File: //proc/thread-self/root/proc/self/root/var/log/letsencrypt/letsencrypt.log
2026-07-26 02:44:07,360:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-07-26 02:44:07,360:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-07-26 02:44:07,360:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-07-26 02:44:07,361:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-07-26 02:44:07,369:DEBUG:certbot._internal.log:Root logging level set at 30
2026-07-26 02:44:07,371:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-07-26 02:44:07,373:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-07-26 02:44:07,393:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/mail.espica.me/cert1.pem
2026-07-26 02:44:07,396:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-07-26 02:44:07,396:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-07-26 02:44:07,396:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-07-26 02:44:07,396:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f50f4422a00>
Prep: True
2026-07-26 02:44:07,396:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f50f4422a00> and installer None
2026-07-26 02:44:07,397:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-07-26 02:44:07,437:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-07-26 02:44:07,438:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-07-26 02:44:07,439:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-07-26 02:44:07,864:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-07-26 02:44:07,865:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 06:44:07 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"ExDOz_dAmQU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-07-26 02:44:07,867:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-07-26 02:44:07,870:DEBUG:acme.client:Requesting fresh nonce
2026-07-26 02:44:07,870:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-07-26 02:44:08,003:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-07-26 02:44:08,003:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 06:44:07 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: QSsEHsAEzAy0JC5xZTgvyoKRK1joeFQaphleCnhNSXhlH4XULlk
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-07-26 02:44:08,004:DEBUG:acme.client:Storing nonce: QSsEHsAEzAy0JC5xZTgvyoKRK1joeFQaphleCnhNSXhlH4XULlk
2026-07-26 02:44:08,004:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-07-26 02:44:08,009:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJRU3NFSHNBRXpBeTBKQzV4WlRndnlvS1JLMWpvZUZRYXBobGVDbmhOU1hobEg0WFVMbGsiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "QCZG4JECpcX8TXHQF9uDKbrOfhq-Eve5LHXyGd3kDgAz8I-FZgixHSuPZnBrqInXaRBm0bKwQp8CZyxM9bt7MEAkjC_EwtuMv1IUM-dwr8_fMN5oGIQbzXvemAbTPuK33Dz015ZKfslgcjhWztKO20M5AIqcvpPSmVPEF9UCy2GwPQ1l0Bdabazchz80Se9NL-TiJ0QXjBsPUMScwXC15l9U-MuoDxZXIVAEbrmeaEj0aBcEwx8tvoq27aTUQfN6AUHZ_FtwLbPzfQHL4H4tYgo7MlDYlSrMtaHhqJhtYrAqEFMoQusbAkt6OrWdnZTjHpc3YZMAdHS4_BwvCr2hgQ",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-07-26 02:44:08,167:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-07-26 02:44:08,168:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 26 Jul 2026 06:44:08 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/536842891065
Replay-Nonce: -zoI5xr2j_ySk3ZQWoXA7cfS0_mX15DcskGPnW35dgQnvai5r4E
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-02T06:44:08Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746640874855"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/536842891065"
}
2026-07-26 02:44:08,168:DEBUG:acme.client:Storing nonce: -zoI5xr2j_ySk3ZQWoXA7cfS0_mX15DcskGPnW35dgQnvai5r4E
2026-07-26 02:44:08,168:DEBUG:acme.client:JWS payload:
b''
2026-07-26 02:44:08,170:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746640874855:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICItem9JNXhyMmpfeVNrM1pRV29YQTdjZlMwX21YMTVEY3NrR1BuVzM1ZGdRbnZhaTVyNEUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzQ2NjQwODc0ODU1In0",
