2023-11-20 09:51:38,688:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-20 09:51:38,689:DEBUG:certbot.main:Arguments: ['-q']
2023-11-20 09:51:38,690:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-20 09:51:38,707:DEBUG:certbot.log:Root logging level set at 30
2023-11-20 09:51:38,708:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-20 09:51:38,724:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f482bb48358> and installer <certbot.cli._Default object at 0x7f482bb48358>
2023-11-20 09:51:38,724:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f482bb2c320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f482bb2c160>, apache=<certbot.cli._Default object at 0x7f482bb485f8>, authenticator=<certbot.cli._Default object at 0x7f482bb48358>, break_my_certs=<certbot.cli._Default object at 0x7f482bb215c0>, cert_path=<certbot.cli._Default object at 0x7f482bb46be0>, certname=<certbot.cli._Default object at 0x7f482bb21668>, chain_path=<certbot.cli._Default object at 0x7f482bb46e80>, checkpoints=<certbot.cli._Default object at 0x7f482bb46710>, config_dir=<certbot.cli._Default object at 0x7f482bb46f60>, config_file=None, configurator=<certbot.cli._Default object at 0x7f482bb48358>, csr=<certbot.cli._Default object at 0x7f482bb46358>, debug=<certbot.cli._Default object at 0x7f482bb2c978>, debug_challenges=<certbot.cli._Default object at 0x7f482bb2ca90>, delete_after_revoke=<certbot.cli._Default object at 0x7f482bb46550>, deploy_hook=<certbot.cli._Default object at 0x7f482bb2cc18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f482bb2cdd8>, dns_cloudflare=<certbot.cli._Default object at 0x7f482bb48b38>, dns_cloudxns=<certbot.cli._Default object at 0x7f482bb48c18>, dns_digitalocean=<certbot.cli._Default object at 0x7f482bb48cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f482bb48dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f482bb48eb8>, dns_google=<certbot.cli._Default object at 0x7f482bb48f98>, dns_luadns=<certbot.cli._Default object at 0x7f482bb4a0b8>, dns_nsone=<certbot.cli._Default object at 0x7f482bb4a198>, dns_rfc2136=<certbot.cli._Default object at 0x7f482bb4a278>, dns_route53=<certbot.cli._Default object at 0x7f482bb4a358>, domains=<certbot.cli._Default object at 0x7f482bb217b8>, dry_run=<certbot.cli._Default object at 0x7f482bb21518>, duplicate=<certbot.cli._Default object at 0x7f482bb2c438>, eff_email=<certbot.cli._Default object at 0x7f482bb19f60>, email=<certbot.cli._Default object at 0x7f482bb210f0>, expand=<certbot.cli._Default object at 0x7f482bb19b00>, force_interactive=<certbot.cli._Default object at 0x7f482bb21908>, fullchain_path=<certbot.cli._Default object at 0x7f482bb46da0>, func=<function renew at 0x7f482bc282f0>, hsts=<certbot.cli._Default object at 0x7f482bb297f0>, http01_address=<certbot.cli._Default object at 0x7f482bb212e8>, http01_port=<certbot.cli._Default object at 0x7f482bb19f28>, ifaces=<certbot.cli._Default object at 0x7f482bb46a20>, init=<certbot.cli._Default object at 0x7f482bb467f0>, installer=<certbot.cli._Default object at 0x7f482bb48358>, key_path=<certbot.cli._Default object at 0x7f482bb46cc0>, logs_dir=<certbot.cli._Default object at 0x7f482bb48160>, manual=<certbot.cli._Default object at 0x7f482bb48908>, manual_auth_hook=<certbot.cli._Default object at 0x7f482bb4a470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f482bb4a550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f482bb4a630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f482bb21b00>, nginx=<certbot.cli._Default object at 0x7f482bb48710>, nginx_ctl=<certbot.cli._Default object at 0x7f482bb4a7f0>, nginx_server_root=<certbot.cli._Default object at 0x7f482bb4a438>, no_bootstrap=<certbot.cli._Default object at 0x7f482bb2c6d8>, no_self_upgrade=<certbot.cli._Default object at 0x7f482bb2c5f8>, no_verify_ssl=<certbot.cli._Default object at 0x7f482bb19518>, noninteractive_mode=<certbot.cli._Default object at 0x7f482bb21a58>, num=<certbot.cli._Default object at 0x7f482bb46080>, os_packages_only=<certbot.cli._Default object at 0x7f482bb2c518>, post_hook=<certbot.cli._Default object at 0x7f482bb2c2e8>, pre_hook=<certbot.cli._Default object at 0x7f482bb2c4e0>, pref_challs=<certbot.cli._Default object at 0x7f482bb2c6a0>, prepare=<certbot.cli._Default object at 0x7f482bb46908>, quiet=True, reason=<certbot.cli._Default object at 0x7f482bb46470>, redirect=<certbot.cli._Default object at 0x7f482bb21da0>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f482bb21390>, reinstall=<certbot.cli._Default object at 0x7f482bb19cc0>, renew_by_default=<certbot.cli._Default object at 0x7f482bb194a8>, renew_hook=<certbot.cli._Default object at 0x7f482bb2cb38>, renew_with_new_domains=<certbot.cli._Default object at 0x7f482bb196a0>, rsa_key_size=<certbot.cli._Default object at 0x7f482bb21860>, server=<certbot.cli._Default object at 0x7f482bb48240>, staging=<certbot.cli._Default object at 0x7f482bb2c898>, standalone=<certbot.cli._Default object at 0x7f482bb48828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f482bb4a8d0>, staple=<certbot.cli._Default object at 0x7f482bb29e10>, strict_permissions=<certbot.cli._Default object at 0x7f482bb2c860>, text_mode=<certbot.cli._Default object at 0x7f482bb21cf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f482bb19d68>, tls_sni_01_port=<certbot.cli._Default object at 0x7f482bb19978>, tos=<certbot.cli._Default object at 0x7f482bb2c048>, uir=<certbot.cli._Default object at 0x7f482bb299b0>, update_registration=<certbot.cli._Default object at 0x7f482bb21240>, user_agent=<certbot.cli._Default object at 0x7f482bb46198>, user_agent_comment=<certbot.cli._Default object at 0x7f482bb461d0>, validate_hooks=<certbot.cli._Default object at 0x7f482bb2ccf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f482bb21e48>, webroot=<certbot.cli._Default object at 0x7f482bb48a20>, webroot_map=<certbot.cli._Default object at 0x7f482bb4aa90>, webroot_path=<certbot.cli._Default object at 0x7f482bb4a710>, work_dir=<certbot.cli._Default object at 0x7f482bb48080>)
2023-11-20 09:51:38,745:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-20 09:51:38,745:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-20 09:51:38,746:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-20 09:51:39,080:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f482bb46b70>
Prep: True
2023-11-20 09:51:39,086:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f482bb46b70>
Prep: True
2023-11-20 09:51:39,087:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f482bb46b70> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f482bb46b70>
2023-11-20 09:51:39,087:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-20 09:51:39,094:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', body=Registration(agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None, contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f482baac5f8>)>)), terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-20 09:51:39,097:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-20 09:51:39,103:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-20 09:51:39,108:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f482bac36a0>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-20 09:51:39,114:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f482bac36a0>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f482bac36a0>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f482bac36a0>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-20 09:51:39,115:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-20 09:51:39,115:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-20 09:51:39,115:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-20 21:49:43,297:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-20 21:49:43,300:DEBUG:certbot.main:Arguments: ['-q']
2023-11-20 21:49:43,301:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-20 21:49:43,323:DEBUG:certbot.log:Root logging level set at 30
2023-11-20 21:49:43,325:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-20 21:49:43,345:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7ff211507438> and installer <certbot.cli._Default object at 0x7ff211507438>
2023-11-20 21:49:43,345:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7ff2114eb470>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7ff2114eb2b0>, apache=<certbot.cli._Default object at 0x7ff2115076d8>, authenticator=<certbot.cli._Default object at 0x7ff211507438>, break_my_certs=<certbot.cli._Default object at 0x7ff2114e0da0>, cert_path=<certbot.cli._Default object at 0x7ff211505cc0>, certname=<certbot.cli._Default object at 0x7ff2114e0320>, chain_path=<certbot.cli._Default object at 0x7ff211505f60>, checkpoints=<certbot.cli._Default object at 0x7ff2115057f0>, config_dir=<certbot.cli._Default object at 0x7ff211507080>, config_file=None, configurator=<certbot.cli._Default object at 0x7ff211507438>, csr=<certbot.cli._Default object at 0x7ff211505438>, debug=<certbot.cli._Default object at 0x7ff2114d8898>, debug_challenges=<certbot.cli._Default object at 0x7ff2114d8ba8>, delete_after_revoke=<certbot.cli._Default object at 0x7ff211505630>, deploy_hook=<certbot.cli._Default object at 0x7ff2114ebcf8>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7ff2114ebeb8>, dns_cloudflare=<certbot.cli._Default object at 0x7ff211507c18>, dns_cloudxns=<certbot.cli._Default object at 0x7ff211507cf8>, dns_digitalocean=<certbot.cli._Default object at 0x7ff211507dd8>, dns_dnsimple=<certbot.cli._Default object at 0x7ff211507eb8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7ff211507f98>, dns_google=<certbot.cli._Default object at 0x7ff2115090b8>, dns_luadns=<certbot.cli._Default object at 0x7ff211509198>, dns_nsone=<certbot.cli._Default object at 0x7ff211509278>, dns_rfc2136=<certbot.cli._Default object at 0x7ff211509358>, dns_route53=<certbot.cli._Default object at 0x7ff211509438>, domains=<certbot.cli._Default object at 0x7ff2114e0470>, dry_run=<certbot.cli._Default object at 0x7ff2114e01d0>, duplicate=<certbot.cli._Default object at 0x7ff2114eb588>, eff_email=<certbot.cli._Default object at 0x7ff2114d8ac8>, email=<certbot.cli._Default object at 0x7ff2114d8d30>, expand=<certbot.cli._Default object at 0x7ff2114d86a0>, force_interactive=<certbot.cli._Default object at 0x7ff2114e05c0>, fullchain_path=<certbot.cli._Default object at 0x7ff211505e80>, func=<function renew at 0x7ff2115e72f0>, hsts=<certbot.cli._Default object at 0x7ff2114e8ba8>, http01_address=<certbot.cli._Default object at 0x7ff2114e09b0>, http01_port=<certbot.cli._Default object at 0x7ff2114e0710>, ifaces=<certbot.cli._Default object at 0x7ff211505b00>, init=<certbot.cli._Default object at 0x7ff2115058d0>, installer=<certbot.cli._Default object at 0x7ff211507438>, key_path=<certbot.cli._Default object at 0x7ff211505da0>, logs_dir=<certbot.cli._Default object at 0x7ff211507240>, manual=<certbot.cli._Default object at 0x7ff2115079e8>, manual_auth_hook=<certbot.cli._Default object at 0x7ff211509550>, manual_cleanup_hook=<certbot.cli._Default object at 0x7ff211509630>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7ff211509710>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7ff2114e8438>, nginx=<certbot.cli._Default object at 0x7ff2115077f0>, nginx_ctl=<certbot.cli._Default object at 0x7ff2115098d0>, nginx_server_root=<certbot.cli._Default object at 0x7ff211509518>, no_bootstrap=<certbot.cli._Default object at 0x7ff2114eb828>, no_self_upgrade=<certbot.cli._Default object at 0x7ff2114eb748>, no_verify_ssl=<certbot.cli._Default object at 0x7ff2114d8e80>, noninteractive_mode=<certbot.cli._Default object at 0x7ff2114e0748>, num=<certbot.cli._Default object at 0x7ff211505160>, os_packages_only=<certbot.cli._Default object at 0x7ff2114eb668>, post_hook=<certbot.cli._Default object at 0x7ff2114ebb38>, pre_hook=<certbot.cli._Default object at 0x7ff2114eba58>, pref_challs=<certbot.cli._Default object at 0x7ff2114eb0b8>, prepare=<certbot.cli._Default object at 0x7ff2115059e8>, quiet=True, reason=<certbot.cli._Default object at 0x7ff211505550>, redirect=<certbot.cli._Default object at 0x7ff2114e8630>, register_unsafely_without_email=<certbot.cli._Default object at 0x7ff2114d8fd0>, reinstall=<certbot.cli._Default object at 0x7ff2114d87f0>, renew_by_default=<certbot.cli._Default object at 0x7ff2114eb0f0>, renew_hook=<certbot.cli._Default object at 0x7ff2114ebc18>, renew_with_new_domains=<certbot.cli._Default object at 0x7ff2114eb1d0>, rsa_key_size=<certbot.cli._Default object at 0x7ff2114e8240>, server=<certbot.cli._Default object at 0x7ff211507320>, staging=<certbot.cli._Default object at 0x7ff2114d8630>, standalone=<certbot.cli._Default object at 0x7ff211507908>, standalone_supported_challenges=<certbot.cli._Default object at 0x7ff2115099b0>, staple=<certbot.cli._Default object at 0x7ff2114eb5f8>, strict_permissions=<certbot.cli._Default object at 0x7ff2114eb240>, text_mode=<certbot.cli._Default object at 0x7ff2114e09e8>, tls_sni_01_address=<certbot.cli._Default object at 0x7ff2114e0438>, tls_sni_01_port=<certbot.cli._Default object at 0x7ff2114e0198>, tos=<certbot.cli._Default object at 0x7ff2114eb390>, uir=<certbot.cli._Default object at 0x7ff2114e8fd0>, update_registration=<certbot.cli._Default object at 0x7ff2114d8eb8>, user_agent=<certbot.cli._Default object at 0x7ff211505278>, user_agent_comment=<certbot.cli._Default object at 0x7ff2115052b0>, validate_hooks=<certbot.cli._Default object at 0x7ff2114ebdd8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7ff2114e0b38>, webroot=<certbot.cli._Default object at 0x7ff211507b00>, webroot_map=<certbot.cli._Default object at 0x7ff211509b70>, webroot_path=<certbot.cli._Default object at 0x7ff2115097f0>, work_dir=<certbot.cli._Default object at 0x7ff211507160>)
2023-11-20 21:49:43,375:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-20 21:49:43,375:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-20 21:49:43,376:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-20 21:49:43,782:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7ff211505ef0>
Prep: True
2023-11-20 21:49:43,789:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7ff211505ef0>
Prep: True
2023-11-20 21:49:43,790:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7ff211505ef0> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7ff211505ef0>
2023-11-20 21:49:43,790:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-20 21:49:43,801:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7ff211469550>)>), status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_host='Ubuntu-1604-xenial-64-minimal', creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>)))>
2023-11-20 21:49:43,806:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-20 21:49:43,813:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-20 21:49:43,820:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7ff2114825f8>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-20 21:49:43,830:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7ff2114825f8>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7ff2114825f8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7ff2114825f8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-20 21:49:43,831:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-20 21:49:43,832:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-20 21:49:43,832:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-21 09:07:57,771:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-21 09:07:57,772:DEBUG:certbot.main:Arguments: ['-q']
2023-11-21 09:07:57,773:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-21 09:07:57,791:DEBUG:certbot.log:Root logging level set at 30
2023-11-21 09:07:57,793:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-21 09:07:57,808:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f2d466f5358> and installer <certbot.cli._Default object at 0x7f2d466f5358>
2023-11-21 09:07:57,808:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f2d466d9320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f2d466d9160>, apache=<certbot.cli._Default object at 0x7f2d466f55f8>, authenticator=<certbot.cli._Default object at 0x7f2d466f5358>, break_my_certs=<certbot.cli._Default object at 0x7f2d466ce470>, cert_path=<certbot.cli._Default object at 0x7f2d466f3be0>, certname=<certbot.cli._Default object at 0x7f2d466ce668>, chain_path=<certbot.cli._Default object at 0x7f2d466f3e80>, checkpoints=<certbot.cli._Default object at 0x7f2d466f3710>, config_dir=<certbot.cli._Default object at 0x7f2d466f3f60>, config_file=None, configurator=<certbot.cli._Default object at 0x7f2d466f5358>, csr=<certbot.cli._Default object at 0x7f2d466f3358>, debug=<certbot.cli._Default object at 0x7f2d466d9978>, debug_challenges=<certbot.cli._Default object at 0x7f2d466d9a90>, delete_after_revoke=<certbot.cli._Default object at 0x7f2d466f3550>, deploy_hook=<certbot.cli._Default object at 0x7f2d466d9c18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f2d466d9dd8>, dns_cloudflare=<certbot.cli._Default object at 0x7f2d466f5b38>, dns_cloudxns=<certbot.cli._Default object at 0x7f2d466f5c18>, dns_digitalocean=<certbot.cli._Default object at 0x7f2d466f5cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f2d466f5dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f2d466f5eb8>, dns_google=<certbot.cli._Default object at 0x7f2d466f5f98>, dns_luadns=<certbot.cli._Default object at 0x7f2d466f70b8>, dns_nsone=<certbot.cli._Default object at 0x7f2d466f7198>, dns_rfc2136=<certbot.cli._Default object at 0x7f2d466f7278>, dns_route53=<certbot.cli._Default object at 0x7f2d466f7358>, domains=<certbot.cli._Default object at 0x7f2d466ce7b8>, dry_run=<certbot.cli._Default object at 0x7f2d466ce518>, duplicate=<certbot.cli._Default object at 0x7f2d466d9438>, eff_email=<certbot.cli._Default object at 0x7f2d466c6f60>, email=<certbot.cli._Default object at 0x7f2d466ce0f0>, expand=<certbot.cli._Default object at 0x7f2d466c6b00>, force_interactive=<certbot.cli._Default object at 0x7f2d466ce908>, fullchain_path=<certbot.cli._Default object at 0x7f2d466f3da0>, func=<function renew at 0x7f2d467d52f0>, hsts=<certbot.cli._Default object at 0x7f2d466d1a58>, http01_address=<certbot.cli._Default object at 0x7f2d466ce1d0>, http01_port=<certbot.cli._Default object at 0x7f2d466c6dd8>, ifaces=<certbot.cli._Default object at 0x7f2d466f3a20>, init=<certbot.cli._Default object at 0x7f2d466f37f0>, installer=<certbot.cli._Default object at 0x7f2d466f5358>, key_path=<certbot.cli._Default object at 0x7f2d466f3cc0>, logs_dir=<certbot.cli._Default object at 0x7f2d466f5160>, manual=<certbot.cli._Default object at 0x7f2d466f5908>, manual_auth_hook=<certbot.cli._Default object at 0x7f2d466f7470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f2d466f7550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f2d466f7630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f2d466ce9e8>, nginx=<certbot.cli._Default object at 0x7f2d466f5710>, nginx_ctl=<certbot.cli._Default object at 0x7f2d466f77f0>, nginx_server_root=<certbot.cli._Default object at 0x7f2d466f7438>, no_bootstrap=<certbot.cli._Default object at 0x7f2d466d96d8>, no_self_upgrade=<certbot.cli._Default object at 0x7f2d466d95f8>, no_verify_ssl=<certbot.cli._Default object at 0x7f2d466c6748>, noninteractive_mode=<certbot.cli._Default object at 0x7f2d466cea58>, num=<certbot.cli._Default object at 0x7f2d466f3080>, os_packages_only=<certbot.cli._Default object at 0x7f2d466d9518>, post_hook=<certbot.cli._Default object at 0x7f2d466d92b0>, pre_hook=<certbot.cli._Default object at 0x7f2d466d94a8>, pref_challs=<certbot.cli._Default object at 0x7f2d466d9668>, prepare=<certbot.cli._Default object at 0x7f2d466f3908>, quiet=True, reason=<certbot.cli._Default object at 0x7f2d466f3470>, redirect=<certbot.cli._Default object at 0x7f2d466cec88>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f2d466ce390>, reinstall=<certbot.cli._Default object at 0x7f2d466c6cc0>, renew_by_default=<certbot.cli._Default object at 0x7f2d466c64a8>, renew_hook=<certbot.cli._Default object at 0x7f2d466d9b38>, renew_with_new_domains=<certbot.cli._Default object at 0x7f2d466c66a0>, rsa_key_size=<certbot.cli._Default object at 0x7f2d466ce748>, server=<certbot.cli._Default object at 0x7f2d466f5240>, staging=<certbot.cli._Default object at 0x7f2d466d9898>, standalone=<certbot.cli._Default object at 0x7f2d466f5828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f2d466f78d0>, staple=<certbot.cli._Default object at 0x7f2d466d6dd8>, strict_permissions=<certbot.cli._Default object at 0x7f2d466d9828>, text_mode=<certbot.cli._Default object at 0x7f2d466cecf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f2d466c6ac8>, tls_sni_01_port=<certbot.cli._Default object at 0x7f2d466c6828>, tos=<certbot.cli._Default object at 0x7f2d466d9048>, uir=<certbot.cli._Default object at 0x7f2d466d6978>, update_registration=<certbot.cli._Default object at 0x7f2d466ce240>, user_agent=<certbot.cli._Default object at 0x7f2d466f3198>, user_agent_comment=<certbot.cli._Default object at 0x7f2d466f31d0>, validate_hooks=<certbot.cli._Default object at 0x7f2d466d9cf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f2d466cee48>, webroot=<certbot.cli._Default object at 0x7f2d466f5a20>, webroot_map=<certbot.cli._Default object at 0x7f2d466f7a90>, webroot_path=<certbot.cli._Default object at 0x7f2d466f7710>, work_dir=<certbot.cli._Default object at 0x7f2d466f5080>)
2023-11-21 09:07:57,827:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-21 09:07:57,827:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-21 09:07:57,828:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-21 09:07:58,156:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f2d466f3b70>
