2025-12-24 21:21:30,609:DEBUG:certbot._internal.main:certbot version: 5.1.0
2025-12-24 21:21:30,609:DEBUG:certbot._internal.main:Location of certbot entry point: /opt/certbot/bin/certbot
2025-12-24 21:21:30,610:DEBUG:certbot._internal.main:Arguments: ['--config', '/etc/letsencrypt.ini', '--work-dir', '/tmp/letsencrypt-lib', '--logs-dir', '/data/logs', '--cert-name', 'npm-2', '--agree-tos', '--authenticator', 'webroot', '-m', 'kincses@gmail.com', '--preferred-challenges', 'http', '--domains', 'dev.profibot.hu']
2025-12-24 21:21:30,610:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2025-12-24 21:21:30,621:DEBUG:certbot._internal.log:Root logging level set at 30
2025-12-24 21:21:30,622:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2025-12-24 21:21:30,622:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7a3df40570d0>
Prep: True
2025-12-24 21:21:30,622:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7a3df40570d0> and installer None
2025-12-24 21:21:30,622:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2025-12-24 21:21:30,668:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/2906438176', new_authzr_uri=None, terms_of_service=None), e417a583de478a0cfdeed332c1113068, Meta(creation_dt=datetime.datetime(2025, 12, 24, 20, 49, 55, tzinfo=datetime.timezone.utc), creation_host='c6fe500e2aae', register_to_eff=None))>
2025-12-24 21:21:30,668:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2025-12-24 21:21:30,670:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2025-12-24 21:21:31,147:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 1033
2025-12-24 21:21:31,148:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Wed, 24 Dec 2025 21:21:31 GMT
Content-Type: application/json
Content-Length: 1033
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "Jjy9QrlGvGk": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "profiles": {
      "classic": "https://letsencrypt.org/docs/profiles#classic",
      "shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
      "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
      "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
    },
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2025-12-24 21:21:31,157:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for dev.profibot.hu
2025-12-24 21:21:31,171:DEBUG:acme.client:Requesting fresh nonce
2025-12-24 21:21:31,172:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2025-12-24 21:21:31,327:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2025-12-24 21:21:31,328:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Wed, 24 Dec 2025 21:21:31 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 58tS3qjEuVmUQFJ48dXZKrJCcvzAA6_fm_Rp1FqtWhIe7bnFgPw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2025-12-24 21:21:31,328:DEBUG:acme.client:Storing nonce: 58tS3qjEuVmUQFJ48dXZKrJCcvzAA6_fm_Rp1FqtWhIe7bnFgPw
2025-12-24 21:21:31,328:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "dev.profibot.hu"\n    }\n  ]\n}'
2025-12-24 21:21:31,341:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkwNjQzODE3NiIsICJub25jZSI6ICI1OHRTM3FqRXVWbVVRRko0OGRYWktySkNjdnpBQTZfZm1fUnAxRnF0V2hJZTdibkZnUHciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
  "signature": "E3NOywYUuc0vnsf-7hmjZ_ggVC72zd29KZZDgpmugsp6UIvp4Knq8zBclwD0W2RGbYem3i63MXXWzgNbj2puJFQqPKSD079jGqR27qApJbmaKOK10yAHxgjG0-fiVHIVTLn-PEbhubX-WxH7dkGkUfo6jBhy_yFi0ZK0k3aLGrsDAvR78lDveM7CP9G3viE2fa2hI4_JEpzETINERuewCgTr58xBryAG7fHGrGCOFnZDC7KBBIkHZ8EFkJqzpyFgdLHDYJ-HtFE8M2fiOby5vdGnyWcNFXdZFvVqEt-p3cIwtvDXBwAL6hVwLrXq-B01xr84MqsfB3RE18zMYam4ig",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImRldi5wcm9maWJvdC5odSIKICAgIH0KICBdCn0"
}
2025-12-24 21:21:31,673:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 349
2025-12-24 21:21:31,673:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Wed, 24 Dec 2025 21:21:31 GMT
Content-Type: application/json
Content-Length: 349
Connection: keep-alive
Boulder-Requester: 2906438176
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/2906438176/462324452966
Replay-Nonce: 58tS3qjEliVwndrn6E2BxW6Lb7OyzUK_Jzl7wNIrtvpTMkPgxTo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2025-12-31T21:21:31Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "dev.profibot.hu"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz/2906438176/632517542506"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/2906438176/462324452966"
}
2025-12-24 21:21:31,673:DEBUG:acme.client:Storing nonce: 58tS3qjEliVwndrn6E2BxW6Lb7OyzUK_Jzl7wNIrtvpTMkPgxTo
