2018-03-25 14:05:44,809:DEBUG:certbot.main:certbot version: 0.22.2 2018-03-25 14:05:44,811:DEBUG:certbot.main:Arguments: ['--dry-run'] 2018-03-25 14:05:44,811:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2018-03-25 14:05:44,823:DEBUG:certbot.log:Root logging level set at 20 2018-03-25 14:05:44,824:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2018-03-25 14:05:44,835:DEBUG:certbot.plugins.selection:Requested authenticator and installer 2018-03-25 14:05:44,835:DEBUG:certbot.cli:Var dry_run=True (set by user). 2018-03-25 14:05:44,835:DEBUG:certbot.cli:Var server={'staging', 'dry_run'} (set by user). 2018-03-25 14:05:44,835:DEBUG:certbot.cli:Var dry_run=True (set by user). 2018-03-25 14:05:44,835:DEBUG:certbot.cli:Var server={'staging', 'dry_run'} (set by user). 2018-03-25 14:05:44,836:DEBUG:certbot.cli:Var account={'server'} (set by user). 2018-03-25 14:05:44,848:INFO:certbot.renewal:Cert not due for renewal, but simulating renewal for dry run 2018-03-25 14:05:44,849:DEBUG:certbot.plugins.selection:Requested authenticator manual and installer None 2018-03-25 14:05:44,849:DEBUG:certbot.plugins.selection:Single candidate plugin: * manual Description: Manual configuration or run your own shell scripts Interfaces: IAuthenticator, IPlugin Entry point: manual = certbot.plugins.manual:Authenticator Initialized: Prep: True 2018-03-25 14:05:44,851:DEBUG:certbot.plugins.selection:Selected authenticator and installer None 2018-03-25 14:05:44,851:INFO:certbot.plugins.selection:Plugins selected: Authenticator manual, Installer None 2018-03-25 14:05:44,857:DEBUG:certbot.main:Picked account: )>)), terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf', uri='https://acme-staging-v02.api.letsencrypt.org/acme/acct/5779848'), 0fac1e7392b8349b2ff840296de7e2e9, Meta(creation_host='jane.mattnordhoff.net', creation_dt=datetime.datetime(2018, 3, 21, 12, 15, 7, tzinfo=)))> 2018-03-25 14:05:44,859:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/directory. 2018-03-25 14:05:44,863:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging-v02.api.letsencrypt.org 2018-03-25 14:05:45,226:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 602 2018-03-25 14:05:45,227:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 602 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:45 GMT Connection: keep-alive b'{\n "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",\n "meta": {\n "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"\n },\n "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",\n "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",\n "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",\n "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert",\n "xsdN4hZyQUI": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"\n}' 2018-03-25 14:05:45,228:INFO:certbot.main:Renewing an existing certificate 2018-03-25 14:05:45,381:DEBUG:acme.client:Requesting fresh nonce 2018-03-25 14:05:45,382:DEBUG:acme.client:Sending HEAD request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order. 