"signature": "e2vQK9f_bgVGi8dv-B2H0yT8gIwOhilS5NfxTSqvfLri1gYPywvh8K8x1au-vEyk6xLFjGsFTCN9vWp6fOKE9w83cg9ww-vxTDQGUkmw-jArRRJRDPKYGUVQRUS4cwNZHb4_lAtXKefoEkQS7gUVX2F2X7xKU_nHyI_GrJbdAB1IpxIVPFrbZHW1uIxhJ40XFqOtCbisfcsPIS3zTyNjKs39Sfy5wlX75WG-pdUzszEkxxEKA2li3czoZx3Y9Fk1GkSjt5s1KVU7CHf33YbwtdF6axOd3jOrIbGlqDgYM5LaFLzBpCdHJ9fcrIFkjGl6sSZsH3njhBMqhxnyaySyhg",
"payload": ""
}
2026-07-26 02:44:08,304:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/746640874855 HTTP/1.1" 200 822
2026-07-26 02:44:08,305:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 06:44:08 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: -zoI5xr2kcr4a_BvcGQSMcYuviXaQUht16NxhnvzIxzaACt3ojc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-02T06:44:08Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/FMBIWg",
"status": "pending",
"token": "ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/8jtsZQ",
"status": "pending",
"token": "ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/fe_i7g",
"status": "pending",
"token": "ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4"
}
]
}
2026-07-26 02:44:08,305:DEBUG:acme.client:Storing nonce: -zoI5xr2kcr4a_BvcGQSMcYuviXaQUht16NxhnvzIxzaACt3ojc
2026-07-26 02:44:08,305:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-07-26 02:44:08,305:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-07-26 02:44:08,306:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-07-26 02:44:08,306:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-07-26 02:44:08,307:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4
2026-07-26 02:44:08,308:DEBUG:acme.client:JWS payload:
b'{}'
2026-07-26 02:44:08,309:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/8jtsZQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICItem9JNXhyMmtjcjRhX0J2Y0dRU01jWXV2aVhhUVVodDE2TnhobnZ6SXh6YUFDdDNvamMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzQ2NjQwODc0ODU1LzhqdHNaUSJ9",
"signature": "L8hKuin9HqUf7N1mO8F4Tv_9F0CThWGC2NSrDhrlQly-labdjmUtGKmebHmLO9wonuM-pOfJ8u2UcPWFzIz2gA-0Kg4THXypS-tO5_WRfBA00y0HJBstI4j9_vdv_HMjlyKZTEwlppdtTdTkbGmz8VrwzXFZOPt3xkeZ0OvzSHzBsNr4Z5aHus-Dd5Xa0Vap_QBEsuP5s6tyvYEHH5H1_y5TM1RZzzUt9tp7mZ-woJUkOWUOQ34WIp9xsM7LU4Ac-uaGSrTzilQAya26XkeR-BByqxEYX9in-2PG7KrOk0RARFInasmRJXLuqJrT4zda8OPtmkvOVVDrBAn_IvYtyA",
"payload": "e30"
}
2026-07-26 02:44:08,447:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/746640874855/8jtsZQ HTTP/1.1" 200 195
2026-07-26 02:44:08,448:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 06:44:08 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746640874855>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/8jtsZQ
Replay-Nonce: -zoI5xr2aGnKIHhvoBrhmMnaDwlh8m0-frfKGNVCcCDWRbQAtKQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/8jtsZQ",
"status": "pending",
"token": "ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4"
}
2026-07-26 02:44:08,448:DEBUG:acme.client:Storing nonce: -zoI5xr2aGnKIHhvoBrhmMnaDwlh8m0-frfKGNVCcCDWRbQAtKQ
2026-07-26 02:44:08,448:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-07-26 02:44:09,448:DEBUG:acme.client:JWS payload:
b''
2026-07-26 02:44:09,450:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746640874855:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICItem9JNXhyMmFHbktJSGh2b0JyaG1NbmFEd2xoOG0wLWZyZktHTlZDY0NEV1JiUUF0S1EiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzQ2NjQwODc0ODU1In0",
"signature": "sfzgWv3nyFaARtrs4-HSWpFpmSaaIO3AZEjGh1n6eyxAQGopgvBg1d9MQorrvcNGhQ_Ahl84IvrFhOPN6K470GYpNlENnBq8JuN4xKNaufCjzfSzq-rYKauQfVRtS5Ry6ruwI4B63yPwBkX2FM049QlHrWR0UBFsCnizHi56XMlmgDdZa8trusbgSRnOwNuQbm0zXqOyxiWJDVOZbsgdGdu57mJIxKqKratj2qArMiERpSA67oHTC0Ka_zK5Nc3abIe-dL6aOxdaXwx0iNKvy1QPzzaNY-GlykfuS5WyDf8lFmRg8NoXc4wI5kBlKA1smHjcsqN4HNXirJS72xt0DA",
"payload": ""
}