Prep: True
2023-11-21 09:07:58,160:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f2d466f3b70>
Prep: True
2023-11-21 09:07:58,161:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f2d466f3b70> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f2d466f3b70>
2023-11-21 09:07:58,161:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-21 09:07:58,167:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(status=None, contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f2d466595c0>)>), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-21 09:07:58,170:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-21 09:07:58,176:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-21 09:07:58,179:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f2d46670710>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-21 09:07:58,186:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f2d46670710>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f2d46670710>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f2d46670710>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-21 09:07:58,187:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-21 09:07:58,187:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-21 09:07:58,188:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-21 21:37:58,054:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-21 21:37:58,056:DEBUG:certbot.main:Arguments: ['-q']
2023-11-21 21:37:58,058:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-21 21:37:58,080:DEBUG:certbot.log:Root logging level set at 30
2023-11-21 21:37:58,081:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-21 21:37:58,097:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7fd049a95358> and installer <certbot.cli._Default object at 0x7fd049a95358>
2023-11-21 21:37:58,097:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7fd049a79320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7fd049a79160>, apache=<certbot.cli._Default object at 0x7fd049a955f8>, authenticator=<certbot.cli._Default object at 0x7fd049a95358>, break_my_certs=<certbot.cli._Default object at 0x7fd049a6e470>, cert_path=<certbot.cli._Default object at 0x7fd049a93be0>, certname=<certbot.cli._Default object at 0x7fd049a6e668>, chain_path=<certbot.cli._Default object at 0x7fd049a93e80>, checkpoints=<certbot.cli._Default object at 0x7fd049a93710>, config_dir=<certbot.cli._Default object at 0x7fd049a93f60>, config_file=None, configurator=<certbot.cli._Default object at 0x7fd049a95358>, csr=<certbot.cli._Default object at 0x7fd049a93358>, debug=<certbot.cli._Default object at 0x7fd049a79978>, debug_challenges=<certbot.cli._Default object at 0x7fd049a79a90>, delete_after_revoke=<certbot.cli._Default object at 0x7fd049a93550>, deploy_hook=<certbot.cli._Default object at 0x7fd049a79c18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7fd049a79dd8>, dns_cloudflare=<certbot.cli._Default object at 0x7fd049a95b38>, dns_cloudxns=<certbot.cli._Default object at 0x7fd049a95c18>, dns_digitalocean=<certbot.cli._Default object at 0x7fd049a95cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7fd049a95dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7fd049a95eb8>, dns_google=<certbot.cli._Default object at 0x7fd049a95f98>, dns_luadns=<certbot.cli._Default object at 0x7fd049a970b8>, dns_nsone=<certbot.cli._Default object at 0x7fd049a97198>, dns_rfc2136=<certbot.cli._Default object at 0x7fd049a97278>, dns_route53=<certbot.cli._Default object at 0x7fd049a97358>, domains=<certbot.cli._Default object at 0x7fd049a6e7b8>, dry_run=<certbot.cli._Default object at 0x7fd049a6e518>, duplicate=<certbot.cli._Default object at 0x7fd049a79438>, eff_email=<certbot.cli._Default object at 0x7fd049a66f60>, email=<certbot.cli._Default object at 0x7fd049a6e0f0>, expand=<certbot.cli._Default object at 0x7fd049a66b00>, force_interactive=<certbot.cli._Default object at 0x7fd049a6e908>, fullchain_path=<certbot.cli._Default object at 0x7fd049a93da0>, func=<function renew at 0x7fd049b752f0>, hsts=<certbot.cli._Default object at 0x7fd049a71a58>, http01_address=<certbot.cli._Default object at 0x7fd049a6e1d0>, http01_port=<certbot.cli._Default object at 0x7fd049a66dd8>, ifaces=<certbot.cli._Default object at 0x7fd049a93a20>, init=<certbot.cli._Default object at 0x7fd049a937f0>, installer=<certbot.cli._Default object at 0x7fd049a95358>, key_path=<certbot.cli._Default object at 0x7fd049a93cc0>, logs_dir=<certbot.cli._Default object at 0x7fd049a95160>, manual=<certbot.cli._Default object at 0x7fd049a95908>, manual_auth_hook=<certbot.cli._Default object at 0x7fd049a97470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7fd049a97550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7fd049a97630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7fd049a6e9e8>, nginx=<certbot.cli._Default object at 0x7fd049a95710>, nginx_ctl=<certbot.cli._Default object at 0x7fd049a977f0>, nginx_server_root=<certbot.cli._Default object at 0x7fd049a97438>, no_bootstrap=<certbot.cli._Default object at 0x7fd049a796d8>, no_self_upgrade=<certbot.cli._Default object at 0x7fd049a795f8>, no_verify_ssl=<certbot.cli._Default object at 0x7fd049a66748>, noninteractive_mode=<certbot.cli._Default object at 0x7fd049a6ea58>, num=<certbot.cli._Default object at 0x7fd049a93080>, os_packages_only=<certbot.cli._Default object at 0x7fd049a79518>, post_hook=<certbot.cli._Default object at 0x7fd049a792b0>, pre_hook=<certbot.cli._Default object at 0x7fd049a794a8>, pref_challs=<certbot.cli._Default object at 0x7fd049a79668>, prepare=<certbot.cli._Default object at 0x7fd049a93908>, quiet=True, reason=<certbot.cli._Default object at 0x7fd049a93470>, redirect=<certbot.cli._Default object at 0x7fd049a6ec88>, register_unsafely_without_email=<certbot.cli._Default object at 0x7fd049a6e390>, reinstall=<certbot.cli._Default object at 0x7fd049a66cc0>, renew_by_default=<certbot.cli._Default object at 0x7fd049a664a8>, renew_hook=<certbot.cli._Default object at 0x7fd049a79b38>, renew_with_new_domains=<certbot.cli._Default object at 0x7fd049a666a0>, rsa_key_size=<certbot.cli._Default object at 0x7fd049a6e748>, server=<certbot.cli._Default object at 0x7fd049a95240>, staging=<certbot.cli._Default object at 0x7fd049a79898>, standalone=<certbot.cli._Default object at 0x7fd049a95828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7fd049a978d0>, staple=<certbot.cli._Default object at 0x7fd049a76dd8>, strict_permissions=<certbot.cli._Default object at 0x7fd049a79828>, text_mode=<certbot.cli._Default object at 0x7fd049a6ecf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7fd049a66ac8>, tls_sni_01_port=<certbot.cli._Default object at 0x7fd049a66828>, tos=<certbot.cli._Default object at 0x7fd049a79048>, uir=<certbot.cli._Default object at 0x7fd049a76978>, update_registration=<certbot.cli._Default object at 0x7fd049a6e240>, user_agent=<certbot.cli._Default object at 0x7fd049a93198>, user_agent_comment=<certbot.cli._Default object at 0x7fd049a931d0>, validate_hooks=<certbot.cli._Default object at 0x7fd049a79cf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7fd049a6ee48>, webroot=<certbot.cli._Default object at 0x7fd049a95a20>, webroot_map=<certbot.cli._Default object at 0x7fd049a97a90>, webroot_path=<certbot.cli._Default object at 0x7fd049a97710>, work_dir=<certbot.cli._Default object at 0x7fd049a95080>)
2023-11-21 21:37:58,118:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-21 21:37:58,118:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-21 21:37:58,119:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-21 21:37:58,459:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fd049a93d30>
Prep: True
2023-11-21 21:37:58,464:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fd049a93d30>
Prep: True
2023-11-21 21:37:58,464:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7fd049a93d30> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7fd049a93d30>
2023-11-21 21:37:58,465:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-21 21:37:58,472:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fd0499f9630>)>), contact=('mailto:snoof@list.ru',), status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_host='Ubuntu-1604-xenial-64-minimal', creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>)))>
2023-11-21 21:37:58,475:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-21 21:37:58,482:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-21 21:37:58,486:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd049a10710>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-21 21:37:58,493:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7fd049a10710>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd049a10710>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd049a10710>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-21 21:37:58,494:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-21 21:37:58,494:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-21 21:37:58,495:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-22 09:39:07,551:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-22 09:39:07,553:DEBUG:certbot.main:Arguments: ['-q']
2023-11-22 09:39:07,553:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-22 09:39:07,570:DEBUG:certbot.log:Root logging level set at 30
2023-11-22 09:39:07,571:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-22 09:39:07,586:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7fa2daa712e8> and installer <certbot.cli._Default object at 0x7fa2daa712e8>
2023-11-22 09:39:07,587:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7fa2daa55320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7fa2daa55080>, apache=<certbot.cli._Default object at 0x7fa2daa71588>, authenticator=<certbot.cli._Default object at 0x7fa2daa712e8>, break_my_certs=<certbot.cli._Default object at 0x7fa2daa4a710>, cert_path=<certbot.cli._Default object at 0x7fa2daa6fb70>, certname=<certbot.cli._Default object at 0x7fa2daa4a4a8>, chain_path=<certbot.cli._Default object at 0x7fa2daa6fe10>, checkpoints=<certbot.cli._Default object at 0x7fa2daa6f6a0>, config_dir=<certbot.cli._Default object at 0x7fa2daa6fef0>, config_file=None, configurator=<certbot.cli._Default object at 0x7fa2daa712e8>, csr=<certbot.cli._Default object at 0x7fa2daa6f2e8>, debug=<certbot.cli._Default object at 0x7fa2daa55978>, debug_challenges=<certbot.cli._Default object at 0x7fa2daa42438>, delete_after_revoke=<certbot.cli._Default object at 0x7fa2daa6f4e0>, deploy_hook=<certbot.cli._Default object at 0x7fa2daa55ba8>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7fa2daa55d68>, dns_cloudflare=<certbot.cli._Default object at 0x7fa2daa71ac8>, dns_cloudxns=<certbot.cli._Default object at 0x7fa2daa71ba8>, dns_digitalocean=<certbot.cli._Default object at 0x7fa2daa71c88>, dns_dnsimple=<certbot.cli._Default object at 0x7fa2daa71d68>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7fa2daa71e48>, dns_google=<certbot.cli._Default object at 0x7fa2daa71f28>, dns_luadns=<certbot.cli._Default object at 0x7fa2daa73048>, dns_nsone=<certbot.cli._Default object at 0x7fa2daa73128>, dns_rfc2136=<certbot.cli._Default object at 0x7fa2daa73208>, dns_route53=<certbot.cli._Default object at 0x7fa2daa732e8>, domains=<certbot.cli._Default object at 0x7fa2daa4a630>, dry_run=<certbot.cli._Default object at 0x7fa2daa4a358>, duplicate=<certbot.cli._Default object at 0x7fa2daa55438>, eff_email=<certbot.cli._Default object at 0x7fa2daa42da0>, email=<certbot.cli._Default object at 0x7fa2daa42fd0>, expand=<certbot.cli._Default object at 0x7fa2daa42940>, force_interactive=<certbot.cli._Default object at 0x7fa2daa4a780>, fullchain_path=<certbot.cli._Default object at 0x7fa2daa6fd30>, func=<function renew at 0x7fa2dab512f0>, hsts=<certbot.cli._Default object at 0x7fa2daa52710>, http01_address=<certbot.cli._Default object at 0x7fa2daa4a438>, http01_port=<certbot.cli._Default object at 0x7fa2daa4a198>, ifaces=<certbot.cli._Default object at 0x7fa2daa6f9b0>, init=<certbot.cli._Default object at 0x7fa2daa6f780>, installer=<certbot.cli._Default object at 0x7fa2daa712e8>, key_path=<certbot.cli._Default object at 0x7fa2daa6fc50>, logs_dir=<certbot.cli._Default object at 0x7fa2daa710f0>, manual=<certbot.cli._Default object at 0x7fa2daa71898>, manual_auth_hook=<certbot.cli._Default object at 0x7fa2daa73400>, manual_cleanup_hook=<certbot.cli._Default object at 0x7fa2daa734e0>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7fa2daa735c0>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7fa2daa4ac50>, nginx=<certbot.cli._Default object at 0x7fa2daa716a0>, nginx_ctl=<certbot.cli._Default object at 0x7fa2daa73780>, nginx_server_root=<certbot.cli._Default object at 0x7fa2daa733c8>, no_bootstrap=<certbot.cli._Default object at 0x7fa2daa556d8>, no_self_upgrade=<certbot.cli._Default object at 0x7fa2daa555f8>, no_verify_ssl=<certbot.cli._Default object at 0x7fa2daa42898>, noninteractive_mode=<certbot.cli._Default object at 0x7fa2daa4a8d0>, num=<certbot.cli._Default object at 0x7fa2daa55fd0>, os_packages_only=<certbot.cli._Default object at 0x7fa2daa55518>, post_hook=<certbot.cli._Default object at 0x7fa2daa55128>, pre_hook=<certbot.cli._Default object at 0x7fa2daa552b0>, pref_challs=<certbot.cli._Default object at 0x7fa2daa554a8>, prepare=<certbot.cli._Default object at 0x7fa2daa6f898>, quiet=True, reason=<certbot.cli._Default object at 0x7fa2daa6f400>, redirect=<certbot.cli._Default object at 0x7fa2daa4af60>, register_unsafely_without_email=<certbot.cli._Default object at 0x7fa2daa4a208>, reinstall=<certbot.cli._Default object at 0x7fa2daa42a90>, renew_by_default=<certbot.cli._Default object at 0x7fa2daa42320>, renew_hook=<certbot.cli._Default object at 0x7fa2daa55ac8>, renew_with_new_domains=<certbot.cli._Default object at 0x7fa2daa425f8>, rsa_key_size=<certbot.cli._Default object at 0x7fa2daa4a9b0>, server=<certbot.cli._Default object at 0x7fa2daa711d0>, staging=<certbot.cli._Default object at 0x7fa2daa55898>, standalone=<certbot.cli._Default object at 0x7fa2daa717b8>, standalone_supported_challenges=<certbot.cli._Default object at 0x7fa2daa73860>, staple=<certbot.cli._Default object at 0x7fa2daa52f98>, strict_permissions=<certbot.cli._Default object at 0x7fa2daa55668>, text_mode=<certbot.cli._Default object at 0x7fa2daa4ab70>, tls_sni_01_address=<certbot.cli._Default object at 0x7fa2daa42e48>, tls_sni_01_port=<certbot.cli._Default object at 0x7fa2daa42b38>, tos=<certbot.cli._Default object at 0x7fa2daa55240>, uir=<certbot.cli._Default object at 0x7fa2daa52ba8>, update_registration=<certbot.cli._Default object at 0x7fa2daa4a0b8>, user_agent=<certbot.cli._Default object at 0x7fa2daa6f128>, user_agent_comment=<certbot.cli._Default object at 0x7fa2daa6f160>, validate_hooks=<certbot.cli._Default object at 0x7fa2daa55c88>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7fa2daa4acc0>, webroot=<certbot.cli._Default object at 0x7fa2daa719b0>, webroot_map=<certbot.cli._Default object at 0x7fa2daa73a20>, webroot_path=<certbot.cli._Default object at 0x7fa2daa736a0>, work_dir=<certbot.cli._Default object at 0x7fa2daa6ffd0>)
2023-11-22 09:39:07,606:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-22 09:39:07,607:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-22 09:39:07,607:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-22 09:39:07,995:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fa2daa6fdd8>
Prep: True
2023-11-22 09:39:08,001:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fa2daa6fdd8>
Prep: True
2023-11-22 09:39:08,002:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7fa2daa6fdd8> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7fa2daa6fdd8>
2023-11-22 09:39:08,002:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-22 09:39:08,009:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fa2da9d45f8>)>), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', contact=('mailto:snoof@list.ru',), status=None), new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-22 09:39:08,016:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-22 09:39:08,024:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-22 09:39:08,030:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fa2da9eb5f8>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-22 09:39:08,037:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7fa2da9eb5f8>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fa2da9eb5f8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fa2da9eb5f8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-22 09:39:08,037:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-22 09:39:08,037:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-22 09:39:08,038:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-22 21:07:12,269:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-22 21:07:12,271:DEBUG:certbot.main:Arguments: ['-q']
2023-11-22 21:07:12,272:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-22 21:07:12,291:DEBUG:certbot.log:Root logging level set at 30
2023-11-22 21:07:12,293:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-22 21:07:12,312:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f290cef4358> and installer <certbot.cli._Default object at 0x7f290cef4358>
2023-11-22 21:07:12,312:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f290ced8320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f290ced8160>, apache=<certbot.cli._Default object at 0x7f290cef45f8>, authenticator=<certbot.cli._Default object at 0x7f290cef4358>, break_my_certs=<certbot.cli._Default object at 0x7f290cecd470>, cert_path=<certbot.cli._Default object at 0x7f290cef2be0>, certname=<certbot.cli._Default object at 0x7f290cecd668>, chain_path=<certbot.cli._Default object at 0x7f290cef2e80>, checkpoints=<certbot.cli._Default object at 0x7f290cef2710>, config_dir=<certbot.cli._Default object at 0x7f290cef2f60>, config_file=None, configurator=<certbot.cli._Default object at 0x7f290cef4358>, csr=<certbot.cli._Default object at 0x7f290cef2358>, debug=<certbot.cli._Default object at 0x7f290ced8978>, debug_challenges=<certbot.cli._Default object at 0x7f290ced8a90>, delete_after_revoke=<certbot.cli._Default object at 0x7f290cef2550>, deploy_hook=<certbot.cli._Default object at 0x7f290ced8c18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f290ced8dd8>, dns_cloudflare=<certbot.cli._Default object at 0x7f290cef4b38>, dns_cloudxns=<certbot.cli._Default object at 0x7f290cef4c18>, dns_digitalocean=<certbot.cli._Default object at 0x7f290cef4cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f290cef4dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f290cef4eb8>, dns_google=<certbot.cli._Default object at 0x7f290cef4f98>, dns_luadns=<certbot.cli._Default object at 0x7f290cef60b8>, dns_nsone=<certbot.cli._Default object at 0x7f290cef6198>, dns_rfc2136=<certbot.cli._Default object at 0x7f290cef6278>, dns_route53=<certbot.cli._Default object at 0x7f290cef6358>, domains=<certbot.cli._Default object at 0x7f290cecd7b8>, dry_run=<certbot.cli._Default object at 0x7f290cecd518>, duplicate=<certbot.cli._Default object at 0x7f290ced8438>, eff_email=<certbot.cli._Default object at 0x7f290cec5f60>, email=<certbot.cli._Default object at 0x7f290cecd0f0>, expand=<certbot.cli._Default object at 0x7f290cec5b00>, force_interactive=<certbot.cli._Default object at 0x7f290cecd908>, fullchain_path=<certbot.cli._Default object at 0x7f290cef2da0>, func=<function renew at 0x7f290cfd42f0>, hsts=<certbot.cli._Default object at 0x7f290ced0748>, http01_address=<certbot.cli._Default object at 0x7f290cecd1d0>, http01_port=<certbot.cli._Default object at 0x7f290cec5dd8>, ifaces=<certbot.cli._Default object at 0x7f290cef2a20>, init=<certbot.cli._Default object at 0x7f290cef27f0>, installer=<certbot.cli._Default object at 0x7f290cef4358>, key_path=<certbot.cli._Default object at 0x7f290cef2cc0>, logs_dir=<certbot.cli._Default object at 0x7f290cef4160>, manual=<certbot.cli._Default object at 0x7f290cef4908>, manual_auth_hook=<certbot.cli._Default object at 0x7f290cef6470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f290cef6550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f290cef6630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f290cecd9e8>, nginx=<certbot.cli._Default object at 0x7f290cef4710>, nginx_ctl=<certbot.cli._Default object at 0x7f290cef67f0>, nginx_server_root=<certbot.cli._Default object at 0x7f290cef6438>, no_bootstrap=<certbot.cli._Default object at 0x7f290ced86d8>, no_self_upgrade=<certbot.cli._Default object at 0x7f290ced85f8>, no_verify_ssl=<certbot.cli._Default object at 0x7f290cec5748>, noninteractive_mode=<certbot.cli._Default object at 0x7f290cecda58>, num=<certbot.cli._Default object at 0x7f290cef2080>, os_packages_only=<certbot.cli._Default object at 0x7f290ced8518>, post_hook=<certbot.cli._Default object at 0x7f290ced82b0>, pre_hook=<certbot.cli._Default object at 0x7f290ced84a8>, pref_challs=<certbot.cli._Default object at 0x7f290ced8668>, prepare=<certbot.cli._Default object at 0x7f290cef2908>, quiet=True, reason=<certbot.cli._Default object at 0x7f290cef2470>, redirect=<certbot.cli._Default object at 0x7f290cecdc88>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f290cecd390>, reinstall=<certbot.cli._Default object at 0x7f290cec5cc0>, renew_by_default=<certbot.cli._Default object at 0x7f290cec54a8>, renew_hook=<certbot.cli._Default object at 0x7f290ced8b38>, renew_with_new_domains=<certbot.cli._Default object at 0x7f290cec56a0>, rsa_key_size=<certbot.cli._Default object at 0x7f290cecd748>, server=<certbot.cli._Default object at 0x7f290cef4240>, staging=<certbot.cli._Default object at 0x7f290ced8898>, standalone=<certbot.cli._Default object at 0x7f290cef4828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f290cef68d0>, staple=<certbot.cli._Default object at 0x7f290ced5dd8>, strict_permissions=<certbot.cli._Default object at 0x7f290ced8828>, text_mode=<certbot.cli._Default object at 0x7f290cecdcf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f290cec5ac8>, tls_sni_01_port=<certbot.cli._Default object at 0x7f290cec5828>, tos=<certbot.cli._Default object at 0x7f290ced8048>, uir=<certbot.cli._Default object at 0x7f290ced5978>, update_registration=<certbot.cli._Default object at 0x7f290cecd240>, user_agent=<certbot.cli._Default object at 0x7f290cef2198>, user_agent_comment=<certbot.cli._Default object at 0x7f290cef21d0>, validate_hooks=<certbot.cli._Default object at 0x7f290ced8cf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f290cecde48>, webroot=<certbot.cli._Default object at 0x7f290cef4a20>, webroot_map=<certbot.cli._Default object at 0x7f290cef6a90>, webroot_path=<certbot.cli._Default object at 0x7f290cef6710>, work_dir=<certbot.cli._Default object at 0x7f290cef4080>)