2025-12-24 21:21:31,674:DEBUG:acme.client:JWS payload:
b''
2025-12-24 21:21:31,677:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2906438176/632517542506:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkwNjQzODE3NiIsICJub25jZSI6ICI1OHRTM3FqRWxpVnduZHJuNkUyQnhXNkxiN095elVLX0p6bDd3TklydHZwVE1rUGd4VG8iLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MDY0MzgxNzYvNjMyNTE3NTQyNTA2In0",
  "signature": "fzuL8PNxCmdszwkla-0uKjB5jeVNVLhedrjMKspWXjEWJU3RsH9NzN3JOgB1Qs4xD7TVbcHQxOWjb_BDGXcLcE6Uk5rPPv-D5BieTvJkIQ8y0fimxY6JJLjThJ0bN0tgas2uBhhyiU3uvBkBUkFzdAZaA4Fn5Y2qy6e9BRODKjeG0pyv3LaTrRoPn9cz4bKA77fJ5zFaHj-kzgYlw8OiaYcUjcZbr7Chn00bheuqKdaOS1Pieg_pAnoJkN2uEAty3JJl33nb2Ws0XJBJ8iVWAe4KgNQPTtF11KfNmEEj9DBCrTdsC2axyKaOnYwRA9FTmjeeRjAWyxFO5_rITT2Fkg",
  "payload": ""
}
2025-12-24 21:21:31,835:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2906438176/632517542506 HTTP/1.1" 200 823
2025-12-24 21:21:31,836:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Wed, 24 Dec 2025 21:21:31 GMT
Content-Type: application/json
Content-Length: 823
Connection: keep-alive
Boulder-Requester: 2906438176
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 58tS3qjEQW_ZsNE1cRFjPmi98oNWyZJAwXLjFjwLBvUQT1hB8Hk
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "dev.profibot.hu"
  },
  "status": "pending",
  "expires": "2025-12-31T21:21:31Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/daSokg",
      "status": "pending",
      "token": "hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE"
    },
    {
      "type": "dns-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/O7D10A",
      "status": "pending",
      "token": "hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/3brn_Q",
      "status": "pending",
      "token": "hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE"
    }
  ]
}
2025-12-24 21:21:31,836:DEBUG:acme.client:Storing nonce: 58tS3qjEQW_ZsNE1cRFjPmi98oNWyZJAwXLjFjwLBvUQT1hB8Hk
2025-12-24 21:21:31,837:DEBUG:acme.challenges:tls-alpn-01 was not recognized, full message: {'type': 'tls-alpn-01', 'url': 'https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/3brn_Q', 'status': 'pending', 'token': 'hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE'}
2025-12-24 21:21:31,838:INFO:certbot._internal.auth_handler:Performing the following challenges:
2025-12-24 21:21:31,838:INFO:certbot._internal.auth_handler:http-01 challenge for dev.profibot.hu
2025-12-24 21:21:31,839:INFO:certbot._internal.plugins.webroot:Using the webroot path /data/letsencrypt-acme-challenge for all unmatched domains.
2025-12-24 21:21:31,839:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /data/letsencrypt-acme-challenge/.well-known/acme-challenge
2025-12-24 21:21:31,848:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /data/letsencrypt-acme-challenge/.well-known/acme-challenge/hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE
2025-12-24 21:21:31,849:DEBUG:acme.client:JWS payload:
b'{}'
2025-12-24 21:21:31,852:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/daSokg:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkwNjQzODE3NiIsICJub25jZSI6ICI1OHRTM3FqRVFXX1pzTkUxY1JGalBtaTk4b05XeVpKQXdYTGpGandMQnZVUVQxaEI4SGsiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI5MDY0MzgxNzYvNjMyNTE3NTQyNTA2L2RhU29rZyJ9",
  "signature": "jw8w89RyC3oknflMH8mH_VjSDOJtSxNAwyqTTybDq7zybeAzvr-g7-pjXeLbVi3BX3iETBh57Jnk_t6EZkcToTEDHfupHTWeUIRQmtvnypetJJa8lu2Xm-A7_DenRSRJxRU-2EhsFSKV8eoteLbJF8QG2MLAPyWnduEXER2qp6K2JH_AjJa-w3wGLVumSYh2dlfiWfqaF-JyLG8gihFWNC7FnKtJNm3LAd_g7aTjVwEwUOiDe2fDfvEdfiTG3DPqfDWp_ukw480SXBRHC1yYhOX3rkvAFYGvV30gYg3zqFnNmVdPFSGtY7TKGb4PJgl8VO3e87hOP6PWCD93XTYs1g",
  "payload": "e30"
}
2025-12-24 21:21:32,011:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall/2906438176/632517542506/daSokg HTTP/1.1" 200 195
2025-12-24 21:21:32,012:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Wed, 24 Dec 2025 21:21:31 GMT
Content-Type: application/json
Content-Length: 195
Connection: keep-alive
Boulder-Requester: 2906438176
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz/2906438176/632517542506>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/daSokg
Replay-Nonce: 58tS3qjESXYq-7REFTf9TBKNRi69JoFW4obdwK9tOA45ZJLHGMA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/daSokg",
  "status": "pending",
  "token": "hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE"
}
2025-12-24 21:21:32,012:DEBUG:acme.client:Storing nonce: 58tS3qjESXYq-7REFTf9TBKNRi69JoFW4obdwK9tOA45ZJLHGMA
2025-12-24 21:21:32,013:INFO:certbot._internal.auth_handler:Waiting for verification...
