File: //proc/self/root/var/log/letsencrypt/letsencrypt.log
2026-08-02 00:44:08,344:DEBUG:certbot._internal.main:certbot version: 3.1.0
2026-08-02 00:44:08,344:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
2026-08-02 00:44:08,344:DEBUG:certbot._internal.main:Arguments: ['--noninteractive', '--no-random-sleep-on-renew']
2026-08-02 00:44:08,345:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2026-08-02 00:44:08,364:DEBUG:certbot._internal.log:Root logging level set at 30
2026-08-02 00:44:08,366:DEBUG:certbot._internal.display.obj:Notifying user: Processing /etc/letsencrypt/renewal/mail.espica.me.conf
2026-08-02 00:44:08,369:DEBUG:certbot._internal.plugins.selection:Requested authenticator None and installer None
2026-08-02 00:44:08,403:INFO:certbot.ocsp:Cannot extract OCSP URI from /etc/letsencrypt/archive/mail.espica.me/cert1.pem
2026-08-02 00:44:08,409:DEBUG:certbot._internal.storage:Should renew, less than 30 days before certificate expiry 2026-08-11 23:31:43 UTC.
2026-08-02 00:44:08,410:INFO:certbot._internal.renewal:Certificate is due for renewal, auto-renewing...
2026-08-02 00:44:08,410:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2026-08-02 00:44:08,411:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f2ddc8d1a00>
Prep: True
2026-08-02 00:44:08,412:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f2ddc8d1a00> and installer None
2026-08-02 00:44:08,412:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2026-08-02 00:44:08,482:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/3332866786', new_authzr_uri=None, terms_of_service=None), 16f9bbe895785731de66527b923ef6c7, Meta(creation_dt=datetime.datetime(2026, 5, 14, 0, 30, 9, tzinfo=<UTC>), creation_host='mail.espica.me', register_to_eff=None))>
2026-08-02 00:44:08,483:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2026-08-02 00:44:08,493:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2026-08-02 00:44:08,924:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 961
2026-08-02 00:44:08,924:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 02 Aug 2026 04:44:08 GMT
Content-Type: application/json
Content-Length: 961
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"bs-Gqx6gcQ4": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic",
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
},
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.8-July-06-2026.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2026-08-02 00:44:08,930:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for mail.espica.me
2026-08-02 00:44:08,935:DEBUG:acme.client:Requesting fresh nonce
2026-08-02 00:44:08,935:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2026-08-02 00:44:09,073:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2026-08-02 00:44:09,074:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 02 Aug 2026 04:44:09 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: lmIIsShuxeJLAaq779V0ONCPFDc1vewveFdZ--oinlLDJpoD4ks
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
2026-08-02 00:44:09,075:DEBUG:acme.client:Storing nonce: lmIIsShuxeJLAaq779V0ONCPFDc1vewveFdZ--oinlLDJpoD4ks
2026-08-02 00:44:09,075:DEBUG:acme.client:JWS payload:
b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.espica.me"\n }\n ]\n}'
2026-08-02 00:44:09,082:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJsbUlJc1NodXhlSkxBYXE3NzlWME9OQ1BGRGMxdmV3dmVGZFotLW9pbmxMREpwb0Q0a3MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
"signature": "NhOJosu1nA1SXLq9Dok26zNmA1fwa5qGB-_Bwbvvb5KFtrrwoWHKINpnaovR68QTh8pzVbTvPGk7AO7mRXpsmFSypkrdK5CLJRzvZSRVelB5lzrcDYhlXhwTOo0d_wioyW5pGoIhnXMcMIBzvQQH5amGu3gdP7IQ0wWCcDW2BWUaYmzOX1Q7yZKQi-TMdWoSOTLvVsh61YtoZxKq1FpHA8oRYuMnsYwkB9tCMZt4UitausQ7gTYO1hWdfOQGCQt7scXu4XhNEIfthI97qADiPPCtzQSAQjmiS5D5sVQwbyxmidmB7gCHnTnU8ftOdACkSgeiwHrkz-sKpBb1BWKZeA",
"payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuZXNwaWNhLm1lIgogICAgfQogIF0KfQ"
}
2026-08-02 00:44:09,410:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348
2026-08-02 00:44:09,410:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sun, 02 Aug 2026 04:44:09 GMT
Content-Type: application/json
Content-Length: 348
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/3332866786/539703552111
Replay-Nonce: lmIIsShunjEy56s5a9MIeEuYT9ROHAc79LSqr4nMJcNZ3yzt3Lc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"status": "pending",