2023-11-22 21:07:12,334:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-22 21:07:12,335:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-22 21:07:12,336:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-22 21:07:12,784:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f290cef2d30>
Prep: True
2023-11-22 21:07:12,790:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f290cef2d30>
Prep: True
2023-11-22 21:07:12,790:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f290cef2d30> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f290cef2d30>
2023-11-22 21:07:12,791:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-22 21:07:12,797:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f290ce585f8>)>), status=None, contact=('mailto:snoof@list.ru',))), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_host='Ubuntu-1604-xenial-64-minimal', creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>)))>
2023-11-22 21:07:12,801:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-22 21:07:12,807:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-22 21:07:12,812:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f290ce6e630>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-22 21:07:12,821:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f290ce6e630>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f290ce6e630>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f290ce6e630>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-22 21:07:12,822:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-22 21:07:12,822:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-22 21:07:12,823:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-23 09:27:17,144:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-23 09:27:17,146:DEBUG:certbot.main:Arguments: ['-q']
2023-11-23 09:27:17,147:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-23 09:27:17,165:DEBUG:certbot.log:Root logging level set at 30
2023-11-23 09:27:17,166:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-23 09:27:17,184:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f4dce82a208> and installer <certbot.cli._Default object at 0x7f4dce82a208>
2023-11-23 09:27:17,185:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f4dce80f048>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f4dce7fb7f0>, apache=<certbot.cli._Default object at 0x7f4dce82a4a8>, authenticator=<certbot.cli._Default object at 0x7f4dce82a208>, break_my_certs=<certbot.cli._Default object at 0x7f4dce803160>, cert_path=<certbot.cli._Default object at 0x7f4dce828a90>, certname=<certbot.cli._Default object at 0x7f4dce803748>, chain_path=<certbot.cli._Default object at 0x7f4dce828d30>, checkpoints=<certbot.cli._Default object at 0x7f4dce8285c0>, config_dir=<certbot.cli._Default object at 0x7f4dce828e10>, config_file=None, configurator=<certbot.cli._Default object at 0x7f4dce82a208>, csr=<certbot.cli._Default object at 0x7f4dce828208>, debug=<certbot.cli._Default object at 0x7f4dce80f898>, debug_challenges=<certbot.cli._Default object at 0x7f4dce80f9b0>, delete_after_revoke=<certbot.cli._Default object at 0x7f4dce828400>, deploy_hook=<certbot.cli._Default object at 0x7f4dce80f320>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f4dce80fc88>, dns_cloudflare=<certbot.cli._Default object at 0x7f4dce82a9e8>, dns_cloudxns=<certbot.cli._Default object at 0x7f4dce82aac8>, dns_digitalocean=<certbot.cli._Default object at 0x7f4dce82aba8>, dns_dnsimple=<certbot.cli._Default object at 0x7f4dce82ac88>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f4dce82ad68>, dns_google=<certbot.cli._Default object at 0x7f4dce82ae48>, dns_luadns=<certbot.cli._Default object at 0x7f4dce82af28>, dns_nsone=<certbot.cli._Default object at 0x7f4dce82c048>, dns_rfc2136=<certbot.cli._Default object at 0x7f4dce82c128>, dns_route53=<certbot.cli._Default object at 0x7f4dce82c208>, domains=<certbot.cli._Default object at 0x7f4dce803898>, dry_run=<certbot.cli._Default object at 0x7f4dce8035f8>, duplicate=<certbot.cli._Default object at 0x7f4dce80f358>, eff_email=<certbot.cli._Default object at 0x7f4dce8030b8>, email=<certbot.cli._Default object at 0x7f4dce8031d0>, expand=<certbot.cli._Default object at 0x7f4dce7fbc50>, force_interactive=<certbot.cli._Default object at 0x7f4dce8039e8>, fullchain_path=<certbot.cli._Default object at 0x7f4dce828c50>, func=<function renew at 0x7f4dce90a2f0>, hsts=<certbot.cli._Default object at 0x7f4dce803e80>, http01_address=<certbot.cli._Default object at 0x7f4dce7fbe48>, http01_port=<certbot.cli._Default object at 0x7f4dce7fba58>, ifaces=<certbot.cli._Default object at 0x7f4dce8288d0>, init=<certbot.cli._Default object at 0x7f4dce8286a0>, installer=<certbot.cli._Default object at 0x7f4dce82a208>, key_path=<certbot.cli._Default object at 0x7f4dce828b70>, logs_dir=<certbot.cli._Default object at 0x7f4dce828fd0>, manual=<certbot.cli._Default object at 0x7f4dce82a7b8>, manual_auth_hook=<certbot.cli._Default object at 0x7f4dce82c320>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f4dce82c400>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f4dce82c4e0>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f4dce8036a0>, nginx=<certbot.cli._Default object at 0x7f4dce82a5c0>, nginx_ctl=<certbot.cli._Default object at 0x7f4dce82c6a0>, nginx_server_root=<certbot.cli._Default object at 0x7f4dce82c2e8>, no_bootstrap=<certbot.cli._Default object at 0x7f4dce80f5f8>, no_self_upgrade=<certbot.cli._Default object at 0x7f4dce80f518>, no_verify_ssl=<certbot.cli._Default object at 0x7f4dce80fa90>, noninteractive_mode=<certbot.cli._Default object at 0x7f4dce803b38>, num=<certbot.cli._Default object at 0x7f4dce80fef0>, os_packages_only=<certbot.cli._Default object at 0x7f4dce80f438>, post_hook=<certbot.cli._Default object at 0x7f4dce80f6a0>, pre_hook=<certbot.cli._Default object at 0x7f4dce80f860>, pref_challs=<certbot.cli._Default object at 0x7f4dce80fa58>, prepare=<certbot.cli._Default object at 0x7f4dce8287b8>, quiet=True, reason=<certbot.cli._Default object at 0x7f4dce828320>, redirect=<certbot.cli._Default object at 0x7f4dce803940>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f4dce8034a8>, reinstall=<certbot.cli._Default object at 0x7f4dce7fbda0>, renew_by_default=<certbot.cli._Default object at 0x7f4dce7fb080>, renew_hook=<certbot.cli._Default object at 0x7f4dce80f4e0>, renew_with_new_domains=<certbot.cli._Default object at 0x7f4dce7fb5f8>, rsa_key_size=<certbot.cli._Default object at 0x7f4dce8033c8>, server=<certbot.cli._Default object at 0x7f4dce82a0f0>, staging=<certbot.cli._Default object at 0x7f4dce80f7b8>, standalone=<certbot.cli._Default object at 0x7f4dce82a6d8>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f4dce82c780>, staple=<certbot.cli._Default object at 0x7f4dce80cac8>, strict_permissions=<certbot.cli._Default object at 0x7f4dce80cef0>, text_mode=<certbot.cli._Default object at 0x7f4dce803dd8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f4dce7fb438>, tls_sni_01_port=<certbot.cli._Default object at 0x7f4dce80fb70>, tos=<certbot.cli._Default object at 0x7f4dce80f198>, uir=<certbot.cli._Default object at 0x7f4dce80c940>, update_registration=<certbot.cli._Default object at 0x7f4dce803320>, user_agent=<certbot.cli._Default object at 0x7f4dce828048>, user_agent_comment=<certbot.cli._Default object at 0x7f4dce828080>, validate_hooks=<certbot.cli._Default object at 0x7f4dce80f278>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f4dce803f28>, webroot=<certbot.cli._Default object at 0x7f4dce82a8d0>, webroot_map=<certbot.cli._Default object at 0x7f4dce82c940>, webroot_path=<certbot.cli._Default object at 0x7f4dce82c5c0>, work_dir=<certbot.cli._Default object at 0x7f4dce828ef0>)
2023-11-23 09:27:17,213:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-23 09:27:17,214:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-23 09:27:17,215:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-23 09:27:17,589:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f4dce828f98>
Prep: True
2023-11-23 09:27:17,596:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f4dce828f98>
Prep: True
2023-11-23 09:27:17,596:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f4dce828f98> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f4dce828f98>
2023-11-23 09:27:17,596:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-23 09:27:17,603:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(status=None, contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f4dce78b588>)>), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-23 09:27:17,607:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-23 09:27:17,613:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-23 09:27:17,619:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f4dce7a3630>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-23 09:27:17,627:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f4dce7a3630>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f4dce7a3630>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f4dce7a3630>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-23 09:27:17,628:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-23 09:27:17,629:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-23 09:27:17,629:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-23 21:22:56,096:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-23 21:22:56,098:DEBUG:certbot.main:Arguments: ['-q']
2023-11-23 21:22:56,098:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-23 21:22:56,116:DEBUG:certbot.log:Root logging level set at 30
2023-11-23 21:22:56,117:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-23 21:22:56,136:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7fadfb1f2438> and installer <certbot.cli._Default object at 0x7fadfb1f2438>
2023-11-23 21:22:56,136:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7fadfb1d6470>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7fadfb1d62b0>, apache=<certbot.cli._Default object at 0x7fadfb1f26d8>, authenticator=<certbot.cli._Default object at 0x7fadfb1f2438>, break_my_certs=<certbot.cli._Default object at 0x7fadfb1cbdd8>, cert_path=<certbot.cli._Default object at 0x7fadfb1f0cc0>, certname=<certbot.cli._Default object at 0x7fadfb1cb320>, chain_path=<certbot.cli._Default object at 0x7fadfb1f0f60>, checkpoints=<certbot.cli._Default object at 0x7fadfb1f07f0>, config_dir=<certbot.cli._Default object at 0x7fadfb1f2080>, config_file=None, configurator=<certbot.cli._Default object at 0x7fadfb1f2438>, csr=<certbot.cli._Default object at 0x7fadfb1f0438>, debug=<certbot.cli._Default object at 0x7fadfb1c3898>, debug_challenges=<certbot.cli._Default object at 0x7fadfb1c3ba8>, delete_after_revoke=<certbot.cli._Default object at 0x7fadfb1f0630>, deploy_hook=<certbot.cli._Default object at 0x7fadfb1d6cf8>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7fadfb1d6eb8>, dns_cloudflare=<certbot.cli._Default object at 0x7fadfb1f2c18>, dns_cloudxns=<certbot.cli._Default object at 0x7fadfb1f2cf8>, dns_digitalocean=<certbot.cli._Default object at 0x7fadfb1f2dd8>, dns_dnsimple=<certbot.cli._Default object at 0x7fadfb1f2eb8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7fadfb1f2f98>, dns_google=<certbot.cli._Default object at 0x7fadfb1f40b8>, dns_luadns=<certbot.cli._Default object at 0x7fadfb1f4198>, dns_nsone=<certbot.cli._Default object at 0x7fadfb1f4278>, dns_rfc2136=<certbot.cli._Default object at 0x7fadfb1f4358>, dns_route53=<certbot.cli._Default object at 0x7fadfb1f4438>, domains=<certbot.cli._Default object at 0x7fadfb1cb470>, dry_run=<certbot.cli._Default object at 0x7fadfb1cb1d0>, duplicate=<certbot.cli._Default object at 0x7fadfb1d6588>, eff_email=<certbot.cli._Default object at 0x7fadfb1c3ac8>, email=<certbot.cli._Default object at 0x7fadfb1c3d30>, expand=<certbot.cli._Default object at 0x7fadfb1c36a0>, force_interactive=<certbot.cli._Default object at 0x7fadfb1cb5c0>, fullchain_path=<certbot.cli._Default object at 0x7fadfb1f0e80>, func=<function renew at 0x7fadfb2d22f0>, hsts=<certbot.cli._Default object at 0x7fadfb1d3ba8>, http01_address=<certbot.cli._Default object at 0x7fadfb1cb9b0>, http01_port=<certbot.cli._Default object at 0x7fadfb1cb710>, ifaces=<certbot.cli._Default object at 0x7fadfb1f0b00>, init=<certbot.cli._Default object at 0x7fadfb1f08d0>, installer=<certbot.cli._Default object at 0x7fadfb1f2438>, key_path=<certbot.cli._Default object at 0x7fadfb1f0da0>, logs_dir=<certbot.cli._Default object at 0x7fadfb1f2240>, manual=<certbot.cli._Default object at 0x7fadfb1f29e8>, manual_auth_hook=<certbot.cli._Default object at 0x7fadfb1f4550>, manual_cleanup_hook=<certbot.cli._Default object at 0x7fadfb1f4630>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7fadfb1f4710>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7fadfb1d3438>, nginx=<certbot.cli._Default object at 0x7fadfb1f27f0>, nginx_ctl=<certbot.cli._Default object at 0x7fadfb1f48d0>, nginx_server_root=<certbot.cli._Default object at 0x7fadfb1f4518>, no_bootstrap=<certbot.cli._Default object at 0x7fadfb1d6828>, no_self_upgrade=<certbot.cli._Default object at 0x7fadfb1d6748>, no_verify_ssl=<certbot.cli._Default object at 0x7fadfb1c3e80>, noninteractive_mode=<certbot.cli._Default object at 0x7fadfb1cb748>, num=<certbot.cli._Default object at 0x7fadfb1f0160>, os_packages_only=<certbot.cli._Default object at 0x7fadfb1d6668>, post_hook=<certbot.cli._Default object at 0x7fadfb1d6b38>, pre_hook=<certbot.cli._Default object at 0x7fadfb1d6a58>, pref_challs=<certbot.cli._Default object at 0x7fadfb1d60b8>, prepare=<certbot.cli._Default object at 0x7fadfb1f09e8>, quiet=True, reason=<certbot.cli._Default object at 0x7fadfb1f0550>, redirect=<certbot.cli._Default object at 0x7fadfb1d3630>, register_unsafely_without_email=<certbot.cli._Default object at 0x7fadfb1c3fd0>, reinstall=<certbot.cli._Default object at 0x7fadfb1c37f0>, renew_by_default=<certbot.cli._Default object at 0x7fadfb1d60f0>, renew_hook=<certbot.cli._Default object at 0x7fadfb1d6c18>, renew_with_new_domains=<certbot.cli._Default object at 0x7fadfb1d61d0>, rsa_key_size=<certbot.cli._Default object at 0x7fadfb1d3240>, server=<certbot.cli._Default object at 0x7fadfb1f2320>, staging=<certbot.cli._Default object at 0x7fadfb1c3630>, standalone=<certbot.cli._Default object at 0x7fadfb1f2908>, standalone_supported_challenges=<certbot.cli._Default object at 0x7fadfb1f49b0>, staple=<certbot.cli._Default object at 0x7fadfb1d65f8>, strict_permissions=<certbot.cli._Default object at 0x7fadfb1d6240>, text_mode=<certbot.cli._Default object at 0x7fadfb1cb9e8>, tls_sni_01_address=<certbot.cli._Default object at 0x7fadfb1cb438>, tls_sni_01_port=<certbot.cli._Default object at 0x7fadfb1cb198>, tos=<certbot.cli._Default object at 0x7fadfb1d6390>, uir=<certbot.cli._Default object at 0x7fadfb1d3fd0>, update_registration=<certbot.cli._Default object at 0x7fadfb1c3eb8>, user_agent=<certbot.cli._Default object at 0x7fadfb1f0278>, user_agent_comment=<certbot.cli._Default object at 0x7fadfb1f02b0>, validate_hooks=<certbot.cli._Default object at 0x7fadfb1d6dd8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7fadfb1cbb38>, webroot=<certbot.cli._Default object at 0x7fadfb1f2b00>, webroot_map=<certbot.cli._Default object at 0x7fadfb1f4b70>, webroot_path=<certbot.cli._Default object at 0x7fadfb1f47f0>, work_dir=<certbot.cli._Default object at 0x7fadfb1f2160>)
2023-11-23 21:22:56,155:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-23 21:22:56,156:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-23 21:22:56,156:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-23 21:22:56,510:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fadfb1f0d30>
Prep: True
2023-11-23 21:22:56,517:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fadfb1f0d30>
Prep: True
2023-11-23 21:22:56,517:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7fadfb1f0d30> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7fadfb1f0d30>
2023-11-23 21:22:56,517:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-23 21:22:56,523:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fadfb1555f8>)>), contact=('mailto:snoof@list.ru',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None), new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-23 21:22:56,527:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-23 21:22:56,532:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-23 21:22:56,536:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fadfb16d6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-23 21:22:56,542:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7fadfb16d6d8>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fadfb16d6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fadfb16d6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-23 21:22:56,543:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-23 21:22:56,544:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-23 21:22:56,544:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-24 09:07:12,993:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-24 09:07:12,994:DEBUG:certbot.main:Arguments: ['-q']
2023-11-24 09:07:12,995:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-24 09:07:13,013:DEBUG:certbot.log:Root logging level set at 30
2023-11-24 09:07:13,014:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-24 09:07:13,033:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f330ba13358> and installer <certbot.cli._Default object at 0x7f330ba13358>
2023-11-24 09:07:13,034:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f330b9f7320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f330b9f7160>, apache=<certbot.cli._Default object at 0x7f330ba135f8>, authenticator=<certbot.cli._Default object at 0x7f330ba13358>, break_my_certs=<certbot.cli._Default object at 0x7f330b9ec470>, cert_path=<certbot.cli._Default object at 0x7f330ba11be0>, certname=<certbot.cli._Default object at 0x7f330b9ec668>, chain_path=<certbot.cli._Default object at 0x7f330ba11e80>, checkpoints=<certbot.cli._Default object at 0x7f330ba11710>, config_dir=<certbot.cli._Default object at 0x7f330ba11f60>, config_file=None, configurator=<certbot.cli._Default object at 0x7f330ba13358>, csr=<certbot.cli._Default object at 0x7f330ba11358>, debug=<certbot.cli._Default object at 0x7f330b9f7978>, debug_challenges=<certbot.cli._Default object at 0x7f330b9f7a90>, delete_after_revoke=<certbot.cli._Default object at 0x7f330ba11550>, deploy_hook=<certbot.cli._Default object at 0x7f330b9f7c18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f330b9f7dd8>, dns_cloudflare=<certbot.cli._Default object at 0x7f330ba13b38>, dns_cloudxns=<certbot.cli._Default object at 0x7f330ba13c18>, dns_digitalocean=<certbot.cli._Default object at 0x7f330ba13cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f330ba13dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f330ba13eb8>, dns_google=<certbot.cli._Default object at 0x7f330ba13f98>, dns_luadns=<certbot.cli._Default object at 0x7f330ba150b8>, dns_nsone=<certbot.cli._Default object at 0x7f330ba15198>, dns_rfc2136=<certbot.cli._Default object at 0x7f330ba15278>, dns_route53=<certbot.cli._Default object at 0x7f330ba15358>, domains=<certbot.cli._Default object at 0x7f330b9ec7b8>, dry_run=<certbot.cli._Default object at 0x7f330b9ec518>, duplicate=<certbot.cli._Default object at 0x7f330b9f7438>, eff_email=<certbot.cli._Default object at 0x7f330b9e4f60>, email=<certbot.cli._Default object at 0x7f330b9ec0f0>, expand=<certbot.cli._Default object at 0x7f330b9e4b00>, force_interactive=<certbot.cli._Default object at 0x7f330b9ec908>, fullchain_path=<certbot.cli._Default object at 0x7f330ba11da0>, func=<function renew at 0x7f330baf32f0>, hsts=<certbot.cli._Default object at 0x7f330b9efa58>, http01_address=<certbot.cli._Default object at 0x7f330b9ec1d0>, http01_port=<certbot.cli._Default object at 0x7f330b9e4dd8>, ifaces=<certbot.cli._Default object at 0x7f330ba11a20>, init=<certbot.cli._Default object at 0x7f330ba117f0>, installer=<certbot.cli._Default object at 0x7f330ba13358>, key_path=<certbot.cli._Default object at 0x7f330ba11cc0>, logs_dir=<certbot.cli._Default object at 0x7f330ba13160>, manual=<certbot.cli._Default object at 0x7f330ba13908>, manual_auth_hook=<certbot.cli._Default object at 0x7f330ba15470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f330ba15550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f330ba15630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f330b9ec9e8>, nginx=<certbot.cli._Default object at 0x7f330ba13710>, nginx_ctl=<certbot.cli._Default object at 0x7f330ba157f0>, nginx_server_root=<certbot.cli._Default object at 0x7f330ba15438>, no_bootstrap=<certbot.cli._Default object at 0x7f330b9f76d8>, no_self_upgrade=<certbot.cli._Default object at 0x7f330b9f75f8>, no_verify_ssl=<certbot.cli._Default object at 0x7f330b9e4668>, noninteractive_mode=<certbot.cli._Default object at 0x7f330b9eca58>, num=<certbot.cli._Default object at 0x7f330ba11080>, os_packages_only=<certbot.cli._Default object at 0x7f330b9f7518>, post_hook=<certbot.cli._Default object at 0x7f330b9f72b0>, pre_hook=<certbot.cli._Default object at 0x7f330b9f74a8>, pref_challs=<certbot.cli._Default object at 0x7f330b9f7668>, prepare=<certbot.cli._Default object at 0x7f330ba11908>, quiet=True, reason=<certbot.cli._Default object at 0x7f330ba11470>, redirect=<certbot.cli._Default object at 0x7f330b9ecc88>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f330b9ec390>, reinstall=<certbot.cli._Default object at 0x7f330b9e4cc0>, renew_by_default=<certbot.cli._Default object at 0x7f330b9e42b0>, renew_hook=<certbot.cli._Default object at 0x7f330b9f7b38>, renew_with_new_domains=<certbot.cli._Default object at 0x7f330b9e45c0>, rsa_key_size=<certbot.cli._Default object at 0x7f330b9ec748>, server=<certbot.cli._Default object at 0x7f330ba13240>, staging=<certbot.cli._Default object at 0x7f330b9f7898>, standalone=<certbot.cli._Default object at 0x7f330ba13828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f330ba158d0>, staple=<certbot.cli._Default object at 0x7f330b9f4dd8>, strict_permissions=<certbot.cli._Default object at 0x7f330b9f7828>, text_mode=<certbot.cli._Default object at 0x7f330b9eccf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f330b9e4ac8>, tls_sni_01_port=<certbot.cli._Default object at 0x7f330b9e4828>, tos=<certbot.cli._Default object at 0x7f330b9f7048>, uir=<certbot.cli._Default object at 0x7f330b9f4978>, update_registration=<certbot.cli._Default object at 0x7f330b9ec240>, user_agent=<certbot.cli._Default object at 0x7f330ba11198>, user_agent_comment=<certbot.cli._Default object at 0x7f330ba111d0>, validate_hooks=<certbot.cli._Default object at 0x7f330b9f7cf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f330b9ece48>, webroot=<certbot.cli._Default object at 0x7f330ba13a20>, webroot_map=<certbot.cli._Default object at 0x7f330ba15a90>, webroot_path=<certbot.cli._Default object at 0x7f330ba15710>, work_dir=<certbot.cli._Default object at 0x7f330ba13080>)