2026-07-26 02:44:09,586:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/746640874855 HTTP/1.1" 200 1032
2026-07-26 02:44:09,586:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 06:44:09 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: -zoI5xr2fZYQ6HYbbNIFg1qyIytGoPjwCBBHoauznU-rRFNxa7o
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-02T06:44:08Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746640874855/8jtsZQ",
"status": "invalid",
"validated": "2026-07-26T06:44:08Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4: 404",
"status": 403
},
"token": "ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-07-26 02:44:09,586:DEBUG:acme.client:Storing nonce: -zoI5xr2fZYQ6HYbbNIFg1qyIytGoPjwCBBHoauznU-rRFNxa7o
2026-07-26 02:44:09,587:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-07-26 02:44:09,587:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-07-26 02:44:09,587:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-07-26 02:44:09,588:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-07-26 02:44:09,588:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-07-26 02:44:09,588:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-07-26 02:44:09,588:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/ARZGi49qCyC_GmUTaxSU-RsGh-3QYCuBK6-RQ7Fofy4
2026-07-26 02:44:09,588:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-07-26 02:44:09,589:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-07-26 02:44:09,590:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-07-26 02:44:09,591:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-07-26 02:44:09,591:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-07-26 02:44:09,591:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-07-26 02:44:09,592:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-07-26 02:44:09,592:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-07-26 02:44:09,592:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)
2026-07-26 15:44:07,401:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-07-26 15:44:07,402:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-07-26 15:44:07,402:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-07-26 15:44:07,403:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-07-26 15:44:07,414:DEBUG:certbot._internal.log:Root logging level set at 30
2026-07-26 15:44:07,416:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-07-26 15:44:07,420:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-07-26 15:44:07,442:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/mail.espica.me/cert1.pem
2026-07-26 15:44:07,445:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-07-26 15:44:07,445:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-07-26 15:44:07,445:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-07-26 15:44:07,445:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f8208d47a00>
Prep: True
2026-07-26 15:44:07,445:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f8208d47a00> and installer None
2026-07-26 15:44:07,446:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-07-26 15:44:07,492:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-07-26 15:44:07,493:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-07-26 15:44:07,495:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-07-26 15:44:07,888:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-07-26 15:44:07,889:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 19:44:07 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
"xI9dZPEz8II": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2026-07-26 15:44:07,890:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-07-26 15:44:07,892:DEBUG:acme.client:Requesting fresh nonce