"expires": "2026-08-09T04:44:09Z",
"identifiers": [
{
"type": "dns",
"value": "mail.espica.me"
}
],
"authorizations": [
"https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/751174171261"
],
"finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/3332866786/539703552111"
}
2026-08-02 00:44:09,410:DEBUG:acme.client:Storing nonce: lmIIsShunjEy56s5a9MIeEuYT9ROHAc79LSqr4nMJcNZ3yzt3Lc
2026-08-02 00:44:09,411:DEBUG:acme.client:JWS payload:
b''
2026-08-02 00:44:09,412:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/751174171261:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJsbUlJc1NodW5qRXk1NnM1YTlNSWVFdVlUOVJPSEFjNzlMU3FyNG5NSmNOWjN5enQzTGMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzUxMTc0MTcxMjYxIn0",
"signature": "VW1imetNmqVK-obLQQzaPG0ZHR95FKaqBuCgVuL1wIDl2fBQLSc5qEq86mheOjfOv7OHZ_hRTAET72Qp2V2bvTiBrg6rYEo5uqPOV6aYsLNZoK2IBRmi-0uw6k9gCiibY5Qk4tWdmEInf2DzJSs2UWkAH0NezeYvEtCaQQqU1Lhp-HpFYIkbj6jPGOh1vICllVVCb6t8l4wvbmCQyl9fsiQq8yqitucLjacRRsB7_qQREwJ_rapwfb4s2UjAg1LuskPlcB2sjA38SNouUpxhHvXayggQYhX6xmjLYzaPFeV_feO0zjkObcnZF60IT5EuCVP79bxEHVZuKyyjUznSvw",
"payload": ""
}
2026-08-02 00:44:09,549:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/751174171261 HTTP/1.1" 200 822
2026-08-02 00:44:09,550:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 02 Aug 2026 04:44:09 GMT
Content-Type: application/json
Content-Length: 822
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: B-0UAE0WmGemx3hReFz2LIQ0RN9vje_vwJtsCNKO3UjylX-W-tg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "pending",
"expires": "2026-08-09T04:44:09Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/MIxTuQ",
"status": "pending",
"token": "LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4"
},
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/go7s0g",
"status": "pending",
"token": "LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4"
},
{
"type": "tls-alpn-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/UzqwEQ",
"status": "pending",
"token": "LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4"
}
]
}
2026-08-02 00:44:09,550:DEBUG:acme.client:Storing nonce: B-0UAE0WmGemx3hReFz2LIQ0RN9vje_vwJtsCNKO3UjylX-W-tg
2026-08-02 00:44:09,551:INFO:certbot._internal.auth_handler:Performing the following challenges:
2026-08-02 00:44:09,551:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-02 00:44:09,551:INFO:certbot._internal.plugins.webroot:Using the webroot path /var/www/html for all unmatched domains.
2026-08-02 00:44:09,551:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /var/www/html/.well-known/acme-challenge
2026-08-02 00:44:09,559:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /var/www/html/.well-known/acme-challenge/LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4
2026-08-02 00:44:09,560:DEBUG:acme.client:JWS payload:
b'{}'
2026-08-02 00:44:09,561:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/MIxTuQ:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJCLTBVQUUwV21HZW14M2hSZUZ6MkxJUTBSTjl2amVfdndKdHNDTktPM1VqeWxYLVctdGciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzMzMzI4NjY3ODYvNzUxMTc0MTcxMjYxL01JeFR1USJ9",
"signature": "P7OXc6COIPIl25A_NDtlIHXtPDmTy0J4v0Seu9DJpWW-LQUxpr25O2lQ8to57MQ6P3Pm75mLGNiZguwrxV15OjYF59KXI83C5jkuwvvZ3tIDhI5WiIOJX4UBVGOBLISJbpFWlj1MUPykv_Aj7Hhp00Jl5PDtNA7SGXCYeIUncmKD_uHOdnm0qr1O0ndYMF6kt_jXHKKNxtiN_nJTjddWi_9fNqyR153Lp1sk1e8acmsn-8Kyfd1VpzdJbL7BA-2a5cmmwy8XxYiju4-WV7tSMCE8iqWjopLIfmsHpJp2OHMX2E3UhYF9P9hnlR1_eF3MI6Pzna6H2ha_8UZlTOZJKw",
"payload": "e30"
}
2026-08-02 00:44:09,701:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/3332866786/751174171261/MIxTuQ HTTP/1.1" 200 195
2026-08-02 00:44:09,702:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 02 Aug 2026 04:44:09 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/751174171261>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/MIxTuQ
Replay-Nonce: B-0UAE0WAkaZ0mllvx2aPxiNAl5p5hFEaUuxBPknLR9fSwTYHgc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/MIxTuQ",
"status": "pending",
"token": "LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4"
}
2026-08-02 00:44:09,702:DEBUG:acme.client:Storing nonce: B-0UAE0WAkaZ0mllvx2aPxiNAl5p5hFEaUuxBPknLR9fSwTYHgc
2026-08-02 00:44:09,702:INFO:certbot._internal.auth_handler:Waiting for verification...