2023-11-24 09:07:13,057:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-24 09:07:13,057:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-24 09:07:13,058:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-24 09:07:13,434:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f330ba11d30>
Prep: True
2023-11-24 09:07:13,439:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f330ba11d30>
Prep: True
2023-11-24 09:07:13,440:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f330ba11d30> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f330ba11d30>
2023-11-24 09:07:13,440:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-24 09:07:13,446:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f330b975588>)>)), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-24 09:07:13,450:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-24 09:07:13,456:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-24 09:07:13,460:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f330b98e6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-24 09:07:13,468:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f330b98e6d8>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f330b98e6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f330b98e6d8>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-24 09:07:13,468:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-24 09:07:13,469:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-24 09:07:13,469:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-24 21:25:41,231:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-24 21:25:41,233:DEBUG:certbot.main:Arguments: ['-q']
2023-11-24 21:25:41,233:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-24 21:25:41,249:DEBUG:certbot.log:Root logging level set at 30
2023-11-24 21:25:41,249:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-24 21:25:41,266:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f62cb291358> and installer <certbot.cli._Default object at 0x7f62cb291358>
2023-11-24 21:25:41,266:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f62cb275320>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f62cb275160>, apache=<certbot.cli._Default object at 0x7f62cb2915f8>, authenticator=<certbot.cli._Default object at 0x7f62cb291358>, break_my_certs=<certbot.cli._Default object at 0x7f62cb26a470>, cert_path=<certbot.cli._Default object at 0x7f62cb28fbe0>, certname=<certbot.cli._Default object at 0x7f62cb26a668>, chain_path=<certbot.cli._Default object at 0x7f62cb28fe80>, checkpoints=<certbot.cli._Default object at 0x7f62cb28f710>, config_dir=<certbot.cli._Default object at 0x7f62cb28ff60>, config_file=None, configurator=<certbot.cli._Default object at 0x7f62cb291358>, csr=<certbot.cli._Default object at 0x7f62cb28f358>, debug=<certbot.cli._Default object at 0x7f62cb275978>, debug_challenges=<certbot.cli._Default object at 0x7f62cb275a90>, delete_after_revoke=<certbot.cli._Default object at 0x7f62cb28f550>, deploy_hook=<certbot.cli._Default object at 0x7f62cb275c18>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7f62cb275dd8>, dns_cloudflare=<certbot.cli._Default object at 0x7f62cb291b38>, dns_cloudxns=<certbot.cli._Default object at 0x7f62cb291c18>, dns_digitalocean=<certbot.cli._Default object at 0x7f62cb291cf8>, dns_dnsimple=<certbot.cli._Default object at 0x7f62cb291dd8>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7f62cb291eb8>, dns_google=<certbot.cli._Default object at 0x7f62cb291f98>, dns_luadns=<certbot.cli._Default object at 0x7f62cb2930b8>, dns_nsone=<certbot.cli._Default object at 0x7f62cb293198>, dns_rfc2136=<certbot.cli._Default object at 0x7f62cb293278>, dns_route53=<certbot.cli._Default object at 0x7f62cb293358>, domains=<certbot.cli._Default object at 0x7f62cb26a7b8>, dry_run=<certbot.cli._Default object at 0x7f62cb26a518>, duplicate=<certbot.cli._Default object at 0x7f62cb275438>, eff_email=<certbot.cli._Default object at 0x7f62cb262f60>, email=<certbot.cli._Default object at 0x7f62cb26a0f0>, expand=<certbot.cli._Default object at 0x7f62cb262b00>, force_interactive=<certbot.cli._Default object at 0x7f62cb26a908>, fullchain_path=<certbot.cli._Default object at 0x7f62cb28fda0>, func=<function renew at 0x7f62cb3712f0>, hsts=<certbot.cli._Default object at 0x7f62cb26d748>, http01_address=<certbot.cli._Default object at 0x7f62cb26a1d0>, http01_port=<certbot.cli._Default object at 0x7f62cb262dd8>, ifaces=<certbot.cli._Default object at 0x7f62cb28fa20>, init=<certbot.cli._Default object at 0x7f62cb28f7f0>, installer=<certbot.cli._Default object at 0x7f62cb291358>, key_path=<certbot.cli._Default object at 0x7f62cb28fcc0>, logs_dir=<certbot.cli._Default object at 0x7f62cb291160>, manual=<certbot.cli._Default object at 0x7f62cb291908>, manual_auth_hook=<certbot.cli._Default object at 0x7f62cb293470>, manual_cleanup_hook=<certbot.cli._Default object at 0x7f62cb293550>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f62cb293630>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7f62cb26a9e8>, nginx=<certbot.cli._Default object at 0x7f62cb291710>, nginx_ctl=<certbot.cli._Default object at 0x7f62cb2937f0>, nginx_server_root=<certbot.cli._Default object at 0x7f62cb293438>, no_bootstrap=<certbot.cli._Default object at 0x7f62cb2756d8>, no_self_upgrade=<certbot.cli._Default object at 0x7f62cb2755f8>, no_verify_ssl=<certbot.cli._Default object at 0x7f62cb262748>, noninteractive_mode=<certbot.cli._Default object at 0x7f62cb26aa58>, num=<certbot.cli._Default object at 0x7f62cb28f080>, os_packages_only=<certbot.cli._Default object at 0x7f62cb275518>, post_hook=<certbot.cli._Default object at 0x7f62cb2752b0>, pre_hook=<certbot.cli._Default object at 0x7f62cb2754a8>, pref_challs=<certbot.cli._Default object at 0x7f62cb275668>, prepare=<certbot.cli._Default object at 0x7f62cb28f908>, quiet=True, reason=<certbot.cli._Default object at 0x7f62cb28f470>, redirect=<certbot.cli._Default object at 0x7f62cb26ac88>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f62cb26a390>, reinstall=<certbot.cli._Default object at 0x7f62cb262cc0>, renew_by_default=<certbot.cli._Default object at 0x7f62cb2624a8>, renew_hook=<certbot.cli._Default object at 0x7f62cb275b38>, renew_with_new_domains=<certbot.cli._Default object at 0x7f62cb2626a0>, rsa_key_size=<certbot.cli._Default object at 0x7f62cb26a748>, server=<certbot.cli._Default object at 0x7f62cb291240>, staging=<certbot.cli._Default object at 0x7f62cb275898>, standalone=<certbot.cli._Default object at 0x7f62cb291828>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f62cb2938d0>, staple=<certbot.cli._Default object at 0x7f62cb272dd8>, strict_permissions=<certbot.cli._Default object at 0x7f62cb275828>, text_mode=<certbot.cli._Default object at 0x7f62cb26acf8>, tls_sni_01_address=<certbot.cli._Default object at 0x7f62cb262ac8>, tls_sni_01_port=<certbot.cli._Default object at 0x7f62cb262828>, tos=<certbot.cli._Default object at 0x7f62cb275048>, uir=<certbot.cli._Default object at 0x7f62cb272978>, update_registration=<certbot.cli._Default object at 0x7f62cb26a240>, user_agent=<certbot.cli._Default object at 0x7f62cb28f198>, user_agent_comment=<certbot.cli._Default object at 0x7f62cb28f1d0>, validate_hooks=<certbot.cli._Default object at 0x7f62cb275cf8>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f62cb26ae48>, webroot=<certbot.cli._Default object at 0x7f62cb291a20>, webroot_map=<certbot.cli._Default object at 0x7f62cb293a90>, webroot_path=<certbot.cli._Default object at 0x7f62cb293710>, work_dir=<certbot.cli._Default object at 0x7f62cb291080>)
2023-11-24 21:25:41,285:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-24 21:25:41,286:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-24 21:25:41,286:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-24 21:25:41,605:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f62cb28fb70>
Prep: True
2023-11-24 21:25:41,610:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7f62cb28fb70>
Prep: True
2023-11-24 21:25:41,610:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7f62cb28fb70> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7f62cb28fb70>
2023-11-24 21:25:41,610:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-24 21:25:41,617:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f62cb1f2630>)>), status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', contact=('mailto:snoof@list.ru',)), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-24 21:25:41,619:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-24 21:25:41,624:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-24 21:25:41,628:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f62cb20a668>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-24 21:25:41,638:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f62cb20a668>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f62cb20a668>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f62cb20a668>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-24 21:25:41,639:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-24 21:25:41,639:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-24 21:25:41,640:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-25 09:21:26,338:DEBUG:certbot.main:certbot version: 0.21.1
2023-11-25 09:21:26,340:DEBUG:certbot.main:Arguments: ['-q']
2023-11-25 09:21:26,341:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 09:21:26,364:DEBUG:certbot.log:Root logging level set at 30
2023-11-25 09:21:26,366:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 09:21:26,384:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7fc4ebbad208> and installer <certbot.cli._Default object at 0x7fc4ebbad208>
2023-11-25 09:21:26,385:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7fc4ebb92048>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7fc4ebb7e7f0>, apache=<certbot.cli._Default object at 0x7fc4ebbad4a8>, authenticator=<certbot.cli._Default object at 0x7fc4ebbad208>, break_my_certs=<certbot.cli._Default object at 0x7fc4ebb86160>, cert_path=<certbot.cli._Default object at 0x7fc4ebbaba90>, certname=<certbot.cli._Default object at 0x7fc4ebb86748>, chain_path=<certbot.cli._Default object at 0x7fc4ebbabd30>, checkpoints=<certbot.cli._Default object at 0x7fc4ebbab5c0>, config_dir=<certbot.cli._Default object at 0x7fc4ebbabe10>, config_file=None, configurator=<certbot.cli._Default object at 0x7fc4ebbad208>, csr=<certbot.cli._Default object at 0x7fc4ebbab208>, debug=<certbot.cli._Default object at 0x7fc4ebb92898>, debug_challenges=<certbot.cli._Default object at 0x7fc4ebb929b0>, delete_after_revoke=<certbot.cli._Default object at 0x7fc4ebbab400>, deploy_hook=<certbot.cli._Default object at 0x7fc4ebb92320>, dialog=None, directory_hooks=<certbot.cli._Default object at 0x7fc4ebb92c88>, dns_cloudflare=<certbot.cli._Default object at 0x7fc4ebbad9e8>, dns_cloudxns=<certbot.cli._Default object at 0x7fc4ebbadac8>, dns_digitalocean=<certbot.cli._Default object at 0x7fc4ebbadba8>, dns_dnsimple=<certbot.cli._Default object at 0x7fc4ebbadc88>, dns_dnsmadeeasy=<certbot.cli._Default object at 0x7fc4ebbadd68>, dns_google=<certbot.cli._Default object at 0x7fc4ebbade48>, dns_luadns=<certbot.cli._Default object at 0x7fc4ebbadf28>, dns_nsone=<certbot.cli._Default object at 0x7fc4ebbaf048>, dns_rfc2136=<certbot.cli._Default object at 0x7fc4ebbaf128>, dns_route53=<certbot.cli._Default object at 0x7fc4ebbaf208>, domains=<certbot.cli._Default object at 0x7fc4ebb86898>, dry_run=<certbot.cli._Default object at 0x7fc4ebb865f8>, duplicate=<certbot.cli._Default object at 0x7fc4ebb92358>, eff_email=<certbot.cli._Default object at 0x7fc4ebb860b8>, email=<certbot.cli._Default object at 0x7fc4ebb861d0>, expand=<certbot.cli._Default object at 0x7fc4ebb7ec50>, force_interactive=<certbot.cli._Default object at 0x7fc4ebb869e8>, fullchain_path=<certbot.cli._Default object at 0x7fc4ebbabc50>, func=<function renew at 0x7fc4ebc8d2f0>, hsts=<certbot.cli._Default object at 0x7fc4ebb86e80>, http01_address=<certbot.cli._Default object at 0x7fc4ebb7ee48>, http01_port=<certbot.cli._Default object at 0x7fc4ebb7ea58>, ifaces=<certbot.cli._Default object at 0x7fc4ebbab8d0>, init=<certbot.cli._Default object at 0x7fc4ebbab6a0>, installer=<certbot.cli._Default object at 0x7fc4ebbad208>, key_path=<certbot.cli._Default object at 0x7fc4ebbabb70>, logs_dir=<certbot.cli._Default object at 0x7fc4ebbabfd0>, manual=<certbot.cli._Default object at 0x7fc4ebbad7b8>, manual_auth_hook=<certbot.cli._Default object at 0x7fc4ebbaf320>, manual_cleanup_hook=<certbot.cli._Default object at 0x7fc4ebbaf400>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7fc4ebbaf4e0>, max_log_backups='0', must_staple=<certbot.cli._Default object at 0x7fc4ebb866a0>, nginx=<certbot.cli._Default object at 0x7fc4ebbad5c0>, nginx_ctl=<certbot.cli._Default object at 0x7fc4ebbaf6a0>, nginx_server_root=<certbot.cli._Default object at 0x7fc4ebbaf2e8>, no_bootstrap=<certbot.cli._Default object at 0x7fc4ebb925f8>, no_self_upgrade=<certbot.cli._Default object at 0x7fc4ebb92518>, no_verify_ssl=<certbot.cli._Default object at 0x7fc4ebb92a90>, noninteractive_mode=<certbot.cli._Default object at 0x7fc4ebb86b38>, num=<certbot.cli._Default object at 0x7fc4ebb92ef0>, os_packages_only=<certbot.cli._Default object at 0x7fc4ebb92438>, post_hook=<certbot.cli._Default object at 0x7fc4ebb926a0>, pre_hook=<certbot.cli._Default object at 0x7fc4ebb92860>, pref_challs=<certbot.cli._Default object at 0x7fc4ebb92a58>, prepare=<certbot.cli._Default object at 0x7fc4ebbab7b8>, quiet=True, reason=<certbot.cli._Default object at 0x7fc4ebbab320>, redirect=<certbot.cli._Default object at 0x7fc4ebb86940>, register_unsafely_without_email=<certbot.cli._Default object at 0x7fc4ebb864a8>, reinstall=<certbot.cli._Default object at 0x7fc4ebb7eda0>, renew_by_default=<certbot.cli._Default object at 0x7fc4ebb7e080>, renew_hook=<certbot.cli._Default object at 0x7fc4ebb924e0>, renew_with_new_domains=<certbot.cli._Default object at 0x7fc4ebb7e5f8>, rsa_key_size=<certbot.cli._Default object at 0x7fc4ebb863c8>, server=<certbot.cli._Default object at 0x7fc4ebbad0f0>, staging=<certbot.cli._Default object at 0x7fc4ebb927b8>, standalone=<certbot.cli._Default object at 0x7fc4ebbad6d8>, standalone_supported_challenges=<certbot.cli._Default object at 0x7fc4ebbaf780>, staple=<certbot.cli._Default object at 0x7fc4ebb8fac8>, strict_permissions=<certbot.cli._Default object at 0x7fc4ebb8fef0>, text_mode=<certbot.cli._Default object at 0x7fc4ebb86dd8>, tls_sni_01_address=<certbot.cli._Default object at 0x7fc4ebb7e438>, tls_sni_01_port=<certbot.cli._Default object at 0x7fc4ebb92b70>, tos=<certbot.cli._Default object at 0x7fc4ebb92198>, uir=<certbot.cli._Default object at 0x7fc4ebb8f940>, update_registration=<certbot.cli._Default object at 0x7fc4ebb86320>, user_agent=<certbot.cli._Default object at 0x7fc4ebbab048>, user_agent_comment=<certbot.cli._Default object at 0x7fc4ebbab080>, validate_hooks=<certbot.cli._Default object at 0x7fc4ebb92278>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7fc4ebb86f28>, webroot=<certbot.cli._Default object at 0x7fc4ebbad8d0>, webroot_map=<certbot.cli._Default object at 0x7fc4ebbaf940>, webroot_path=<certbot.cli._Default object at 0x7fc4ebbaf5c0>, work_dir=<certbot.cli._Default object at 0x7fc4ebbabef0>)
2023-11-25 09:21:26,408:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 09:21:26,408:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 09:21:26,409:DEBUG:certbot.plugins.selection:Requested authenticator nginx and installer nginx
2023-11-25 09:21:26,842:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fc4ebbabcc0>
Prep: True
2023-11-25 09:21:26,852:DEBUG:certbot.plugins.selection:Single candidate plugin: * nginx
Description: Nginx Web Server plugin - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: nginx = certbot_nginx.configurator:NginxConfigurator
Initialized: <certbot_nginx.configurator.NginxConfigurator object at 0x7fc4ebbabcc0>
Prep: True
2023-11-25 09:21:26,853:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_nginx.configurator.NginxConfigurator object at 0x7fc4ebbabcc0> and installer <certbot_nginx.configurator.NginxConfigurator object at 0x7fc4ebbabcc0>
2023-11-25 09:21:26,853:INFO:certbot.plugins.selection:Plugins selected: Authenticator nginx, Installer nginx
2023-11-25 09:21:26,863:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(contact=('mailto:snoof@list.ru',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fc4ebb10588>)>), status=None), terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 09:21:26,868:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2023-11-25 09:21:26,874:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2023-11-25 09:21:26,881:WARNING:certbot.renewal:Attempting to renew cert (onmusicstage.com) from /etc/letsencrypt/renewal/onmusicstage.com.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fc4ebb285c0>: Failed to establish a new connection: [Errno -2] Name or service not known',)). Skipping.
2023-11-25 09:21:26,895:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 141, in _new_conn
    (self.host, self.port), self.timeout, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 60, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.5/socket.py", line 732, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
    chunked=chunked)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 846, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 284, in connect
    conn = self._new_conn()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 150, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7fc4ebb285c0>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 440, in send
    timeout=timeout
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 649, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 388, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fc4ebb285c0>: Failed to establish a new connection: [Errno -2] Name or service not known',))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 425, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1063, in renew_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 639, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 235, in __init__
    acme = acme_from_config_key(config, self.account.key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 45, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 72, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python3/dist-packages/acme/client.py", line 681, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 630, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 502, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python3/dist-packages/requests/sessions.py", line 612, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python3/dist-packages/requests/adapters.py", line 504, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v01.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7fc4ebb285c0>: Failed to establish a new connection: [Errno -2] Name or service not known',))