2018-03-25 14:05:45,446:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "HEAD /acme/new-order HTTP/1.1" 405 0 2018-03-25 14:05:45,447:DEBUG:acme.client:Received response: HTTP 405 Server: nginx Content-Type: application/problem+json Content-Length: 103 Allow: POST Replay-Nonce: twTgvXKiakmyBBc9n6DdyqoSBp4gdWA0hSHgkTWCaLo Expires: Sun, 25 Mar 2018 14:05:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:45 GMT Connection: keep-alive b'' 2018-03-25 14:05:45,447:DEBUG:acme.client:Storing nonce: twTgvXKiakmyBBc9n6DdyqoSBp4gdWA0hSHgkTWCaLo 2018-03-25 14:05:45,448:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "value": "mnrd.us",\n "type": "dns"\n },\n {\n "value": "www.mnrd.us",\n "type": "dns"\n }\n ],\n "resource": "new-order",\n "status": "pending"\n}' 2018-03-25 14:05:45,451:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order: { "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm1ucmQudXMiLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm1ucmQudXMiLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXSwKICAicmVzb3VyY2UiOiAibmV3LW9yZGVyIiwKICAic3RhdHVzIjogInBlbmRpbmciCn0", "protected": "eyJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAidHdUZ3ZYS2lha215QkJjOW42RGR5cW9TQnA0Z2RXQTBoU0hna1RXQ2FMbyIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzU3Nzk4NDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIn0", "signature": "PHymuAWbHzNs1Aa-u1RcFaX_mjNnnUwpirO7mDsbRlk89cy6O6uEqNmuEc6RWzu-IjDChFz3q4rIpRYft5zZYQuxQmKxlPzE0mcwF3Dg-2tEwPnu_hdOCIxeJJgzeMF9-nF2XcRYnbmvnWiU3SlcGBieftMbiyyius_d4htp-O-cL8TWRPN06jIvByJDedKOUZ8vaSiAiHGAYRdYihoLbj-EDPV000DNaIj3B88P4gC6QWdNCu3WqlXGr080hbGJ4UCaMIooCgxcVRgOWTKFU4wCVi8zKXMveBfULz2mTtxMb1IJGVBeBFnBaLIEkT8VbHfKrRCBld47ok9caM2gug" } 2018-03-25 14:05:45,531:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 548 2018-03-25 14:05:45,532:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Content-Type: application/json Content-Length: 548 Boulder-Requester: 5779848 Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/5779848/136479 Replay-Nonce: ZXDWL0-yjWk0Dh6XZfTr20ir_epG1TvhEd4ivqKtTuw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:45 GMT Connection: keep-alive b'{\n "status": "pending",\n "expires": "2018-04-01T14:05:45.487396579Z",\n "identifiers": [\n {\n "type": "dns",\n "value": "mnrd.us"\n },\n {\n "type": "dns",\n "value": "www.mnrd.us"\n }\n ],\n "authorizations": [\n "https://acme-staging-v02.api.letsencrypt.org/acme/authz/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y",\n "https://acme-staging-v02.api.letsencrypt.org/acme/authz/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY"\n ],\n "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/5779848/136479"\n}' 2018-03-25 14:05:45,532:DEBUG:acme.client:Storing nonce: ZXDWL0-yjWk0Dh6XZfTr20ir_epG1TvhEd4ivqKtTuw 2018-03-25 14:05:45,533:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y. 2018-03-25 14:05:45,604:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /acme/authz/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y HTTP/1.1" 200 745 2018-03-25 14:05:45,605:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 745 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:45 GMT Connection: keep-alive b'{\n "identifier": {\n "type": "dns",\n "value": "mnrd.us"\n },\n "status": "valid",\n "expires": "2018-04-20T19:36:39Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047206",\n "token": "yzgg0Ys0y04SZoaz2-WorFba7_iM5xF2COaL7ABse6Y"\n },\n {\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207",\n "token": "TNmWM9siNmlkBX6eEIYpkgJduGb-9VtT-XKWPiszxBo",\n "validationRecord": [\n {\n "hostname": "mnrd.us"\n }\n ]\n }\n ]\n}' 2018-03-25 