2026-08-02 00:44:10,703:DEBUG:acme.client:JWS payload:
b''
2026-08-02 00:44:10,705:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/3332866786/751174171261:
{
"protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzMzMjg2Njc4NiIsICJub25jZSI6ICJCLTBVQUUwV0FrYVowbWxsdngyYVB4aU5BbDVwNWhGRWFVdXhCUGtuTFI5ZlN3VFlIZ2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzMzMzI4NjY3ODYvNzUxMTc0MTcxMjYxIn0",
"signature": "pw_o4g0zMCPfmsLYjAJ1lbmZ0P9SzbEgERobTS_mUpCgEx2N1uYeXv_Li7gsnYd2_HvKLBqghV3KzSN6DwTtbYkLtWEii2n837WoYV8SP-h5Vm8SVhjTlbF0ftzptDCoPS8atbCB2-3Z68fFIICWCOyWATAIAboQFjxgT2oyoXOzMq48AZ3RmkJ70BtsEzUPU1wFjkLKrpZ7Zy2w-Q4J7e7FSvGLoA-Xyyh1SuXoXUCnl8pnku3ZNb_WLEYf_Qsbo7gWDc8bLw0_k03sAJpsmoDNbI0V1WRuTAYRId8dzUaZT1xVdE2mQJ_M3E-a7QpmQ5xo4LhxEez4DuxYS2SM_A",
"payload": ""
}
2026-08-02 00:44:10,842:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/3332866786/751174171261 HTTP/1.1" 200 1032
2026-08-02 00:44:10,843:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sun, 02 Aug 2026 04:44:10 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 3332866786
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: lmIIsShud0vM517UZdAB5xvp73MTifw2_V-OR3L0R7Z3ADOYCSY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "mail.espica.me"
},
"status": "invalid",
"expires": "2026-08-09T04:44:09Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/3332866786/751174171261/MIxTuQ",
"status": "invalid",
"validated": "2026-08-02T04:44:09Z",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4: 404",
"status": 403
},
"token": "LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4",
"validationRecord": [
{
"url": "http://mail.espica.me/.well-known/acme-challenge/LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4",
"hostname": "mail.espica.me",
"port": "80",
"addressesResolved": [
"51.75.182.103"
],
"addressUsed": "51.75.182.103"
}
]
}
]
}
2026-08-02 00:44:10,843:DEBUG:acme.client:Storing nonce: lmIIsShud0vM517UZdAB5xvp73MTifw2_V-OR3L0R7Z3ADOYCSY
2026-08-02 00:44:10,843:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.espica.me
2026-08-02 00:44:10,843:INFO:certbot._internal.auth_handler:http-01 challenge for mail.espica.me
2026-08-02 00:44:10,844:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: mail.espica.me
Type: unauthorized
Detail: 51.75.182.103: Invalid response from http://mail.espica.me/.well-known/acme-challenge/LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4: 404
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
2026-08-02 00:44:10,846:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-02 00:44:10,846:DEBUG:certbot._internal.error_handler:Calling registered functions
2026-08-02 00:44:10,846:INFO:certbot._internal.auth_handler:Cleaning up challenges
2026-08-02 00:44:10,847:DEBUG:certbot._internal.plugins.webroot:Removing /var/www/html/.well-known/acme-challenge/LUZsy1rQpQPVBAEw4UJuwZhAZYeuSw4FOYwBI3Ce7e4
2026-08-02 00:44:10,847:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2026-08-02 00:44:10,847:ERROR:certbot._internal.renewal:Failed to renew certificate mail.espica.me with error: Some challenges have failed.
2026-08-02 00:44:10,853:DEBUG:certbot._internal.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 540, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1529, in renew_cert
renewed_lineage = _get_and_save_cert(le_client, config, lineage=lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 130, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 399, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 429, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File "/usr/lib/python3.9/site-packages/certbot/_internal/client.py", line 497, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
File "/usr/lib/python3.9/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2026-08-02 00:44:10,855:DEBUG:certbot._internal.display.obj:Notifying user:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-02 00:44:10,855:ERROR:certbot._internal.renewal:All renewals failed. The following certificates could not be renewed:
2026-08-02 00:44:10,855:ERROR:certbot._internal.renewal: /etc/letsencrypt/live/mail.espica.me/fullchain.pem (failure)
2026-08-02 00:44:10,855:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2026-08-02 00:44:10,855:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 8, in <module>
sys.exit(main())
File "/usr/lib/python3.9/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1873, in main
return config.func(config, plugins)
File "/usr/lib/python3.9/site-packages/certbot/_internal/main.py", line 1621, in renew
renewed_domains, failed_domains = renewal.handle_renewal_request(config)
File "/usr/lib/python3.9/site-packages/certbot/_internal/renewal.py", line 568, in handle_renewal_request
raise errors.Error(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2026-08-02 00:44:10,857:ERROR:certbot._internal.log:1 renew failure(s), 0 parse failure(s)