2023-11-25 09:21:26,896:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2023-11-25 09:21:26,896:ERROR:certbot.renewal:  /etc/letsencrypt/live/onmusicstage.com/fullchain.pem (failure)
2023-11-25 09:21:26,897:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.21.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1240, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1142, in renew
    renewal.handle_renewal_request(config)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 443, in handle_renewal_request
    len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
2023-11-25 19:58:22,178:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 19:58:22,180:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 19:58:22,180:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 19:58:22,201:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 19:58:22,202:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 19:58:22,205:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 19:58:22,432:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 19:58:23,355:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7fbcd63ea780>
Prep: True
2023-11-25 19:58:23,364:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7fbcd63ea780> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7fbcd63ea780>
2023-11-25 19:58:23,364:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 19:58:23,385:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(external_account_binding=None, status=None, terms_of_service_agreed=None, key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fbcd62c24e0>)>), only_return_existing=None, contact=('mailto:snoof@list.ru',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 19:58:23,392:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 19:58:23,403:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 19:58:23,941:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 19:58:23,943:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:23 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "VIsUug75GSY": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 19:58:23,961:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 19:58:23,961:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 19:58:23,962:INFO:certbot.main:Renewing an existing certificate
2023-11-25 19:58:24,090:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0025_key-certbot.pem
2023-11-25 19:58:24,096:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0025_csr-certbot.pem
2023-11-25 19:58:24,097:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 19:58:24,097:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 19:58:24,232:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 19:58:24,233:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:24 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: nbWKegf8ng10UMif1IQqeTBEwdx9cRHwyYV1R7RDPaAI-6lVCww
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 19:58:24,234:DEBUG:acme.client:Storing nonce: nbWKegf8ng10UMif1IQqeTBEwdx9cRHwyYV1R7RDPaAI-6lVCww
2023-11-25 19:58:24,234:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "value": "onmusicstage.com",\n      "type": "dns"\n    },\n    {\n      "value": "www.onmusicstage.com",\n      "type": "dns"\n    }\n  ]\n}'
2023-11-25 19:58:24,240:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXQp9",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIlJTMjU2IiwgIm5vbmNlIjogIm5iV0tlZ2Y4bmcxMFVNaWYxSVFxZVRCRXdkeDljUkh3eVlWMVI3UkRQYUFJLTZsVkN3dyJ9",
  "signature": "VuUc9fCLupULkiqww6sJxAUyn8CthShh7liY-fI6m4bHNQhoey_FWCCQKB5VyAKpW_ztkiUEuh6dKHqMVv7JvPE1QwKLJWvS5FryaejjhLgOB_kJJcOy40JWKV17wqXV_1xtg9GHW2-PjXuIfxxVuMCfIRIzpOzm4eLEZVuom0O6DFl6Bj8Iy_HZUI9-zf3S4FBYsB0VKuAC8ziX9pVNvmYRaiZDq8r_2HcANYUbXKMW6GJHkIr8kb_0mpisNm9rIhD3-Y7CmpdYx9h_V9YYJzI6zthfyZgVM8smVHeFohbWQw45CNZOAH1MOIHXTMsnOXozmUZzn43uVA0O3F1Sgw"
}
2023-11-25 19:58:24,566:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 19:58:24,568:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 16:58:24 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224754340926
Replay-Nonce: v0bMowfiLEGLiZsiitT7SnUKzdI9p5cbwmUigj12elDD_UTgO3o
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T16:58:24Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068886",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068896"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224754340926"
}
2023-11-25 19:58:24,568:DEBUG:acme.client:Storing nonce: v0bMowfiLEGLiZsiitT7SnUKzdI9p5cbwmUigj12elDD_UTgO3o
2023-11-25 19:58:24,569:DEBUG:acme.client:JWS payload:
b''
2023-11-25 19:58:24,572:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068886:
{
  "payload": "",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My8yODc0MjgwNjg4ODYiLCAiYWxnIjogIlJTMjU2IiwgIm5vbmNlIjogInYwYk1vd2ZpTEVHTGlac2lpdFQ3U25VS3pkSTlwNWNid21VaWdqMTJlbEREX1VUZ08zbyJ9",
  "signature": "Xs2w91hrInjHQYjHL3EkT4InXYWJExtrI4FbRJ2XVIhMF4HU8g678UNvKJZOVW8UiopZQIVymNDsYocydD_V4skCb_y7sSzBUWzr6HScbUnXRcD4t_KK6ZtgtZRdZo0xSObBLdCsUIXyzKhdWelzOb7BcgEJ4JAD0atSguXzXipQAvwWCppfdr9ZoLObnKpLtJKIvKiSr-K_RLW-zrkHAlowlwfTtBTwvyr9zU_t3mCqOQhGR2JktbPBSULDLJuOyuMedecffCiwBm8diQ_f2EoIol9sQ-co6SeKAwW2CRKmmCcdkS3KcGo-gFiWdoMDE-hvL2nz0q2-TlOXXLJwgA"
}
2023-11-25 19:58:24,719:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287428068886 HTTP/1.1" 200 800
2023-11-25 19:58:24,720:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:24 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: v0bMowfijkd-SXY3WF2MZfUhPcjuX6tnmE4NoRXPark1N_sJvOg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T16:58:24Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/5PMyzA",
      "token": "IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/0VMtUw",
      "token": "IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/PrFM_A",
      "token": "IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk"
    }
  ]
}
2023-11-25 19:58:24,720:DEBUG:acme.client:Storing nonce: v0bMowfijkd-SXY3WF2MZfUhPcjuX6tnmE4NoRXPark1N_sJvOg
2023-11-25 19:58:24,721:DEBUG:acme.client:JWS payload:
b''
2023-11-25 19:58:24,724:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068896:
{
  "payload": "",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My8yODc0MjgwNjg4OTYiLCAiYWxnIjogIlJTMjU2IiwgIm5vbmNlIjogInYwYk1vd2ZpamtkLVNYWTNXRjJNWmZVaFBjanVYNnRubUU0Tm9SWFBhcmsxTl9zSnZPZyJ9",
  "signature": "iyVm5kUDwYzmhTczaoxU6Z96xKFyU_Wo3Noy1gc3oyNzcWzvKjiBbfO56UponrXJr5XW22iiVaExZ8aDB0UqJ_niqLvHTHxBXHhwDkLNZHTXevJTo8mliS8DYO5vnBTRZDqdPnc_DbKNXfo9KtSzUp3z2ZPLaP2ufqrJOqkMy7ncvr-tmfvf1oOj69RI2H9001aNaLv5MzZTSZrCThnqNd97Cj-SYCr1yujzpsHAmcBSNZu-qCSuHTeLSXE_y9BAswdtifl_bSZRSjWSAu0xGTx2UeBc0i5i6k64mz1NNaf2quer-t3xEWTXhEG2Kz4yai_5bnl5speXav_f6696cg"
}
2023-11-25 19:58:24,863:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287428068896 HTTP/1.1" 200 804
2023-11-25 19:58:24,865:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:24 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: v0bMowfiBzw0ifGBC6rB7Rmiaea3q1Do9_W2XQZgDDeYQdJEoBE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T16:58:24Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/ULFkKQ",
      "token": "GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/cZs9Nw",
      "token": "GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/aNGzdg",
      "token": "GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c"
    }
  ]
}
2023-11-25 19:58:24,865:DEBUG:acme.client:Storing nonce: v0bMowfiBzw0ifGBC6rB7Rmiaea3q1Do9_W2XQZgDDeYQdJEoBE
2023-11-25 19:58:24,866:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 19:58:24,866:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 19:58:24,867:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 19:58:24,975:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: onmusicstage.com in: /etc/apache2/sites-enabled/oms.conf
2023-11-25 19:58:24,975:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2023-11-25 19:58:24,976:DEBUG:certbot_apache.http_01:writing a pre config file with text:
         RewriteEngine on
        RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2023-11-25 19:58:24,977:DEBUG:certbot_apache.http_01:writing a post config file with text:
         <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2023-11-25 19:58:25,020:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2023-11-25 19:58:25,021:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/oms.conf
2023-11-25 19:58:25,022:DEBUG:certbot.reverter:Creating backup of /etc/apache2/ports.conf
2023-11-25 19:58:28,464:INFO:certbot.auth_handler:Waiting for verification...
2023-11-25 19:58:28,466:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 19:58:28,473:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/5PMyzA:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My8yODc0MjgwNjg4ODYvNVBNeXpBIiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJ2MGJNb3dmaUJ6dzBpZkdCQzZyQjdSbWlhZWEzcTFEbzlfVzJYUVpnRERlWVFkSkVvQkUifQ",
  "signature": "F7GYJvgW3nHFGecLP_pjVa4XBqah2Kzqf62_5RaLPkO8eEZ1LBeRIa6uintsYQeXgcpTXSar-PK1H2vPm713zYSHLNgUp3Uzt7ImnthAo0wQNuCR5MQ94QVbyfQEwfdTwXArJBskfZD0SVHKIBLprajilg8XCmJefCfyefmDR3uLXnV1Jr7LZsANoVI8rxCjVyNE5ajBpd1GjgW7so34FGsAwhkZX407580-TLzGEYMjkMwSK873YyBiFe06XTe6c3uBDbDul-4ALBUEH89zZIpXTYLQcZXkzlFUCh-F6WodPCAYUHPG7ASBBR1T1Nxg_gW8o3V6TAeWMRH6a3D1Rg"
}
2023-11-25 19:58:28,632:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287428068886/5PMyzA HTTP/1.1" 200 187
2023-11-25 19:58:28,635:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:28 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068886>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/5PMyzA
Replay-Nonce: nbWKegf883qIzVKHMnVVYA1eMxF4qCcP_ckQhgwUR7UcPZCNFfo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/5PMyzA",
  "token": "IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk"
}
2023-11-25 19:58:28,635:DEBUG:acme.client:Storing nonce: nbWKegf883qIzVKHMnVVYA1eMxF4qCcP_ckQhgwUR7UcPZCNFfo
2023-11-25 19:58:28,638:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 19:58:28,648:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/ULFkKQ:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My8yODc0MjgwNjg4OTYvVUxGa0tRIiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJuYldLZWdmODgzcUl6VktITW5WVllBMWVNeEY0cUNjUF9ja1FoZ3dVUjdVY1BaQ05GZm8ifQ",
  "signature": "IodMLBul7_KcBPb0kMuQDZXy1kiF1iB-kwh_n7m6O8UlwpggGhOayAxZPedBsS5dwTcsnC5h2TeXi5N5x91TcNgBqX3ICPfLDAgjyOzjQ5oSQSPbbiZepVUxYidxEhEYlHK-Jx1aRo3S1RGnSgdxVDMMnb4SXT9N8GcBBzN3VBZWojRZ8hpUpfCwVBTCbNd8vqgO00r5RFy6XaqQmn-lO5PRQLR8g4PDFsbutYDKWLfZU5Jkjonk9mjEe1sANqKJwfC_tD83PXKySOZ01TwL0hxDyRAY9q8-vUBgjei_psXnLNpnOlkC5ebHUUhWroFap4SuHYKtWi4aiohD706zrA"
}
2023-11-25 19:58:28,790:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287428068896/ULFkKQ HTTP/1.1" 200 187
2023-11-25 19:58:28,793:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:28 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068896>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/ULFkKQ
Replay-Nonce: nbWKegf8vfR1kgLk8Hu4QVKaWtv9xV91efSRS6L4M7paB2EuSNU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/ULFkKQ",
  "token": "GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c"
}
2023-11-25 19:58:28,793:DEBUG:acme.client:Storing nonce: nbWKegf8vfR1kgLk8Hu4QVKaWtv9xV91efSRS6L4M7paB2EuSNU
2023-11-25 19:58:31,798:DEBUG:acme.client:JWS payload:
b''
2023-11-25 19:58:31,804:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068886:
{
  "payload": "",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My8yODc0MjgwNjg4ODYiLCAiYWxnIjogIlJTMjU2IiwgIm5vbmNlIjogIm5iV0tlZ2Y4dmZSMWtnTGs4SHU0UVZLYVd0djl4VjkxZWZTUlM2TDRNN3BhQjJFdVNOVSJ9",
  "signature": "fT3UXX57T6iN4a_B2yJCEwOrHHXqCgLdQQwUZV3P7CmtqPTXNhUQp9SvT6c6ssrIBzL0GkWFnskKdglMGPTtkj6_h6nH8Fx7ENNVN7NgnWj2FBCDiXbbQlRxFdWi4jgjTg2L0Ke-k6WCZ3iZPdCW8tMMkpj3kscXPoZ76Pcc4-6j7oyXPgnGTtXLbkX0LXOkBpfcF6qQgGQjiu6zz-Zcz1M_FEorl_E0vRLs2h4aOsBndf8dLqRY0cYnNBUb60lHkPbESi2WFaPooaDcLcTR3ne9Akvx06R-H7Q65t71VMe3CyrND-_bImw17J4DBZ48l5n_8RiMbwtLPF2JzeE-Pw"
}
2023-11-25 19:58:31,942:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287428068886 HTTP/1.1" 200 1032
2023-11-25 19:58:31,944:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:31 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: nbWKegf8gOO0QTzs6qCDY1ZPmrrlWOfLznULkZQs8sSSLu30nrc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T16:58:24Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068886/5PMyzA",
      "token": "IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk",
      "validationRecord": [
        {
          "url": "http://onmusicstage.com/.well-known/acme-challenge/IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk",
          "hostname": "onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T16:58:28Z"
    }
  ]
}
2023-11-25 19:58:31,944:DEBUG:acme.client:Storing nonce: nbWKegf8gOO0QTzs6qCDY1ZPmrrlWOfLznULkZQs8sSSLu30nrc
2023-11-25 19:58:31,946:DEBUG:acme.client:JWS payload:
b''
2023-11-25 19:58:31,949:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287428068896:
{
  "payload": "",
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My8yODc0MjgwNjg4OTYiLCAiYWxnIjogIlJTMjU2IiwgIm5vbmNlIjogIm5iV0tlZ2Y4Z09PMFFUenM2cUNEWTFaUG1ycmxXT2ZMem5VTGtaUXM4c1NTTHUzMG5yYyJ9",
  "signature": "kJK7pkTnbChd59SLHZIlEzBhcjBEPrhVY_-g0GeYTwtPZFAWhUGY--WdxhaAYJSCJqeuKSoj_NOpECK8PFlVmr-3voJwyrvgaquliQy2Y0jo0tUka9FxOkwVoABjssml6Ao3wm7fOz2vlNjjIpMlwmp6gdhx85aEYpWI4AU52C_e-SHgYSb8PGMC31Dkegsh6BRPK3khiQnDPPD0cyvIq05o8KQiY5Y7zriYDnl-IEvWnNOe5ugHDKEf_h99_q7zAukOgdr7IKTnYa8G-okiLyiT9zVVB5mmgUPbYkJ7sHP3pr8S3Xgk2-jhasAW7f1KVheNTQKEhxUzXlC7hpL-lA"
}
2023-11-25 19:58:32,086:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287428068896 HTTP/1.1" 200 1048
2023-11-25 19:58:32,088:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 16:58:32 GMT
Content-Type: application/json
Content-Length: 1048
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: nbWKegf8LF1hNHP0_PFSrFtvBux8y3XH7VXVBZ8O07GEdCQ_iiA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T16:58:24Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287428068896/ULFkKQ",
      "token": "GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c",
      "validationRecord": [
        {
          "url": "http://www.onmusicstage.com/.well-known/acme-challenge/GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c",
          "hostname": "www.onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T16:58:28Z"
    }
  ]
}
2023-11-25 19:58:32,089:DEBUG:acme.client:Storing nonce: nbWKegf8LF1hNHP0_PFSrFtvBux8y3XH7VXVBZ8O07GEdCQ_iiA
2023-11-25 19:58:32,092:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk: 502