14:05:45,607:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY. 2018-03-25 14:05:45,671:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /acme/authz/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY HTTP/1.1" 200 753 2018-03-25 14:05:45,672:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 753 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:45 GMT Connection: keep-alive b'{\n "identifier": {\n "type": "dns",\n "value": "www.mnrd.us"\n },\n "status": "valid",\n "expires": "2018-04-20T19:36:39Z",\n "challenges": [\n {\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208",\n "token": "w8yq7W6kA1a4b0h4whc18i5M6bdy5bX211VPeRbfkFY",\n "validationRecord": [\n {\n "hostname": "www.mnrd.us"\n }\n ]\n },\n {\n "type": "http-01",\n "status": "pending",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047209",\n "token": "7BGswSGGvZOsjqVvxaUFXZSCuQp-VFFDshi0Aso19jw"\n }\n ]\n}' 2018-03-25 14:05:45,673:INFO:certbot.auth_handler:Performing the following challenges: 2018-03-25 14:05:45,674:INFO:certbot.auth_handler:dns-01 challenge for mnrd.us 2018-03-25 14:05:45,674:INFO:certbot.auth_handler:dns-01 challenge for www.mnrd.us 2018-03-25 14:05:51,223:INFO:certbot.hooks:Output from certbot_dns.py: [redacted] 2018-03-25 14:05:56,654:INFO:certbot.hooks:Output from certbot_dns.py: [redacted] 2018-03-25 14:05:56,656:INFO:certbot.auth_handler:Waiting for verification... 2018-03-25 14:05:56,657:DEBUG:acme.client:JWS payload: b'{\n "keyAuthorization": "TNmWM9siNmlkBX6eEIYpkgJduGb-9VtT-XKWPiszxBo.qhSCudqIxiDaUZ9HSToe00EJGGhdeUwwrOK3TYKSxx8",\n "resource": "challenge",\n "type": "dns-01"\n}' 2018-03-25 14:05:56,659:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207: { "payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogIlRObVdNOXNpTm1sa0JYNmVFSVlwa2dKZHVHYi05VnRULVhLV1Bpc3p4Qm8ucWhTQ3VkcUl4aURhVVo5SFNUb2UwMEVKR0doZGVVd3dyT0szVFlLU3h4OCIsCiAgInJlc291cmNlIjogImNoYWxsZW5nZSIsCiAgInR5cGUiOiAiZG5zLTAxIgp9", "protected": "eyJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAiWlhEV0wwLXlqV2swRGg2WFpmVHIyMGlyX2VwRzFUdmhFZDRpdnFLdFR1dyIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzU3Nzk4NDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGxlbmdlLzMySC1xM2pQekpLRUdpdWI0dHZmck0yeGtxZUd3VnRVemYxX2NuNDhTNVkvMTExMDQ3MjA3In0", "signature": "K5S4e6c6GQtugMmVsqN-nz2p3gsuCoHQ8fcibHc3oQDlhkxRBv32OcbBF0VxI2X4VEJc9GWoxu64PCDpsfyM1VCdm1b1SbyR4RHbCalrQr4LKKgKZyWrDTcyATxLept8-hBjRWuG4ihQt5W3ElBHRhny1TZryZGKNDUXcZfQVPFXX0j5Ewst1Ex4uYEKsZy0jziPEakuRWI3wgYyVsy1fJHiWc7dAiQ6vBebHjI6ukbNcwp5KBS8NHNcgPosb8whA0BYvzE-SDx885xeR3DjdFYiMaIDNinBJxHNRFJf_ePYIGAc0i-BZUucvGk9XFjxmUemxHw86c8XfIWTfYAopg" } 2018-03-25 14:05:56,797:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207 HTTP/1.1" 200 296 2018-03-25 14:05:56,798:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 296 Boulder-Requester: 5779848 Link: ;rel="up" Location: https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207 Replay-Nonce: LmKVIIjJP9Do3vatx8G5973T_B8hkiu6ynCEU2TgjLk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:56 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:56 GMT Connection: keep-alive b'{\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207",\n "token": "TNmWM9siNmlkBX6eEIYpkgJduGb-9VtT-XKWPiszxBo",\n "validationRecord": [\n {\n "hostname": "mnrd.us"\n }\n ]\n}' 2018-03-25 14:05:56,799:DEBUG:acme.client:Storing