Content-Type: application/json
Content-Length: 836
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QkEzerAf8m1s96gKCCmh44ufU_55lsVfJWrrrr_er6sWlQtWEUI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "membership.flightjournal.com"
},
"status": "pending",
"expires": "2026-02-14T07:35:05Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/K9JL0g",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/Unx9_w",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/vqkL7Q",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
}
]
}
2026-02-07 07:35:05,556:DEBUG:acme.client:Storing nonce: QkEzerAf8m1s96gKCCmh44ufU_55lsVfJWrrrr_er6sWlQtWEUI
2026-02-07 07:35:05,557:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-02-07 07:35:05,557:INFO:certbot._internal.auth_handler:http-01 challenge for membership.flightjournal.com
2026-02-07 07:35:05,566:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: membership.flightjournal.com in: /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:35:05,566:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: membership.flightjournal.com in: /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:35:05,566:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: None in: /etc/httpd/conf.d/ssl.conf
2026-02-07 07:35:05,566:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
RewriteEngine on
RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
2026-02-07 07:35:05,567:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
<Directory /var/lib/letsencrypt/http_challenges>
Require all granted
</Directory>
<Location /.well-known/acme-challenge>
Require all granted
</Location>
2026-02-07 07:35:05,651:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/ssl.conf
2026-02-07 07:35:05,651:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata-le-ssl.conf
2026-02-07 07:35:05,651:DEBUG:certbot.reverter:Creating backup of /etc/httpd/conf.d/cirrata.conf
2026-02-07 07:35:08,840:DEBUG:acme.client:JWS payload:
b'{}'
2026-02-07 07:35:08,842:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/K9JL0g:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJRa0V6ZXJBZjhtMXM5NmdLQ0NtaDQ0dWZVXzU1bHNWZkpXcnJycl9lcjZzV2xRdFdFVUkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzEzMjE0NjA2MzYvNjU0OTQwNDkyNzY2L0s5SkwwZyJ9",
"signature": "PykvI_OPlGw3Rl4n3g7TI56SAHiP_CgBZE2X-sfeKOZmC7kr0c2kQqNqoFmNdSSdLk21LPSOGofg0TqradnHWmGa3QriJ9NFttMNn0V4hu5fByFT6Oe7EESHt2n0BQKEIWBPqBq1HI7p1d6I19iqGE0ncysEB5gKZQKkUTw7KcFT30N37UK5c2h9pZFq7LqvkHTWwktdPAPvoTyL5tRDPuC-z-f1BT__qeQhVJ1tb-viYeFLA7l0Jq2TKCXWHkNCSkVKn7I0w_hmz_X2ydI8t13tksXB-Av5D5B3hZH04mXsY7im4KFqoSYTYVhi0nE0rpBn2EFqMpvO9GJJLJ9qOA",
"payload": "e30"
}
2026-02-07 07:35:08,896:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/1321460636/654940492766/K9JL0g HTTP/1.1" 200 195
2026-02-07 07:35:08,896:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:08 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940492766>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/K9JL0g
Replay-Nonce: qLPTsdtfIur7FQW-Q0a5nlO5EbQOdcKVn1o1XeGFb_xuSFBAHeU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/K9JL0g",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
}
2026-02-07 07:35:08,896:DEBUG:acme.client:Storing nonce: qLPTsdtfIur7FQW-Q0a5nlO5EbQOdcKVn1o1XeGFb_xuSFBAHeU
2026-02-07 07:35:08,897:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-02-07 07:35:09,898:DEBUG:acme.client:JWS payload:
b''
2026-02-07 07:35:09,899:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/1321460636/654940492766:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTMyMTQ2MDYzNiIsICJub25jZSI6ICJxTFBUc2R0Zkl1cjdGUVctUTBhNW5sTzVFYlFPZGNLVm4xbzFYZUdGYl94dVNGQkFIZVUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzEzMjE0NjA2MzYvNjU0OTQwNDkyNzY2In0",
"signature": "RodPjMQsjNdCe7p6pikdJKbZ-x1yL6D2vI8Pbfij-cxBHF384gXU5TsnzryF4YBPFKvGrbQeyHGvh0TD-8n5ojMPQio5ZxwCD_hcklU-rvu99Vn0nkWupshi_eMe97xyEBoIVbOLf2r8rn40aS5stOW24giOsYnVVCqgqTVCKuF9zt9unjyKFWmzp0pbVGadWFeMBKWbY9RYplEwKlo7xyxRwRFQ7bPkowqnkril6VSNVvEQz67khXEisPXTbdJhd_LjiGsxiOgzU7sN5xT59WCX6ZcGJQH-A60knhem4izq54UEDRiCgfg0cnGZjE3tUoJL_2CCEqKd__1YJD6gpg",
"payload": ""
}
2026-02-07 07:35:10,093:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/1321460636/654940492766 HTTP/1.1" 200 836
2026-02-07 07:35:10,093:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 07 Feb 2026 07:35:10 GMT
Content-Type: application/json
Content-Length: 836
Connection: keep-alive
Boulder-Requester: 1321460636
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: qLPTsdtfMjzDSv1jdYFSxfwzrKS_tHt1ZnOc5yH6Xd6BaQHaoTw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "membership.flightjournal.com"
},
"status": "pending",
"expires": "2026-02-14T07:35:05Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/K9JL0g",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/vqkL7Q",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/1321460636/654940492766/Unx9_w",
"status": "pending",
"token": "6DpwoHeGL8SR8tjMXuq8dmr1p2nx4Hz6NNrLwcZiLWQ"
}
]
}
2026-02-07 07:35:10,094:DEBUG:acme.client:Storing nonce: qLPTsdtfMjzDSv1jdYFSxfwzrKS_tHt1ZnOc5yH6Xd6BaQHaoTw
2026-02-07 07:37:53,170:DEBUG:certbot._internal.error_handler:Encountered signals: [1, 15]
2026-02-07 07:37:53,170:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-02-07 07:37:53,170:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-02-07 07:37:53,358:DEBUG:certbot._internal.error_handler:Calling signal 1