Domain: www.onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c: 502

To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2023-11-25 19:58:32,096:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c: 502

2023-11-25 19:58:32,096:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 19:58:32,097:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 19:58:32,677:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/IIWE5EC4TiPKM6nvXhcB9iHS_w__T6ibBROKwoRjiUk: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GWiok4_zEsu5l6xFiPnU8F2CKweVXAaxNdJDtheTj8c: 502
2023-11-25 20:10:13,859:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:10:13,861:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:10:13,862:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:10:13,882:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:10:13,884:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:10:13,886:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 20:10:14,186:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:10:15,049:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7ff5d9a5a080>
Prep: True
2023-11-25 20:10:15,053:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7ff5d9a5a080> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7ff5d9a5a080>
2023-11-25 20:10:15,054:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 20:10:15,062:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(only_return_existing=None, terms_of_service_agreed=None, contact=('mailto:snoof@list.ru',), external_account_binding=None, key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7ff5d14eae10>)>), status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf')), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 20:10:15,066:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:10:15,071:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:10:15,620:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:10:15,622:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:15 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
  "vvsTGiGcwSI": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}
2023-11-25 20:10:15,658:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:10:15,659:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:10:15,659:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:10:16,117:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0026_key-certbot.pem
2023-11-25 20:10:16,124:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0026_csr-certbot.pem
2023-11-25 20:10:16,126:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:10:16,126:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:10:16,266:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:10:16,267:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:16 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: nbWKegf8P-K99mLjzXR1Tjv3g67FIE021zrJc0owsrYE2yAK4fY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:10:16,268:DEBUG:acme.client:Storing nonce: nbWKegf8P-K99mLjzXR1Tjv3g67FIE021zrJc0owsrYE2yAK4fY
2023-11-25 20:10:16,269:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "onmusicstage.com"\n    },\n    {\n      "type": "dns",\n      "value": "www.onmusicstage.com"\n    }\n  ]\n}'
2023-11-25 20:10:16,277:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iCiAgICB9LAogICAgewogICAgICAidHlwZSI6ICJkbnMiLAogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iCiAgICB9CiAgXQp9",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgIm5vbmNlIjogIm5iV0tlZ2Y4UC1LOTltTGp6WFIxVGp2M2c2N0ZJRTAyMXpySmMwb3dzcllFMnlBSzRmWSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "Jgnek0vmmPDs2gqJPnK1PVky5526OXU4JIzK5SWESRkh8-dWfLP7jqbjsbdVmH6NNuAZAm_61IZvcmwqJQnOMUHfudknFn-KZ3O6BMPLSzxpxZ-a4IedJIzXwLWYJbUuDWW0wpZLce4LsrucXszXX6wipnWTFt0biIt9n83Iy7Ju9SPLbhE563ykxI_L6Qq9y_YOIL3oHS1wv3OhzA4MPnHMNuJCnZ_LDRcbKEBRcJ7f0gkCJKbDtk54eC0A2OLgJ3vd37aj955O3mDUj7GzxPu4U2-yORopQP9pYkd2X6aHVTQUAS0QGJ15-nrqPiFo5vLBYmBxRkytaFij-dXi1w"
}
2023-11-25 20:10:16,587:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 20:10:16,588:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 17:10:16 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224756572996
Replay-Nonce: nbWKegf8lRfkugqA8-GXlnurFLrG6TPchfNhlgjDIQNJtzQlcZU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T17:10:16Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140656",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140666"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224756572996"
}
2023-11-25 20:10:16,589:DEBUG:acme.client:Storing nonce: nbWKegf8lRfkugqA8-GXlnurFLrG6TPchfNhlgjDIQNJtzQlcZU
2023-11-25 20:10:16,590:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:10:16,593:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140656:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxMTQwNjU2IiwgIm5vbmNlIjogIm5iV0tlZ2Y4bFJma3VncUE4LUdYbG51ckZMckc2VFBjaGZOaGxnakRJUU5KdHpRbGNaVSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "jTPFsGuw5ZdBtiOtm6NCsORZRBjUenFZsctRBPFS8GMy_JmH8RCnYeaaYkQB6QRCrBIA6hw5R3pviBC65UaWMpWggiYTesqKnDn7ynufSHrNfu0eDQLf4YjLZhDg-bY55jGI-P4gD7IVvsaX4O7wvJktZ7shnM1iGSTISUIUbpEQvo19BnbNiaBnwYKUHQ31N2d7_7a32FdE_ucmjt94PzJqiDT1xNXpv5ibSg04cv5YsM6-gO8XCQwlohK-74cmg83PbGQAUkeqTnIqVGS-Hhd5lMaZpadCK79LhdAjVqtuWoxhBx5q9MO0Bm-iXw43xi5-KXy8thCzZUzkluAblQ"
}
2023-11-25 20:10:16,740:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431140656 HTTP/1.1" 200 800
2023-11-25 20:10:16,742:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:16 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: v0bMowfiMdoy3o8MNt2M9gnz8ZB6M3fBbs0IPCJ4AY1kM6nLTww
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:10:16Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/Wo4a5A",
      "token": "61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/PSLNRQ",
      "token": "61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/o2XZnA",
      "token": "61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4"
    }
  ]
}
2023-11-25 20:10:16,743:DEBUG:acme.client:Storing nonce: v0bMowfiMdoy3o8MNt2M9gnz8ZB6M3fBbs0IPCJ4AY1kM6nLTww
2023-11-25 20:10:16,744:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:10:16,748:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140666:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxMTQwNjY2IiwgIm5vbmNlIjogInYwYk1vd2ZpTWRveTNvOE1OdDJNOWduejhaQjZNM2ZCYnMwSVBDSjRBWTFrTTZuTFR3dyIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "pu-BPBcRE-sPkKt61ReKSIGSwdJq68R0u469lZbTU4cywrU3HlXmJCY4hiC1k6km006rxouYFTGqMrgED8LTe-Uo3LTQr2k95LPGoFaUPnr1zhBLdJLqAHFe6LBkMbMYb7eEiDa5gjgGIGzMvJazJeKFmZLyVfveEBryQiH6lRRmOF3mFKSRfjvghMOVORdZYpXn4qOkyfy6BafCrWGriLJal905ymvyaY6qHEk1wHDtfKHxSdBob71Qm5WAUGTPpeGdNjHjrpgQpXGD3xnhHYAWdiLBOAApA3feTRzi7TQx2Sn5h5fqGceNoxDeYm5XiaUCpFhVRvHKzeZulgChPQ"
}
2023-11-25 20:10:16,893:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431140666 HTTP/1.1" 200 804
2023-11-25 20:10:16,894:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:16 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: v0bMowfi1tfrTG-QMbtB9LK5AyV4wugOLF58x49gZOmgOFPIhtA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:10:16Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/2DtRRQ",
      "token": "Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/9jwrhA",
      "token": "Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/Am6Wnw",
      "token": "Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg"
    }
  ]
}
2023-11-25 20:10:16,895:DEBUG:acme.client:Storing nonce: v0bMowfi1tfrTG-QMbtB9LK5AyV4wugOLF58x49gZOmgOFPIhtA
2023-11-25 20:10:16,896:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 20:10:16,896:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 20:10:16,897:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 20:10:17,046:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: onmusicstage.com in: /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:10:17,047:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:10:17,048:DEBUG:certbot_apache.http_01:writing a pre config file with text:
         RewriteEngine on
        RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2023-11-25 20:10:17,049:DEBUG:certbot_apache.http_01:writing a post config file with text:
         <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2023-11-25 20:10:17,097:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:10:17,100:DEBUG:certbot.reverter:Creating backup of /etc/apache2/ports.conf
2023-11-25 20:10:17,100:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:10:20,528:INFO:certbot.auth_handler:Waiting for verification...
2023-11-25 20:10:20,531:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:10:20,536:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/Wo4a5A:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDMxMTQwNjU2L1dvNGE1QSIsICJub25jZSI6ICJ2MGJNb3dmaTF0ZnJURy1RTWJ0QjlMSzVBeVY0d3VnT0xGNTh4NDlnWk9tZ09GUElodEEiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJhbGciOiAiUlMyNTYifQ",
  "signature": "aQobow6aE7EJLctKO4iQXn5dYjpW_qxmivxQwS6IlBLgwIjaguFSFnLOw1Dhaxn9envh3M6fR-VvejMuUbgcYzs-cLnYCl6cpZUoMIWCMt7aK_nQvG7gMek3I3RIba_V9XsC8VLw76k806ASEyFneNcpRHtX4QddSKygnoSYTEpGtXx4adrULZc6exI4pgphYXwdUrHr-CwxTHGiPuAhpUkaO438R9h-IEpztHG8tpN9QlWpL2ZKzEOcVgQUXTh-ZmcNzR_lp2c2gRAvNps16bMFj0m03Qf1MyuuZDHyZIERPYA6RlFdkupZsIHCNP2YIddRAXzWJEWRvlHZSkVq9A"
}
2023-11-25 20:10:20,692:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287431140656/Wo4a5A HTTP/1.1" 200 187
2023-11-25 20:10:20,694:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:20 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140656>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/Wo4a5A
Replay-Nonce: v0bMowfiFxjHcikfnjNQ_T5yuy55rjGoDoZ1eRB3wJuLeXNWiHQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/Wo4a5A",
  "token": "61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4"
}
2023-11-25 20:10:20,694:DEBUG:acme.client:Storing nonce: v0bMowfiFxjHcikfnjNQ_T5yuy55rjGoDoZ1eRB3wJuLeXNWiHQ
2023-11-25 20:10:20,696:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:10:20,699:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/2DtRRQ:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDMxMTQwNjY2LzJEdFJSUSIsICJub25jZSI6ICJ2MGJNb3dmaUZ4akhjaWtmbmpOUV9UNXl1eTU1cmpHb0RvWjFlUkIzd0p1TGVYTldpSFEiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJhbGciOiAiUlMyNTYifQ",
  "signature": "McwXQPoK3IueudBuyyHGnAqB1pBAfqhYz_XouPOCdOrOqSDy8itPJGOtQ2LW-627_9X-mJbkcBqynl0L3OzLDI5z_HIrOixOriWcQTee3RKbY3v-prrXkwb4T0_AnHaeXMxvPSlLS5r4DqvN3R2vvCBaCBVtPOk0MdQcbBP3e4KLlXXgXTwYtSRmYvNSlk16ZvXxE6HZUKvLCIeDXNVe0049O24apgXqpE4Ua5mLCX4HefNhRJHdSVkizMwobohG2Sk2BuMSu_WNE12MgR7xiKxrXhFNQB1xnemhG6OaFN5zrsWfe8LpleOCelRv2-f66JuV059e2E0ppBEYjQFAYQ"
}
2023-11-25 20:10:20,842:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287431140666/2DtRRQ HTTP/1.1" 200 187
2023-11-25 20:10:20,843:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:20 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140666>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/2DtRRQ
Replay-Nonce: nbWKegf8Lwp-xVdqKeF3uoHLJMi15zbSTweKatckSgiYuCR8PmQ
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/2DtRRQ",
  "token": "Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg"
}
2023-11-25 20:10:20,844:DEBUG:acme.client:Storing nonce: nbWKegf8Lwp-xVdqKeF3uoHLJMi15zbSTweKatckSgiYuCR8PmQ
2023-11-25 20:10:23,848:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:10:23,851:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140656:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxMTQwNjU2IiwgIm5vbmNlIjogIm5iV0tlZ2Y4THdwLXhWZHFLZUYzdW9ITEpNaTE1emJTVHdlS2F0Y2tTZ2lZdUNSOFBtUSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "g3gR5qDt_2YvzBkZLm5Suq6XxWx7hndlxp9jLFi_OebSJAuebxHttCt0PDXsH8OyoD_M1LMW0_MLBESUWQePQSC41QFArToQxL6B-FdbPC1F40JfbR5zKKyGUuonoIbjRCAeEIhDFIbv2ddIzVl_rKINI4ZuBKpgHDnocE21PakVEpsK246UK1L_O_v8Y91A2d_81lzJLI3bMa6WoySZSSF91iVYS7eqtsH51Xh4eZQb5nY46e9XaL65fBl2roaOPZzYNVV1JDzGjNt-lYn7ssfZt1Fut77Uw_WvtstQQAU1ATLLFCCyqx1zM8hxXiTUzcSz-gWrbEyTyunOJKc_QA"
}
2023-11-25 20:10:23,991:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431140656 HTTP/1.1" 200 1032
2023-11-25 20:10:23,993:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:23 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: v0bMowfiRerespcEc4a3s7ysjluO_MDr_hBdsPb5qtkL-GfOZAE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:10:16Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140656/Wo4a5A",
      "token": "61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4",
      "validationRecord": [
        {
          "url": "http://onmusicstage.com/.well-known/acme-challenge/61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4",
          "hostname": "onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:10:20Z"
    }
  ]
}
2023-11-25 20:10:23,993:DEBUG:acme.client:Storing nonce: v0bMowfiRerespcEc4a3s7ysjluO_MDr_hBdsPb5qtkL-GfOZAE
2023-11-25 20:10:23,995:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:10:23,998:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431140666:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxMTQwNjY2IiwgIm5vbmNlIjogInYwYk1vd2ZpUmVyZXNwY0VjNGEzczd5c2psdU9fTURyX2hCZHNQYjVxdGtMLUdmT1pBRSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "UvXWJAo7sywKz7s0NIvNuwBsVrqAiHJpRxqpejJAEdrcMyEGNssk9tC2LMSO7oL0Bx7P5HJvXT8CyQl6hlxGUNQM8ALA8Q9xTpwsGgfHsgdo4FXS5UAN-aBvsBsolix7wxiGecvkwRu9qlALBq13a2u5wxey-bk1D2vuy6eQN4or3YcEw1sA5DtnN9NvACqaXdqVlZMea4sAsp3QmcQHeQx44RrhutttHWzM_VRrue-pVUPF_WlK6dc1WP73K2bTYs6ogXPlCNcY8ZZU3tmqfvixSnq_cudD1ql1iD-IYg2k98UvpuJw0T30CPGZ7TejVF3kAMCJnQ5Bf_-DCqmaeA"
}
2023-11-25 20:10:24,147:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431140666 HTTP/1.1" 200 1048
2023-11-25 20:10:24,149:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:10:24 GMT
Content-Type: application/json
Content-Length: 1048
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: nbWKegf8yOQstFAM2P9yqLEhyv8a-tnBSqa3JNYSnxmImLLvvbo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:10:16Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431140666/2DtRRQ",
      "token": "Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg",
      "validationRecord": [
        {
          "url": "http://www.onmusicstage.com/.well-known/acme-challenge/Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg",
          "hostname": "www.onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:10:20Z"
    }
  ]
}
2023-11-25 20:10:24,149:DEBUG:acme.client:Storing nonce: nbWKegf8yOQstFAM2P9yqLEhyv8a-tnBSqa3JNYSnxmImLLvvbo
2023-11-25 20:10:24,150:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4: 502

Domain: www.onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg: 502

To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2023-11-25 20:10:24,152:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg: 502