2026-07-26 15:44:07,892:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-07-26 15:44:08,015:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-07-26 15:44:08,015:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 19:44:07 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: VnRLvUymaEiQqrsGvGnhUgZIc6TQ74-wsGN_PBr6axoG6BV9SUg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-07-26 15:44:08,016:DEBUG:acme.client:Storing nonce: VnRLvUymaEiQqrsGvGnhUgZIc6TQ74-wsGN_PBr6axoG6BV9SUg
2026-07-26 15:44:08,016:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-07-26 15:44:08,018:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJWblJMdlV5bWFFaVFxcnNHdkduaFVnWkljNlRRNzQtd3NHTl9QQnI2YXhvRzZCVjlTVWciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "ZCpJ0Nxrift9kUdsaGiwc8rjbur_796T3MjJOytO9HndznNZl_x-Z8QQZLpwByjFdvGWZRH07KGORa6Q9PdQyVzU19OO-udTBI67V40O81N85zUzWGYQ9WpqN8KRCuG8EJe_VC2AjXBovrmR7MIJ1Y_2rnGRA6ed-OsEXiU6OPuQzscYhAntpLMxaS9ltQA-1Sc_dnCNpm-iUMRfizhvjjhItjYEAD7ap8qYXUoPw__DWvy1G2hr_uE5QeuLGm7X1BsezAkGxMg8jnYJ2ZCJxIoa8bUwq_YhIgRXPXe3qH3HhcY99YBf4d4iuhHBCXMCNggsdtJblKWDUqTY302wPg",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-07-26 15:44:08,271:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-07-26 15:44:08,273:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 26 Jul 2026 19:44:08 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/537048900145
Replay-Nonce: VnRLvUymbE-Kvd5b3PQnhxmHvYxWRwwFHBV6CVEIqWFd2lNocok
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-02T19:44:08Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746976987785"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/537048900145"
}
2026-07-26 15:44:08,273:DEBUG:acme.client:Storing nonce: VnRLvUymbE-Kvd5b3PQnhxmHvYxWRwwFHBV6CVEIqWFd2lNocok
2026-07-26 15:44:08,273:DEBUG:acme.client:JWS payload:
b''
2026-07-26 15:44:08,275:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746976987785:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJWblJMdlV5bWJFLUt2ZDViM1BRbmh4bUh2WXhXUnd3RkhCVjZDVkVJcVdGZDJsTm9jb2siLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzQ2OTc2OTg3Nzg1In0",
"signature": "VM9YM2mpEGGobi78snjUjYoZAnc40nBQ712NG35RfwGYqUyIjpVVwp4JN1jtLAxx-vAOUdrBGmneqdBVpjimeIefkiizVOg_weL7f8Hmz-3tVGVEK1UyVYV7NF0CZDsDH0OmIIo7dR4YSO2aaNFg2ggj0WB2peJ4ZY4F6sPItM4Ui22je8N_RjKMDVrq-LP5jnZyU5kLuN_IBS970-0iM5mmVta4HphU3FXCD-_oM3w_Al4OJvydVfl4BK3HHnMxzdWkVTIGGD-z8cCTr1X8IvJ_7LXrLif6t60ELKoynVBTpcXPXdhpO0CL1WZv73jH5WqVkiAh2BGzAgWLxhY_TQ",
"payload": ""
}
2026-07-26 15:44:08,402:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/746976987785 HTTP/1.1" 200 822
2026-07-26 15:44:08,403:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 19:44:08 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: VnRLvUymSxEs-ZII_a9dM6R5_rIpVNvael9YkeDL-Uew_29vnfs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-02T19:44:08Z",
"challenges": [
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/T67tJQ",
"status": "pending",
"token": "blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/YJmPZQ",
"status": "pending",
"token": "blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo"
},
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/y1vKqQ",
"status": "pending",
"token": "blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo"
}
]
}
2026-07-26 15:44:08,403:DEBUG:acme.client:Storing nonce: VnRLvUymSxEs-ZII_a9dM6R5_rIpVNvael9YkeDL-Uew_29vnfs
2026-07-26 15:44:08,403:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-07-26 15:44:08,403:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-07-26 15:44:08,403:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-07-26 15:44:08,403:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-07-26 15:44:08,404:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo
2026-07-26 15:44:08,405:DEBUG:acme.client:JWS payload:
b'{}'
2026-07-26 15:44:08,407:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/y1vKqQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJWblJMdlV5bVN4RXMtWklJX2E5ZE02UjVfcklwVk52YWVsOVlrZURMLVVld18yOXZuZnMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzQ2OTc2OTg3Nzg1L3kxdktxUSJ9",