nonce: LmKVIIjJP9Do3vatx8G5973T_B8hkiu6ynCEU2TgjLk 2018-03-25 14:05:56,800:DEBUG:acme.client:JWS payload: b'{\n "keyAuthorization": "w8yq7W6kA1a4b0h4whc18i5M6bdy5bX211VPeRbfkFY.qhSCudqIxiDaUZ9HSToe00EJGGhdeUwwrOK3TYKSxx8",\n "resource": "challenge",\n "type": "dns-01"\n}' 2018-03-25 14:05:56,802:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208: { "payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogInc4eXE3VzZrQTFhNGIwaDR3aGMxOGk1TTZiZHk1YlgyMTFWUGVSYmZrRlkucWhTQ3VkcUl4aURhVVo5SFNUb2UwMEVKR0doZGVVd3dyT0szVFlLU3h4OCIsCiAgInJlc291cmNlIjogImNoYWxsZW5nZSIsCiAgInR5cGUiOiAiZG5zLTAxIgp9", "protected": "eyJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAiTG1LVklJakpQOURvM3ZhdHg4RzU5NzNUX0I4aGtpdTZ5bkNFVTJUZ2pMayIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzU3Nzk4NDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGxlbmdlL2JUTXNBMXdrS3RfMl8xWmhFWm1oRFBCYUt3X3d2QmpzS3k0NFAxNnEyR1kvMTExMDQ3MjA4In0", "signature": "Oo0z9A07vPPRSGN09yQzoZYNvvfc3109YODqKw41O5cd1e74FBg1yg4kTBr43KuB1GnUBRGsm19xtV-H-FaeRZtfujkgCKmVP-9jal90KvHHhuIWdX6yrhh5YueXx7TZtW13Zf6cptPmvsIrc4bSzg8C8D0va4pPiEh9RYXSea_fISPVFapTbATHkttwIsjiVoM6ik8ESVsRCVb5_tk6CrHFadFtJTvgB-L3ld_LTKQI4ALMp6meBSvF_EklPm5V-FYcrDy3cq8gKmUU6mtascONHwD9mRBETFek8fTGboyxhS5hHpS0rg7twsVSFkJL3bbKoIUN3lLSvOsrNj6ZbA" } 2018-03-25 14:05:56,879:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208 HTTP/1.1" 200 300 2018-03-25 14:05:56,881:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 300 Boulder-Requester: 5779848 Link: ;rel="up" Location: https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208 Replay-Nonce: _z9PkVmxGKC3AjEgtGpWbWOzMdBmexuLx14eaDZNgEI X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:56 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:56 GMT Connection: keep-alive b'{\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208",\n "token": "w8yq7W6kA1a4b0h4whc18i5M6bdy5bX211VPeRbfkFY",\n "validationRecord": [\n {\n "hostname": "www.mnrd.us"\n }\n ]\n}' 2018-03-25 14:05:56,881:DEBUG:acme.client:Storing nonce: _z9PkVmxGKC3AjEgtGpWbWOzMdBmexuLx14eaDZNgEI 2018-03-25 14:05:59,884:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y. 2018-03-25 14:05:59,954:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /acme/authz/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y HTTP/1.1" 200 745 2018-03-25 14:05:59,955:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 745 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:05:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:05:59 GMT Connection: keep-alive b'{\n "identifier": {\n "type": "dns",\n "value": "mnrd.us"\n },\n "status": "valid",\n "expires": "2018-04-20T19:36:39Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047206",\n "token": "yzgg0Ys0y04SZoaz2-WorFba7_iM5xF2COaL7ABse6Y"\n },\n {\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/32H-q3jPzJKEGiub4tvfrM2xkqeGwVtUzf1_cn48S5Y/111047207",\n "token": "TNmWM9siNmlkBX6eEIYpkgJduGb-9VtT-XKWPiszxBo",\n "validationRecord": [\n {\n "hostname": "mnrd.us"\n }\n ]\n }\n ]\n}' 2018-03-25 14:05:59,956:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY. 2018-03-25 14:06:00,018:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /acme/authz/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY HTTP/1.1" 200 753 2018-03-25 14:06:00,019:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Content-Type: application/json Content-Length: 753 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Sun, 25 Mar 2018 14:06:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:06:00 GMT Connection: keep-alive b'{\n "identifier": {\n "type": "dns",\n "value": "www.mnrd.us"\n },\n "status": "valid",\n "expires": "2018-04-20T19:36:39Z",\n "challenges": [\n {\n "type": "dns-01",\n "status": "valid",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047208",\n "token": "w8yq7W6kA1a4b0h4whc18i5M6bdy5bX211VPeRbfkFY",\n "validationRecord": [\n {\n "hostname": "www.mnrd.us"\n }\n ]\n },\n {\n "type": "http-01",\n "status": "pending",\n "url": "https://acme-staging-v02.api.letsencrypt.org/acme/challenge/bTMsA1wkKt_2_1ZhEZmhDPBaKw_wvBjsKy44P16q2GY/111047209",\n "token": "7BGswSGGvZOsjqVvxaUFXZSCuQp-VFFDshi0Aso19jw"\n }\n ]\n}' 2018-03-25 14:06:00,020:INFO:certbot.auth_handler:Cleaning up challenges 2018-03-25 14:06:00,728:DEBUG:certbot.client:CSR: CSR(file=None, data=b'-----BEGIN CERTIFICATE REQUEST-----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\njIYucNfnVq6/w24=\n-----END CERTIFICATE REQUEST-----\n', form='pem') 2018-03-25 14:06:00,731:DEBUG:acme.client:JWS payload: b'{\n "resource": "new-cert",\n "csr": "MIICdzCCAV8CAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANf6apM5aZlYh1BroXejhp2JwFqCFcY2D5yO8nNrCiN32FN6sOA7R0IipGQp75Mccs-MESYgRsSUwHSB3Q7grak5QIMTaaIfCgAmVaH8QOfSTxLGufKX-bGGtVRcH47fdXKSFsQCgWzxC5y8E4TZIK3DhI68Gkt0-H6UQ5zVbTjT4dg6mCGGlNuoPO3cXn408bhULk26jm3_UqRyuASPw_Ry54T4gKapNxX__3V3TV5LMqg8cC6t6q_brCsYXE8th75sNUr04fIQe_l8ErHcjhPtYZQIBdHSRCYdHxC_gbGh9M7-PVcMAHbOJVN6rI1FgpkdjInrLzjmzmM0JlY6S28CAwEAAaAyMDAGCSqGSIb3DQEJDjEjMCEwHwYDVR0RBBgwFoIHbW5yZC51c4ILd3d3Lm1ucmQudXMwDQYJKoZIhvcNAQELBQADggEBAB8h9PWsDhm-f1u8fX0L2K88O-DIRdbdLM8JXl0w9jq073BdzqLvrVxrMIcmYJxMvuOJSA8XQijVkAkBlnBiND7VNY20eYiZInxKKPf2XlX-MHndwo1CvJTLo0f7oPZNzMV5sSyBrCrMSXIl8CGNnA2K3GEjIxAK7jmZzbu63qaHx548qkazaMlnAClzmQjvcYKbVdTLlxM6Nq9SQSVwnBRWPPi39vZNIBk5viqyfz3geH9grgeAyPorkkIrIWulfWvirC14XSmoROs9y78ZvdgzQL7bUI6QgkrXiSZBj8U8LebTW4-uX_QBaH6mOchkBRaKSHYFjIYucNfnVq6_w24"\n}' 2018-03-25 14:06:00,735:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/finalize/5779848/136479: { "payload": "ewogICJyZXNvdXJjZSI6ICJuZXctY2VydCIsCiAgImNzciI6ICJNSUlDZHpDQ0FWOENBUUl3QURDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTmY2YXBNNWFabFloMUJyb1hlamhwMkp3RnFDRmNZMkQ1eU84bk5yQ2lOMzJGTjZzT0E3UjBJaXBHUXA3NU1jY3MtTUVTWWdSc1NVd0hTQjNRN2dyYWs1UUlNVGFhSWZDZ0FtVmFIOFFPZlNUeExHdWZLWC1iR0d0VlJjSDQ3ZmRYS1NGc1FDZ1d6eEM1eThFNFRaSUszRGhJNjhHa3QwLUg2VVE1elZiVGpUNGRnNm1DR0dsTnVvUE8zY1huNDA4YmhVTGsyNmptM19VcVJ5dUFTUHdfUnk1NFQ0Z0thcE54WF9fM1YzVFY1TE1xZzhjQzZ0NnFfYnJDc1lYRTh0aDc1c05VcjA0ZklRZV9sOEVySGNqaFB0WVpRSUJkSFNSQ1lkSHhDX2diR2g5TTctUFZjTUFIYk9KVk42ckkxRmdwa2RqSW5yTHpqbXptTTBKbFk2UzI4Q0F3RUFBYUF5TURBR0NTcUdTSWIzRFFFSkRqRWpNQ0V3SHdZRFZSMFJCQmd3Rm9JSGJXNXlaQzUxYzRJTGQzZDNMbTF1Y21RdWRYTXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBQjhoOVBXc0RobS1mMXU4ZlgwTDJLODhPLURJUmRiZExNOEpYbDB3OWpxMDczQmR6cUx2clZ4ck1JY21ZSnhNdnVPSlNBOFhRaWpWa0FrQmxuQmlORDdWTlkyMGVZaVpJbnhLS1BmMlhsWC1NSG5kd28xQ3ZKVExvMGY3b1BaTnpNVjVzU3lCckNyTVNYSWw4Q0dObkEySzNHRWpJeEFLN2ptWnpidTYzcWFIeDU0OHFrYXphTWxuQUNsem1RanZjWUtiVmRUTGx4TTZOcTlTUVNWd25CUldQUGkzOXZaTklCazV2aXF5ZnozZ2VIOWdyZ2VBeVBvcmtrSXJJV3VsZld2aXJDMTRYU21vUk9zOXk3OFp2ZGd6UUw3YlVJNlFna3JYaVNaQmo4VThMZWJUVzQtdVhfUUJhSDZtT2Noa0JSYUtTSFlGaklZdWNOZm5WcTZfdzI0Igp9", "protected": "eyJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAiX3o5UGtWbXhHS0MzQWpFZ3RHcFdiV096TWRCbWV4dUx4MTRlYURaTmdFSSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzU3Nzk4NDgiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvZmluYWxpemUvNTc3OTg0OC8xMzY0NzkifQ", "signature": "ijWklIOCr7gElY1Rj3arWGiIJBWulqQQm5OqqRR_N-gFIDG3XtjqHvAYmi3mNwyFT1V2SkL-5GDSKNPQVAjHXF0ji1aj20esywrK14N7piEbNpU0btYK0O_TUjYUExYGXakX39NWFAQEu492uxs7TRAkRKsvDKaSxjVbqyFUhzlgKfOvRpODSMucb54sWuzbXUsI0rTv6llivQ3kUA2lWpEWbA1HIds4BmzH1lD95EUdoxbJxSxdND_8CNcm3WVgfK6WTZ5CDATlfcUNvE_E9edYC9NTKYuEuF8Ffv1TRkGy2leB6jInMZ5NA_GCLX3EKLionCZbyXRo8O8qFWKscA" } 2018-03-25 14:06:02,693:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/finalize/5779848/136479 HTTP/1.1" 500 112 2018-03-25 14:06:02,694:DEBUG:acme.client:Received response: HTTP 500 Server: nginx Content-Type: application/problem+json Content-Length: 112 Boulder-Requester: 5779848 Replay-Nonce: s-mL7_1IPKWZyEu5g75x77MKoOEagaUY5lxuksFiFc8 Expires: Sun, 25 Mar 2018 14:06:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 25 Mar 2018 14:06:02 GMT Connection: close b'{\n "type": "urn:ietf:params:acme:error:serverInternal",\n "detail": "Error finalizing order",\n "status": 500\n}' 2018-03-25 14:06:02,694:DEBUG:acme.client:Storing nonce: s-mL7_1IPKWZyEu5g75x77MKoOEagaUY5lxuksFiFc8 2018-03-25 14:06:02,695:WARNING:certbot.renewal:Attempting to renew cert (mnrd.us) from /etc/letsencrypt/renewal/mnrd.us.conf produced an unexpected error: urn:ietf:params:acme:error:serverInternal :: The server experienced an internal error :: Error finalizing order. Skipping. 2018-03-25 14:06:02,701:DEBUG:certbot.renewal:Traceback was: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 422, in handle_renewal_request main.renew_cert(lineage_config, plugins, renewal_candidate) File "/usr/lib/python3/dist-packages/certbot/main.py", line 1102, in renew_cert _get_and_save_cert(le_client, config, lineage=lineage) File "/usr/lib/python3/dist-packages/certbot/main.py", line 113, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 297, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains) File "/usr/lib/python3/dist-packages/certbot/client.py", line 310, in obtain_certificate cert, chain = self.obtain_certificate_from_csr(csr, orderr) File "/usr/lib/python3/dist-packages/certbot/client.py", line 265, in obtain_certificate_from_csr orderr = self.acme.finalize_order(orderr, deadline) File "/usr/lib/python3/dist-packages/acme/client.py", line 817, in finalize_order return self.client.finalize_order(orderr, deadline) File "/usr/lib/python3/dist-packages/acme/client.py", line 671, in finalize_order self._post(orderr.body.finalize, wrapped_csr) File "/usr/lib/python3/dist-packages/acme/client.py", line 90, in _post return self.net.post(*args, **kwargs) File "/usr/lib/python3/dist-packages/acme/client.py", line 1069, in post return self._post_once(*args, **kwargs) File "/usr/lib/python3/dist-packages/acme/client.py", line 1083, in _post_once return self._check_response(response, content_type=content_type) File "/usr/lib/python3/dist-packages/acme/client.py", line 943, in _check_response raise messages.Error.from_json(jobj) acme.messages.Error: urn:ietf:params:acme:error:serverInternal :: The server experienced an internal error :: Error finalizing order [redacted]