2023-11-25 20:10:24,152:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 20:10:24,152:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 20:10:24,744:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/61wkq5athGItkkSQZkzfmXUAv2O6uGSHCGmcPYst5E4: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/Pl4uJByAu1NrX7CwE9uSq-RrOkA1La2c6FnOM6Y4uFg: 502
2023-11-25 20:12:53,820:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:12:53,822:DEBUG:certbot.main:Arguments: ['--authenticator', 'standalone', '--installer', 'apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com', '--pre-hook', 'service apache2 stop', '--post-hook', 'service apache2 stop']
2023-11-25 20:12:53,823:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:12:53,840:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:12:53,841:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:12:53,842:DEBUG:certbot.plugins.selection:Requested authenticator standalone and installer apache
2023-11-25 20:12:54,063:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:12:54,839:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7f0753bd60f0>
Prep: True
2023-11-25 20:12:54,893:DEBUG:certbot.plugins.selection:Single candidate plugin: * standalone
Description: Spin up a temporary webserver
Interfaces: IAuthenticator, IPlugin
Entry point: standalone = certbot.plugins.standalone:Authenticator
Initialized: <certbot.plugins.standalone.Authenticator object at 0x7f0753aab5f8>
Prep: True
2023-11-25 20:12:54,894:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.standalone.Authenticator object at 0x7f0753aab5f8> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7f0753bd60f0>
2023-11-25 20:12:54,894:INFO:certbot.plugins.selection:Plugins selected: Authenticator standalone, Installer apache
2023-11-25 20:12:54,901:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', contact=('mailto:snoof@list.ru',), key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f0753aaea58>)>), terms_of_service_agreed=None, external_account_binding=None, status=None, only_return_existing=None), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 20:12:54,904:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:12:54,910:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:12:55,609:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:12:55,611:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:12:55 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "bhK8Vt8ySes": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 20:12:55,643:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:12:55,644:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:12:55,644:INFO:certbot.hooks:Running pre-hook command: service apache2 stop
2023-11-25 20:12:55,914:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:12:56,084:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0027_key-certbot.pem
2023-11-25 20:12:56,090:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0027_csr-certbot.pem
2023-11-25 20:12:56,092:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:12:56,092:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:12:56,258:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:12:56,259:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:12:56 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsnOp3ycdKBaDEt1YdPyfKxMhgahUu1snYO_fLQzyKi1T4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:12:56,260:DEBUG:acme.client:Storing nonce: jXyutbsnOp3ycdKBaDEt1YdPyfKxMhgahUu1snYO_fLQzyKi1T4
2023-11-25 20:12:56,261:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "value": "onmusicstage.com",\n      "type": "dns"\n    },\n    {\n      "value": "www.onmusicstage.com",\n      "type": "dns"\n    }\n  ]\n}'
2023-11-25 20:12:56,267:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXQp9",
  "protected": "eyJub25jZSI6ICJqWHl1dGJzbk9wM3ljZEtCYURFdDFZZFB5Zkt4TWhnYWhVdTFzbllPX2ZMUXp5S2kxVDQiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "OC0nQFYAkqRG5JrEytGYVeaxVCao-ZufNgNTagGOROwFtTt7t0HCnme6xgobqCQQE1H6CjOwe348SpqoubU-NufjiiLHK13zTmTX9-cb_nu7awVc1-5WpRpUPtWvNuGQ2whv317Nm7jdDVn1Fzp60o3LLUtsTc5DFwVE6DzlR4fXP1YBxcZtNjBq49KfyMVKyrrnyiCnlZB_kJS-1QdwmKlWVycCDW_AEB8wNBTyBVF-WYy-vgtf0Z3tQP4a9YeOsuyrTtQ21rw1w9T3DBUk_OyROZj9D7CltOGCX8pAiTj8_KSf0cx75q0k-017r3GXpdyMZjKlIMFFSzMZ-r_2yQ"
}
2023-11-25 20:12:56,490:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 20:12:56,491:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 17:12:56 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224757045526
Replay-Nonce: jXyutbsngC1AaDPpMjkZAdzAbrR1k2TSQfUq5BiLClorBX3K92A
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224757045526"
}
2023-11-25 20:12:56,491:DEBUG:acme.client:Storing nonce: jXyutbsngC1AaDPpMjkZAdzAbrR1k2TSQfUq5BiLClorBX3K92A
2023-11-25 20:12:56,492:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:12:56,495:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496:
{
  "payload": "",
  "protected": "eyJub25jZSI6ICJqWHl1dGJzbmdDMUFhRFBwTWprWkFkekFiclIxazJUU1FmVXE1QmlMQ2xvckJYM0s5MkEiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNDk2IiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "N39I1KWN9HpHMO4EcWqzgzyKoLzcCyavsz25wbtwzpdaYOxj00Mz8785vHmQnpAMfnIFM86kwIXAxjSTc_YyEdaZs-3uNMgmL4EpGn23L1IIpO2qLO8swXVwa0Zc2oYoAFrTLeJOh_wPLzSKLP8JnGE9Ef8260xJmek2CgnaH3XxF9Mafl7OigJG7QGu_aErs4TzKkxwbylyKRaNv1wV1KJ7P5-mlC8qeFPs4XRoZlaehwrlCwkuqq_hNVuKrby9DL_gNa7q-pMmhKZyjYpWpgllpCLpvOFN84nrF8tY5rHIs0DaSJF9JwVe4FPWi9AqSgUgQtza4wf7ny8yPS-jGw"
}
2023-11-25 20:12:56,660:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791496 HTTP/1.1" 200 800
2023-11-25 20:12:56,662:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:12:56 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsnwc5-jLpYViqcSqp7ZmFjIw28q7c2Lem_CVNov4aFH1g
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/L5XSkg",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/Y7d1nw",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    }
  ]
}
2023-11-25 20:12:56,662:DEBUG:acme.client:Storing nonce: jXyutbsnwc5-jLpYViqcSqp7ZmFjIw28q7c2Lem_CVNov4aFH1g
2023-11-25 20:12:56,663:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:12:56,667:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506:
{
  "payload": "",
  "protected": "eyJub25jZSI6ICJqWHl1dGJzbndjNS1qTHBZVmlxY1NxcDdabUZqSXcyOHE3YzJMZW1fQ1ZOb3Y0YUZIMWciLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNTA2IiwgImFsZyI6ICJSUzI1NiJ9",
  "signature": "WOw-2JZLspMT6K14092v2JyhkZpp3IAdLLmkFCBwSjBmQC3ceTdCiwI01rI1R4wkyFdJo8seRLY7O9jitm6fXh0TJmqalpTj9GeF5jFCjeJoF_mxp_8Qz_ANST0D5WPXEmzWwiWSbUsgHzWQnrh8iJXb-3jmf_REZjm_baHY1bFkxlOzDJH24K_-6TtTka6SXPBzTQsrz9sXB6IK_B74sI7w_Kruu2ML8zwhG6pOd0htZi1xLGM64e9B9FfNBeTbA9RnjpFE2ckKi2k3tuT-VmH_RGSjH2jWbi9DvdWDX63Uxwo-sWjRc8WEx6T_lLSqLSUEbzKDlcNdGd8m1KQWzQ"
}
2023-11-25 20:12:56,834:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791506 HTTP/1.1" 200 804
2023-11-25 20:12:56,835:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:12:56 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsn5bfoROqWmWlM9akaywNkkqcnPMolhAL7zigNZysdwa4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/q7aD5A",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/88yo6g",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    }
  ]
}
2023-11-25 20:12:56,835:DEBUG:acme.client:Storing nonce: jXyutbsn5bfoROqWmWlM9akaywNkkqcnPMolhAL7zigNZysdwa4
2023-11-25 20:12:56,836:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 20:12:56,837:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 20:12:56,837:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 20:12:56,838:DEBUG:acme.standalone:Failed to bind to :80 using IPv6
2023-11-25 20:12:56,839:DEBUG:acme.standalone:Failed to bind to :80 using IPv4
2023-11-25 20:12:56,841:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 76, in run
    address, self.http_01_resources)
  File "/usr/lib/python3/dist-packages/acme/standalone.py", line 189, in __init__
    BaseDualNetworkedServers.__init__(self, HTTP01Server, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/acme/standalone.py", line 108, in __init__
    raise socket.error("Could not bind to IPv4 or IPv6.")
OSError: Could not bind to IPv4 or IPv6.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 75, in handle_authorizations
    resp = self._solve_challenges(aauthzrs)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 139, in _solve_challenges
    resp = self.auth.perform(all_achalls)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 234, in perform
    return [self._try_perform_single(achall) for achall in achalls]
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 234, in <listcomp>
    return [self._try_perform_single(achall) for achall in achalls]
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 241, in _try_perform_single
    _handle_perform_error(error)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 239, in _try_perform_single
    return self._perform_single(achall)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 245, in _perform_single
    servers, response = self._perform_http_01(achall)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 254, in _perform_http_01
    servers = self.servers.run(port, challenges.HTTP01, listenaddr=addr)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 78, in run
    raise errors.StandaloneBindError(error, port)
certbot.errors.StandaloneBindError: Problem binding to port 80: Could not bind to IPv4 or IPv6.

2023-11-25 20:12:56,841:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 20:12:56,841:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 20:12:56,842:INFO:certbot.hooks:Running post-hook command: service apache2 stop
2023-11-25 20:12:57,103:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 76, in run
    address, self.http_01_resources)
  File "/usr/lib/python3/dist-packages/acme/standalone.py", line 189, in __init__
    BaseDualNetworkedServers.__init__(self, HTTP01Server, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/acme/standalone.py", line 108, in __init__
    raise socket.error("Could not bind to IPv4 or IPv6.")
OSError: Could not bind to IPv4 or IPv6.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 75, in handle_authorizations
    resp = self._solve_challenges(aauthzrs)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 139, in _solve_challenges
    resp = self.auth.perform(all_achalls)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 234, in perform
    return [self._try_perform_single(achall) for achall in achalls]
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 234, in <listcomp>
    return [self._try_perform_single(achall) for achall in achalls]
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 241, in _try_perform_single
    _handle_perform_error(error)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 239, in _try_perform_single
    return self._perform_single(achall)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 245, in _perform_single
    servers, response = self._perform_http_01(achall)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 254, in _perform_http_01
    servers = self.servers.run(port, challenges.HTTP01, listenaddr=addr)
  File "/usr/lib/python3/dist-packages/certbot/plugins/standalone.py", line 78, in run
    raise errors.StandaloneBindError(error, port)
certbot.errors.StandaloneBindError: Problem binding to port 80: Could not bind to IPv4 or IPv6.
2023-11-25 20:13:34,336:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:13:34,337:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:13:34,338:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:13:34,355:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:13:34,357:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:13:34,358:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 20:13:34,583:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:13:35,282:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7f81bc759780>
Prep: True
2023-11-25 20:13:35,286:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7f81bc759780> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7f81bc759780>
2023-11-25 20:13:35,286:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 20:13:35,294:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', status=None, external_account_binding=None, contact=('mailto:snoof@list.ru',), terms_of_service_agreed=None, only_return_existing=None, key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f81bc636208>)>)), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 20:13:35,297:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:13:35,302:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:13:35,962:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:13:35,964:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:35 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "YBe9NdHQ0GA": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 20:13:35,999:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:13:36,000:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:13:36,001:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:13:36,201:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0028_key-certbot.pem
2023-11-25 20:13:36,207:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0028_csr-certbot.pem
2023-11-25 20:13:36,208:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:13:36,208:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:13:36,372:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:13:36,373:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:36 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjcf7-AdRzC1mltBwSc3Oh1ODFCpA0AOBKXYtGm0V8yxs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:13:36,373:DEBUG:acme.client:Storing nonce: SFMYLIQjcf7-AdRzC1mltBwSc3Oh1ODFCpA0AOBKXYtGm0V8yxs
2023-11-25 20:13:36,374:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "value": "onmusicstage.com",\n      "type": "dns"\n    },\n    {\n      "value": "www.onmusicstage.com",\n      "type": "dns"\n    }\n  ]\n}'
2023-11-25 20:13:36,379:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "signature": "RSEdRdU2Gr_MnIsNV8KxxsWv57fo6xrc92F1cw3iHt3RtCzVkQzc3HRsAk9GyK8wo02Af0ShU-anIlTqlMddo93x1o9FfkEUyHuhExLuuznUyZFgL58A4UIiE5bBOgmFs5411Mh4DgfpSKKblQbiuH0oQ4saPtJFFxYTGRZj8o-96ZNG7MpOkLnQsFg3QLaHXrigLufGAs-ubhdZbVQbp3tx7znHXL7CppPEiqzLnKUkFTxiuVz1_tz81bE4dcgW4Rh-7Rjx69--RZwW99hMR_FavaR56dDSO7mcXnETg8Hm6vAEB5Rl9NKXqWhqw1wr50Dvyx7c9LIue0OTnLOIgw",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEiLCAibm9uY2UiOiAiU0ZNWUxJUWpjZjctQWRSekMxbWx0QndTYzNPaDFPREZDcEEwQU9CS1hZdEdtMFY4eXhzIiwgImFsZyI6ICJSUzI1NiJ9",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXQp9"
}
2023-11-25 20:13:36,581:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 20:13:36,582:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 17:13:36 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224757157846
Replay-Nonce: jXyutbsnHybIfuMfDInQDR6brpH3w26ysSIvaeXC-yPiR4SXNyw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224757157846"
}
2023-11-25 20:13:36,583:DEBUG:acme.client:Storing nonce: jXyutbsnHybIfuMfDInQDR6brpH3w26ysSIvaeXC-yPiR4SXNyw
2023-11-25 20:13:36,583:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:13:36,586:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496:
{
  "signature": "mJtyBLJZzrm8AVryPVBNYdjuI5GoguP1Xe6S99983_b-GkX4AyOC6Ek-wVtmwDqfl6sBvC2m9Dpo_cp3iJFHTcFUuaVS-xiFxN-9gE9wYi_xSNRZdQs-EKt7Pab-Xt9eZsr3IbJDKojOL2xAohjMgSebEW69gE4m6ZugC87M0UEf1rmDWd1DWc6kD2baIRfHkI-_5SHatXPFBFaqs22wdEL-OzNJ3vh3khlfGxuqLfNHGHC_5KF5lUTwq_DclAAgzTIEvpTe7iBJkl3rVFMs9GR-WuXwPi42OicB2RDCSY9SU0Ly_-iUGJIQucZDmsblQsyY2j6r0ojtwakQFktwmw",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNDk2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEiLCAibm9uY2UiOiAialh5dXRic25IeWJJZnVNZkRJblFEUjZicnBIM3cyNnlzU0l2YWVYQy15UGlSNFNYTnl3IiwgImFsZyI6ICJSUzI1NiJ9",
  "payload": ""
}
2023-11-25 20:13:36,753:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791496 HTTP/1.1" 200 800
2023-11-25 20:13:36,754:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:36 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQju2Dc9WZfuuf-el8gZPiIQHUsBWHUlCs2AJrxjiA3xls
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/L5XSkg",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/Y7d1nw",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
    }
  ]
}
2023-11-25 20:13:36,754:DEBUG:acme.client:Storing nonce: SFMYLIQju2Dc9WZfuuf-el8gZPiIQHUsBWHUlCs2AJrxjiA3xls
2023-11-25 20:13:36,755:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:13:36,758:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506:
{
  "signature": "MTalUI4fbqr6gSew5io7L8ZZesiNcBpLbG1S-7FP7JV3H7PRSc5sTdt2lOPSK7jLD-5SVPeIa20pfX5FdPIzeLd2EX4fNxVyhEoz_eVSr3Edvni-UtUBQgrP0L06DFUY6G-pB9ZtXyoiQWQzGb8AI5Cb_9bZqrljWtOg4sBzZmLVbErKjklcahHhpvgNqUHeJJeDXLZb3VpblGhe0C8AfsK_9jD7Vdbwy1tEyVzheeFgn3WWvp2X8h6qYmeBIxUPm0BWOTuy0ahiMFQcs2SuA6QcWY7JTtOztfQ_n9MpmQdl_lypb3Za6KMBpKXS_N1UtUNZ1qPeS6ANHGCHilWA0w",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNTA2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEiLCAibm9uY2UiOiAiU0ZNWUxJUWp1MkRjOVdaZnV1Zi1lbDhnWlBpSVFIVXNCV0hVbENzMkFKcnhqaUEzeGxzIiwgImFsZyI6ICJSUzI1NiJ9",
  "payload": ""
}
2023-11-25 20:13:36,925:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791506 HTTP/1.1" 200 804
2023-11-25 20:13:36,926:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:36 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjkEtxziImFdYgB4236skEXLLzMdQPKn1vwJGrhOBwsWE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/q7aD5A",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/88yo6g",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
    }
  ]
}
2023-11-25 20:13:36,927:DEBUG:acme.client:Storing nonce: SFMYLIQjkEtxziImFdYgB4236skEXLLzMdQPKn1vwJGrhOBwsWE
2023-11-25 20:13:36,928:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 20:13:36,929:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 20:13:36,929:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 20:13:37,025:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: onmusicstage.com in: /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:13:37,026:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:13:37,027:DEBUG:certbot_apache.http_01:writing a pre config file with text:
         RewriteEngine on
        RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2023-11-25 20:13:37,027:DEBUG:certbot_apache.http_01:writing a post config file with text:
         <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2023-11-25 20:13:37,061:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:13:37,062:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:13:37,063:DEBUG:certbot.reverter:Creating backup of /etc/apache2/ports.conf
2023-11-25 20:13:40,479:INFO:certbot.auth_handler:Waiting for verification...
2023-11-25 20:13:40,482:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:13:40,486:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ:
{
  "signature": "UM93JtC_Sz1LDcWa2wbggBeUMa-PNbewbBJq4VaxP8vkUjakGyMMEsabSkbFHDhJuU4H9gJEzb2na6FfbUzdVbjaIMd3hg9PhnqC7sVSJQWAaSzCf9TO7909UUIpb5LMTE9ZfrnPYBxST8W1ym2uZpVficAOdmDP1HH8Z7CgYchj1xPZoNLXhLPsJawUpAG0HP386ngbkXI5rTeT_XXgCf0VVHJPlMTMuS0GrF58v6rNNqO-QVQOxUrk-yrOT7fs7SQnqjTR4JTL1nyhwQSqNsh3-z-xgNw7SfVkkVLY9d2FqHo37XauuK2gV3ydP_L3xiWPEx6Plq0xl36Vp5BEbQ",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDMxNzkxNDk2L2ZXN1FKUSIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogIlNGTVlMSVFqa0V0eHppSW1GZFlnQjQyMzZza0VYTEx6TWRRUEtuMXZ3SkdyaE9Cd3NXRSIsICJhbGciOiAiUlMyNTYifQ",
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0"
}
2023-11-25 20:13:40,660:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287431791496/fW7QJQ HTTP/1.1" 200 187
2023-11-25 20:13:40,662:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:40 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ
Replay-Nonce: jXyutbsnpGyuq0cupp7eR63SIp671lE36uDZg0ehDOl_kQWiJGI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ",
  "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y"
}
2023-11-25 20:13:40,662:DEBUG:acme.client:Storing nonce: jXyutbsnpGyuq0cupp7eR63SIp671lE36uDZg0ehDOl_kQWiJGI
2023-11-25 20:13:40,664:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:13:40,667:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg:
{
  "signature": "tyMU14KX9-Pwn4NySyRsDJFBn3msw4O9TOiCtNLqhHbtqC0P8YBw0pduza0-Z9lcj9lxgUe89gao-vhfeGYjFzO5BBOk0n7cpGDXdUAzaovrMTNFmVwIFZXEzJhZtNYnosuG4aKbigH9k6gVYL_BB32KV9tA17D8RUkU-i52S87n5I6DJY5l-d6g8RkZ8OW3AQwYOW1gAwpHtryqG4qaV4HhTtu1tlTvgvp8Ghpm98i_l0QH6CQwhWxdfqjcM9HnNcT64SA19k_G3_1r-SQ44XdMdkqQFDe1ZO7xpVr2SjcpOngy_zEIlmWn-dM6oEueRbyWtX5YYGMarAgzCTnFww",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDMxNzkxNTA2L0pIUnVxZyIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogImpYeXV0YnNucEd5dXEwY3VwcDdlUjYzU0lwNjcxbEUzNnVEWmcwZWhET2xfa1FXaUpHSSIsICJhbGciOiAiUlMyNTYifQ",
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0"
}
2023-11-25 20:13:40,834:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287431791506/JHRuqg HTTP/1.1" 200 187
2023-11-25 20:13:40,835:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:40 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg
Replay-Nonce: SFMYLIQjqZMUcfxRzPJxOcub0A5ZoubhT4A0DWXAJnSYm56nPgI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg",
  "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA"
}
2023-11-25 20:13:40,836:DEBUG:acme.client:Storing nonce: SFMYLIQjqZMUcfxRzPJxOcub0A5ZoubhT4A0DWXAJnSYm56nPgI
2023-11-25 20:13:43,839:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:13:43,844:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791496:
{
  "signature": "dPvYVTW9ayNvdUZax-da8AmmULji_zyMkp5HLrsDB6ThUNuYtfYwU0zhmiXBAEYIrLo3QF3udqr3_vDuEae7_LXArbsDtAonnVKgnPjfXFuoa2zvM2eDC9BCD1eW-8-GuD3TWAvBPOJwcoRbDc181LqK2ScfHBJ43LxuIkpnaLZMl6yOs1dthAa5INyv2cz2qC-eRttOkHdv5Inu0pQX38uiCw7YfMz3WeRjP_DLM2LtNERiu7aQkUmMRDBaANL1wsE-sEJZeU7DErJqABJOLbF8n7QFMd1MQfDAmowHCimEucEDvmbbNHnmJ3gS-g6f7iGhrRnZzz0tqsg97lc2mw",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNDk2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEiLCAibm9uY2UiOiAiU0ZNWUxJUWpxWk1VY2Z4UnpQSnhPY3ViMEE1Wm91YmhUNEEwRFdYQUpuU1ltNTZuUGdJIiwgImFsZyI6ICJSUzI1NiJ9",
  "payload": ""
}
2023-11-25 20:13:44,014:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791496 HTTP/1.1" 200 1032
2023-11-25 20:13:44,015:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:43 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsnIwKD1N4nor4LI-uWN8sE9Y_C6g3ZTEwn_RO_nBWf4WA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791496/fW7QJQ",
      "token": "iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y",
      "validationRecord": [
        {
          "url": "http://onmusicstage.com/.well-known/acme-challenge/iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y",
          "hostname": "onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:13:40Z"
    }
  ]
}
2023-11-25 20:13:44,016:DEBUG:acme.client:Storing nonce: jXyutbsnIwKD1N4nor4LI-uWN8sE9Y_C6g3ZTEwn_RO_nBWf4WA
2023-11-25 20:13:44,017:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:13:44,020:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287431791506:
{
  "signature": "eNat6wcQoUcgiGmHgGbBUk-6mM6eLq7d0PWNiTjPl1LurzhQAWD_5SUP5SZqfe2CrZiYuLIejwzAnEltGLoFIqV0eqcyBqg8UWBOhxgbAjK_CeUVxUnUmXOnVQtXw31j_eHbHZ7wJFrR8-ALm6byPY53VZh8PY1wUA5jzx9fYPA0x3PSaoISqctZKxsT8tIBJTwXW2XVkPZmHsJc3ZvSoGPjTppZ4wlE0EANHQkVVBfnn8ksKnOG8WJtYd46YP1cuoilnli_OgQSuLSE0lbeWV3JIlOlOy6zuglMgVpPpegDKHw_04ElHekwqS8zic38bGDNXksu8oUT76XA7JXYRQ",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDMxNzkxNTA2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEiLCAibm9uY2UiOiAialh5dXRic25Jd0tEMU40bm9yNExJLXVXTjhzRTlZX0M2ZzNaVEV3bl9ST19uQldmNFdBIiwgImFsZyI6ICJSUzI1NiJ9",
  "payload": ""
}
2023-11-25 20:13:44,187:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287431791506 HTTP/1.1" 200 1048
2023-11-25 20:13:44,189:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:13:44 GMT
Content-Type: application/json
Content-Length: 1048
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjEKMPzUnXdk8qmlU1nLaD0T8e46KWBIarRfGTenZnSQU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:12:56Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287431791506/JHRuqg",
      "token": "j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA",
      "validationRecord": [
        {
          "url": "http://www.onmusicstage.com/.well-known/acme-challenge/j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA",
          "hostname": "www.onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:13:40Z"
    }
  ]
}
2023-11-25 20:13:44,189:DEBUG:acme.client:Storing nonce: SFMYLIQjEKMPzUnXdk8qmlU1nLaD0T8e46KWBIarRfGTenZnSQU
2023-11-25 20:13:44,191:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: www.onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA: 502