"signature": "RjUXHivDF1nd03txVweIxENuKWD3M1uTQraeEbMtqgrgEZcxckSvdBLEEXtyyVaBRPNR0dmQwbT_QKspMF4I1n5lVB2xm0Ug_LjFNvd0nC1v_XsaeBkdKcGbef9v86AVJjh9HyZBT_S-Tk5_EWqZtkoo85_rscI2_zq-thj_Rj511yvVE4iKaVaUnZV5In-2O9WFVNOU5iqoO0_TlnS7CMNijVpoCi3D7oBHBGY8lUek8P0YsML_MtC5AQAgtCsKhMmO1zayHTKwt_8FkzYnpEcW8jr2BCaJpFNkNUgr8uHH4t3G9ioD74hdBgH39ZeTzF16uK_5pnwsf2uP4iCcfQ",
"payload": "e30"
}
2026-07-26 15:44:08,533:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/746976987785/y1vKqQ HTTP/1.1" 200 195
2026-07-26 15:44:08,533:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 19:44:08 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746976987785>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/y1vKqQ
Replay-Nonce: VnRLvUymkgGIbR9FX4sdwvMlv3ch6Zi4x9IyXK9cN_3GSfuDrsY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/y1vKqQ",
"status": "pending",
"token": "blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo"
}
2026-07-26 15:44:08,533:DEBUG:acme.client:Storing nonce: VnRLvUymkgGIbR9FX4sdwvMlv3ch6Zi4x9IyXK9cN_3GSfuDrsY
2026-07-26 15:44:08,534:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-07-26 15:44:09,535:DEBUG:acme.client:JWS payload:
b''
2026-07-26 15:44:09,536:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/746976987785:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJWblJMdlV5bWtnR0liUjlGWDRzZHd2TWx2M2NoNlppNHg5SXlYSzljTl8zR1NmdURyc1kiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzQ2OTc2OTg3Nzg1In0",
"signature": "LaGyFhCMIQ7Eck-VUVixVIYxaQPH4EVC1kT-ZcvQg7IG5Cshtx3WizGe9jo9jwyaAzWJzwH2dDiGcvUiqM5FIOlYg7dsXeApYLevYnwf-SPc35s_ue1N36zuU1NQd-J_itKq9yUmKeaaO1PbLRu71sWOfCNAFMI91o9Z5gbexJu5GcqonxZfz8zPI-NlpMToVyrq2t9lJLAHi3jDJE8ZW0532nUX5Az8JaJcv5gc9Dh6vgz_UlO2-tKlHYDeFWlPlwmUSXD6rFyox646axhr2sO49QV2N7hCH8YCm3Uj8BwQTKyAC2iNx9VRr4T2ko4I9Kdwh9kPFp9UQNhHDThGzQ",
"payload": ""
}
2026-07-26 15:44:09,663:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/746976987785 HTTP/1.1" 200 1032
2026-07-26 15:44:09,664:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 26 Jul 2026 19:44:09 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: VnRLvUym21D7pFm4ohJjTVLrUkJf9g85Rvd0M04I1LKM04uEteQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-02T19:44:08Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/746976987785/y1vKqQ",
"status": "invalid",
"validated": "2026-07-26T19:44:08Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo: 404",
"status": 403
},
"token": "blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-07-26 15:44:09,664:DEBUG:acme.client:Storing nonce: VnRLvUym21D7pFm4ohJjTVLrUkJf9g85Rvd0M04I1LKM04uEteQ
2026-07-26 15:44:09,665:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-07-26 15:44:09,665:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-07-26 15:44:09,665:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-07-26 15:44:09,666:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-07-26 15:44:09,666:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-07-26 15:44:09,666:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-07-26 15:44:09,666:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/blMlmSxFtN63CtGewP41j275sOGHw3CgfhX3AmuSuLo
2026-07-26 15:44:09,666:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-07-26 15:44:09,667:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-07-26 15:44:09,671:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-07-26 15:44:09,672:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-07-26 15:44:09,672:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-07-26 15:44:09,672:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-07-26 15:44:09,672:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-07-26 15:44:09,672:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-07-26 15:44:09,673:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)