2025-12-24 21:21:33,014:DEBUG:acme.client:JWS payload:
b''
2025-12-24 21:21:33,018:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz/2906438176/632517542506:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjkwNjQzODE3NiIsICJub25jZSI6ICI1OHRTM3FqRVNYWXEtN1JFRlRmOVRCS05SaTY5Sm9GVzRvYmR3Szl0T0E0NVpKTEhHTUEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzI5MDY0MzgxNzYvNjMyNTE3NTQyNTA2In0",
  "signature": "NJ15FCDtT8mqJNv2ue4xVnzUiOQUF8snHTl3UfvHE7I2FIoKc57Qy8adoqylHHgIkH_ascVg93gbyl9I43p8alqwzF6VUYFdRDY2dHrILRRUgadOk9BY_r-mUO11byhzmfyt_t2pBKd7vomBDhUJaeo9jxM_y5H43o5WvIA4fB72c7s2Fi6O6b0_4zL9VvxxqCzZaC_B4znRCaW0oIFflw9UvZLO_aDRSB4MQJr2RSxRQaZ32wUGeHVjrdHArNajrrZtPK0KJs6Cuj8IvdH8jhAAMFCEW7hT0fK2yjnNeYHWAQD6bk8xyuqSYLx1-UwU5tu3TIezDuQowZTtOw6A1Q",
  "payload": ""
}
2025-12-24 21:21:33,174:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz/2906438176/632517542506 HTTP/1.1" 200 752
2025-12-24 21:21:33,175:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Wed, 24 Dec 2025 21:21:33 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Boulder-Requester: 2906438176
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 58tS3qjEQMMhUxPtHld6Bw9adr5ebPs-smHXj6yFzhk9ColtEvg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "dev.profibot.hu"
  },
  "status": "invalid",
  "expires": "2025-12-31T21:21:31Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2906438176/632517542506/daSokg",
      "status": "invalid",
      "validated": "2025-12-24T21:21:31Z",
      "error": {
        "type": "urn:ietf:params:acme:error:dns",
        "detail": "DNS problem: NXDOMAIN looking up A for dev.profibot.hu - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for dev.profibot.hu - check that a DNS record exists for this domain",
        "status": 400
      },
      "token": "hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE"
    }
  ]
}
2025-12-24 21:21:33,175:DEBUG:acme.client:Storing nonce: 58tS3qjEQMMhUxPtHld6Bw9adr5ebPs-smHXj6yFzhk9ColtEvg
2025-12-24 21:21:33,176:INFO:certbot._internal.auth_handler:Challenge failed for domain dev.profibot.hu
2025-12-24 21:21:33,176:INFO:certbot._internal.auth_handler:http-01 challenge for dev.profibot.hu
2025-12-24 21:21:33,176:DEBUG:certbot._internal.display.obj:Notifying user: 
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
  Domain: dev.profibot.hu
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up A for dev.profibot.hu - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for dev.profibot.hu - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

2025-12-24 21:21:33,185:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/auth_handler.py", line 104, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/auth_handler.py", line 208, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.

2025-12-24 21:21:33,186:DEBUG:certbot._internal.error_handler:Calling registered functions
2025-12-24 21:21:33,186:INFO:certbot._internal.auth_handler:Cleaning up challenges
2025-12-24 21:21:33,186:DEBUG:certbot._internal.plugins.webroot:Removing /data/letsencrypt-acme-challenge/.well-known/acme-challenge/hV2I34lK51uE2EOPh9Lrn6F1CJZWOyPiAElHBAg1pJE
2025-12-24 21:21:33,187:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2025-12-24 21:21:33,188:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/opt/certbot/bin/certbot", line 7, in <module>
    sys.exit(main())
             ^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/main.py", line 18, in main
    return internal_main.main(cli_args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/main.py", line 1850, in main
    return config.func(config, plugins)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/main.py", line 1562, in certonly
    lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/main.py", line 141, in _get_and_save_cert
    lineage = le_client.obtain_and_enroll_certificate(domains, certname)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/client.py", line 526, in obtain_and_enroll_certificate
    cert, chain, key, _ = self.obtain_certificate(domains)
                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/client.py", line 427, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/client.py", line 505, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/auth_handler.py", line 104, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/opt/certbot/lib/python3.11/site-packages/certbot/_internal/auth_handler.py", line 208, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2025-12-24 21:21:33,196:ERROR:certbot._internal.log:Some challenges have failed.