Domain: onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y: 502

To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2023-11-25 20:13:44,193:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA: 502, onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y: 502

2023-11-25 20:13:44,193:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 20:13:44,193:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 20:13:44,881:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/j1Pa-w4n2Vw7sWPJBWAa9-9VRyW9huE_krY6kDXshFA: 502, onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/iZsXdCzRH434cI6cxqsAM7TzczwK4JiasVRk5rRhs2Y: 502
2023-11-25 20:28:13,790:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:28:13,792:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:28:13,792:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:28:13,810:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:28:13,812:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:28:13,814:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 20:28:14,045:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:28:14,849:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7f722eacf0f0>
Prep: True
2023-11-25 20:28:14,853:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7f722eacf0f0> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7f722eacf0f0>
2023-11-25 20:28:14,854:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 20:28:14,861:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(terms_of_service_agreed=None, external_account_binding=None, only_return_existing=None, status=None, agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f722e9a70f0>)>), contact=('mailto:snoof@list.ru',)), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_host='Ubuntu-1604-xenial-64-minimal', creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>)))>
2023-11-25 20:28:14,865:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:28:14,870:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:28:15,533:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:28:15,534:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:15 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "pYM9i_LkmFA": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 20:28:15,554:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:28:15,555:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:28:15,555:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:28:15,659:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0029_key-certbot.pem
2023-11-25 20:28:15,664:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0029_csr-certbot.pem
2023-11-25 20:28:15,665:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:28:15,665:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:28:15,829:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:28:15,831:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:15 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjmq5Z1I-ntkyYQwYp8vG4_wfxRSymWgJ-cqKpfZ899cM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:28:15,832:DEBUG:acme.client:Storing nonce: SFMYLIQjmq5Z1I-ntkyYQwYp8vG4_wfxRSymWgJ-cqKpfZ899cM
2023-11-25 20:28:15,833:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "value": "onmusicstage.com",\n      "type": "dns"\n    },\n    {\n      "value": "www.onmusicstage.com",\n      "type": "dns"\n    }\n  ]\n}'
2023-11-25 20:28:15,839:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXQp9",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJTRk1ZTElRam1xNVoxSS1udGt5WVF3WXA4dkc0X3dmeFJTeW1XZ0otY3FLcGZaODk5Y00iLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSJ9",
  "signature": "Ni6-qht2lcpb2L8BuxZkbR_46oQP6x-VWl1PZjAcv6k8BbX4IJdbLvUp2fpzhWGi8ByMTq5MtTh5PGrCkSU_pKYel_lHgQRVjhvHugZz60Du8OlyC-bD6e4MFU79ZTVC86wPaEpp_LtXuIFyPjMjq8uYTNwHXGzL4sjlJYKtAjsCkSJhVhy03guIe9ZTdIj_c5Wyjbl5NIJ9DiLyGrRR8nQUCHCgppydNnkuW7C5cdB8JCYkegP5xcfZ5FRSs-tEFKCoikW7m10SCfANAr7HwYxUukzBxWOdqKYTmTKg0vXgfzI6q5cotjdPilg1itshaK98X_P7jiPPbK7NZ54RUA"
}
2023-11-25 20:28:16,068:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 20:28:16,070:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 17:28:15 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224759396306
Replay-Nonce: SFMYLIQjIudWdW5Glmt292dFBXkjYocT5BuOpb4FFUjhp0eDGtA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T17:28:15Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058656",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058666"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224759396306"
}
2023-11-25 20:28:16,070:DEBUG:acme.client:Storing nonce: SFMYLIQjIudWdW5Glmt292dFBXkjYocT5BuOpb4FFUjhp0eDGtA
2023-11-25 20:28:16,071:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:28:16,074:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058656:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDM1MDU4NjU2IiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJTRk1ZTElRakl1ZFdkVzVHbG10MjkyZEZCWGtqWW9jVDVCdU9wYjRGRlVqaHAwZURHdEEiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSJ9",
  "signature": "UVhxPcjCDO8uhfw7RYIvRlzGQVPdfGCnLDdXJ9lyiZo_glQrnNkZwuoPSPV6q6eTMKBniirN5CeCWm56dwom30Bu1TzFfqVC-SyfgYv_O5vVYTJcFWt-1Y8OywW_tBLlrwughhqL5ZWuuTp4tKW5ypKFPdFHwxyyBrZfrXUU8RntCz7CxJnlXPV6YxZ96255scDB0ukhTAQtcy2vuVhH0C-YGKeFVbJYB6IwE-UC81m7DXBaBEfw7EFMXg9ZuwSPWcQx67NN_enaUB8KQK1nuMW5Bgduo5noEuOArwQa3zpUWMkLf4ZBQd_CfT1Nr2vzXqrD3B8YIwcFeOPkuwjsIQ"
}
2023-11-25 20:28:16,241:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435058656 HTTP/1.1" 200 800
2023-11-25 20:28:16,242:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:16 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjjkKQO1lT59P7EmL4GmgD3Z_fKyLSpf1QT8scTVegBuI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:28:15Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/Xo7fzA",
      "token": "ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/-biIug",
      "token": "ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/F8DXfA",
      "token": "ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY"
    }
  ]
}
2023-11-25 20:28:16,242:DEBUG:acme.client:Storing nonce: SFMYLIQjjkKQO1lT59P7EmL4GmgD3Z_fKyLSpf1QT8scTVegBuI
2023-11-25 20:28:16,243:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:28:16,246:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058666:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDM1MDU4NjY2IiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJTRk1ZTElRamprS1FPMWxUNTlQN0VtTDRHbWdEM1pfZkt5TFNwZjFRVDhzY1RWZWdCdUkiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSJ9",
  "signature": "c_Yskp4t6DD3zRll5IhoNUSTr3Qri7TD7zNLdeTqihSNpyZufcPGYUGMzDNl9_MJsKm2dBUcXFQP7h0cFp4uG0QG29-Flq1JoT4S1Eyk1WGd_RyvhUrRE0jmaKdDBL0jZo9UjBjfAgyNzxuc9wJofPAOxpwB6kt-A2GrIKaGPtMamR_isQ9M123_wG4fUM0VlF6xnF54oFqB9yChVJHfTT2TOD_jRn8dZX2nhmNprJaCFZ9mlj19UU7ndbrXi2KdkRPS2UaF5D64USlDhWDjI6CoCCVQxB2Bm-oOEqci3-mgu7tLngrJ48z8mWBmqyjNhaqBoyPp9exOpY0PkCkYuQ"
}
2023-11-25 20:28:16,413:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435058666 HTTP/1.1" 200 804
2023-11-25 20:28:16,415:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:16 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjMvFFfvBvq5qYkU6Nu0L-qGm-q3qvC6tSibgcDAm6v5k
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:28:15Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/fQFTtQ",
      "token": "mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/p_TOoA",
      "token": "mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/5XPEyA",
      "token": "mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4"
    }
  ]
}
2023-11-25 20:28:16,416:DEBUG:acme.client:Storing nonce: SFMYLIQjMvFFfvBvq5qYkU6Nu0L-qGm-q3qvC6tSibgcDAm6v5k
2023-11-25 20:28:16,419:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 20:28:16,420:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 20:28:16,421:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 20:28:16,571:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: onmusicstage.com in: /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:28:16,572:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:28:16,573:DEBUG:certbot_apache.http_01:writing a pre config file with text:
         RewriteEngine on
        RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2023-11-25 20:28:16,575:DEBUG:certbot_apache.http_01:writing a post config file with text:
         <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2023-11-25 20:28:16,630:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:28:16,633:DEBUG:certbot.reverter:Creating backup of /etc/apache2/ports.conf
2023-11-25 20:28:16,633:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:28:20,032:INFO:certbot.auth_handler:Waiting for verification...
2023-11-25 20:28:20,036:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:28:20,046:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/Xo7fzA:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDM1MDU4NjU2L1hvN2Z6QSIsICJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAiU0ZNWUxJUWpNdkZGZnZCdnE1cVlrVTZOdTBMLXFHbS1xM3F2QzZ0U2liZ2NEQW02djVrIiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEifQ",
  "signature": "e8buTBouvkN4m9iL1DFCtoX4hQvS1S7Xhe_zxqOm-bLv42PvHxftbPAvniDuMssosLpc9hkLyZhIzf9jEownwXumCgjPHvAph8KT3IA8TmXnwr6DUgTwFn4ULa0tADQTGnQIJ1MQCuSj3G0JZvRAjRZVsv5U8HSFmP9cBP2UNnwfvcyc2IVCSyV3giFXubuA2LHALkIXWGsec_2XzgqFGIHKBC4sSpiL05CixqdJHkbzVY6XLEaDmzn_JAR9FsNuo7HU1uDR8lBKXeLvIkg9mywsaQbQ_K8LUTj-6NFSRepqh6GB8pYGg8nSTQS4Uz7goKKXA8or3BACXysgfpXiJA"
}
2023-11-25 20:28:20,222:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287435058656/Xo7fzA HTTP/1.1" 200 187
2023-11-25 20:28:20,224:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:20 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058656>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/Xo7fzA
Replay-Nonce: jXyutbsndNfb6NmVX2_Y2d7lzYDU_2dDg6aBj2FcEAtSWvX87-Q
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/Xo7fzA",
  "token": "ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY"
}
2023-11-25 20:28:20,225:DEBUG:acme.client:Storing nonce: jXyutbsndNfb6NmVX2_Y2d7lzYDU_2dDg6aBj2FcEAtSWvX87-Q
2023-11-25 20:28:20,227:DEBUG:acme.client:JWS payload:
b'{\n  "type": "http-01",\n  "resource": "challenge"\n}'
2023-11-25 20:28:20,231:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/fQFTtQ:
{
  "payload": "ewogICJ0eXBlIjogImh0dHAtMDEiLAogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiCn0",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg3NDM1MDU4NjY2L2ZRRlR0USIsICJhbGciOiAiUlMyNTYiLCAibm9uY2UiOiAialh5dXRic25kTmZiNk5tVlgyX1kyZDdsellEVV8yZERnNmFCajJGY0VBdFNXdlg4Ny1RIiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZWcvMTY1MTQ4MDEifQ",
  "signature": "cgqBEBaszzZJ_lf2TzJHwaFvLEGFiK3zfx5gk0VwpF4p_rg42ySzsf06uLWZrPyZDAytMbfyyurL9FIQjoQX8_8eJBRVoLEGDjAgYBUSIkkM7tUg4leJUQHTFjw2bHzb3dzQc7j-V0_WUD80DPOPlArrBxOcfQsnbp9Dk4I_9QyRatQ7Tgc9-8ALHJDc1bf4hFJnqCIPMimDY2XoxohlNSHAvoVz3JvE-xEFown4w2EeNjVTgz46WLGX8jH0V8hXgkNF6GTO6V38ED_MKy-x330a0eiQ6a7t9nWZYChcWxFam-MH6gEBxBU2LvfMpnKTHhZiMZIh9mAQI4MYhlA5mw"
}
2023-11-25 20:28:20,400:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287435058666/fQFTtQ HTTP/1.1" 200 187
2023-11-25 20:28:20,402:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:20 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058666>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/fQFTtQ
Replay-Nonce: jXyutbsnRXO49EBuH6fKGGrtQI2ywClANs6Yg-Sete2FGqKBSvU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/fQFTtQ",
  "token": "mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4"
}
2023-11-25 20:28:20,402:DEBUG:acme.client:Storing nonce: jXyutbsnRXO49EBuH6fKGGrtQI2ywClANs6Yg-Sete2FGqKBSvU
2023-11-25 20:28:23,406:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:28:23,411:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058656:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDM1MDU4NjU2IiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJqWHl1dGJzblJYTzQ5RUJ1SDZmS0dHcnRRSTJ5d0NsQU5zNllnLVNldGUyRkdxS0JTdlUiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSJ9",
  "signature": "jYNbIO54n6wmNxL3kZ1vDICrCVbdHov-2_k7u96xefzOjxUI5GnYa1BHdI2IpmrGqjQ3r0QfKH8KqLQcx3o8J3RrlUOrIzFODFzAy7YawSgM4-OwG_Ir4Kvi794T5ql2-UnJHLMDmgX73NjrQbF2_YTibPSeDZRnYZEyCOm-ZQculhRzivL9yjnJpbUBrGiPOdR0Uc0FK7u3SN5gsadvqFM5xIW3W7CmPOphWSp6JSPXmnTXy0-h7FsW_Id6mpKt6dQhKKuy8NBauzYO4ykpX02A_RlUdqhDVBo61R-hxwjg6pyTa7G_U9KS7YJI9GVoYyQ4xPfy8qo-6Buwj9gYjQ"
}
2023-11-25 20:28:23,578:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435058656 HTTP/1.1" 200 1032
2023-11-25 20:28:23,580:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:23 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsnXVuSi1lNCgzOslR-a4qFt_q1F8yp0gJNoyM5R_uwjyk
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:28:15Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058656/Xo7fzA",
      "token": "ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY",
      "validationRecord": [
        {
          "url": "http://onmusicstage.com/.well-known/acme-challenge/ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY",
          "hostname": "onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:28:20Z"
    }
  ]
}
2023-11-25 20:28:23,581:DEBUG:acme.client:Storing nonce: jXyutbsnXVuSi1lNCgzOslR-a4qFt_q1F8yp0gJNoyM5R_uwjyk
2023-11-25 20:28:23,583:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:28:23,586:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435058666:
{
  "payload": "",
  "protected": "eyJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg3NDM1MDU4NjY2IiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJqWHl1dGJzblhWdVNpMWxOQ2d6T3NsUi1hNHFGdF9xMUY4eXAwZ0pOb3lNNVJfdXdqeWsiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSJ9",
  "signature": "bp00Foq7cMjbwX81Vy9jVgoKXfaeGmOqG5xhs1QlYCdsYBw0XijhX41-5b97bYsbES973RKstNBqevy4gHSu6a6KQtsdu7U4FiIAfeQnRixjRYa8oYNlqSd3Nu7C6zLZUKIMrYOoSsCmtiBSStY-Hg3kC5ALGKMom91I0oh2LrpQdDzzFjdkFxav4FiBFtckOQg7SHeTe4HhTH87nqZcAJdKrSiK9S-w_N6M6OyJNbYjUHq06uh9vV4NFswSgtE5m7d0moybVZV9AkAvl5A75JtcBX6fLap8e5lojfFMfExJSMJqYzy9Me0WqgGqhh62Pt6xIZPyzw-aQ5Bg8NNmZw"
}
2023-11-25 20:28:23,751:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435058666 HTTP/1.1" 200 1048
2023-11-25 20:28:23,752:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:28:23 GMT
Content-Type: application/json
Content-Length: 1048
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjCBK4sanhbaSQ0qfAcbaG4cp0hPBiPQMW-lkTjdfehOE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:28:15Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435058666/fQFTtQ",
      "token": "mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4",
      "validationRecord": [
        {
          "url": "http://www.onmusicstage.com/.well-known/acme-challenge/mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4",
          "hostname": "www.onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:28:20Z"
    }
  ]
}
2023-11-25 20:28:23,753:DEBUG:acme.client:Storing nonce: SFMYLIQjCBK4sanhbaSQ0qfAcbaG4cp0hPBiPQMW-lkTjdfehOE
2023-11-25 20:28:23,754:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: www.onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4: 502

Domain: onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY: 502

To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2023-11-25 20:28:23,757:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4: 502, onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY: 502

2023-11-25 20:28:23,758:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 20:28:23,758:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 20:28:24,316:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/mb5lRA5BjqL5J5W4K11luGFcKMX2Kz13_Xg678XfjI4: 502, onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/ebUywG0BpcEfEm3rt3O4Tf_-XoWEgHMI6RWb54Ts7xY: 502
2023-11-25 20:29:35,783:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:29:35,786:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com', '--manual', '--preferred-challenges', 'dns']
2023-11-25 20:29:35,788:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:29:35,822:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:29:35,825:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:30:04,852:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:30:04,854:DEBUG:certbot.main:Arguments: ['--apache', '--manual', '--preferred-challenges', 'dns', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:30:04,856:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:30:04,885:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:30:04,888:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:30:23,928:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:30:23,932:DEBUG:certbot.main:Arguments: ['--manual', '--preferred-challenges', 'dns', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:30:23,934:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:30:23,959:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:30:23,960:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:30:23,962:DEBUG:certbot.plugins.selection:Requested authenticator manual and installer None
2023-11-25 20:30:23,962:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1101, in run
    installer, authenticator = plug_sel.choose_configurator_plugins(config, plugins, "run")
  File "/usr/lib/python3/dist-packages/certbot/plugins/selection.py", line 210, in choose_configurator_plugins
    raise errors.MissingCommandlineFlag(msg)
certbot.errors.MissingCommandlineFlag: With the manual plugin, you probably want to use the "certonly" command, eg:

    certbot certonly --manual

(Alternatively, add a --installer flag. See https://eff.org/letsencrypt-plugins
 and "--help plugins" for more information.)
2023-11-25 20:30:58,406:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:30:58,408:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:30:58,408:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:30:58,427:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:30:58,429:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:30:58,430:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 20:30:58,630:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:30:59,511:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7f69b4cd67b8>
Prep: True
2023-11-25 20:30:59,516:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7f69b4cd67b8>
Prep: True
2023-11-25 20:30:59,517:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7f69b4cd67b8> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7f69b4cd67b8>
2023-11-25 20:30:59,517:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 20:30:59,527:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', body=Registration(status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None, key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f69b4bb1908>)>), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', contact=('mailto:snoof@list.ru',))), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 20:30:59,534:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:30:59,540:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:31:00,139:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:31:00,142:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:00 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "_2wqTu-Ryio": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 20:31:00,179:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:31:00,180:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:31:00,180:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:31:00,235:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0030_key-certbot.pem
2023-11-25 20:31:00,244:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0030_csr-certbot.pem
2023-11-25 20:31:00,246:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:31:00,246:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:31:00,393:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:31:00,395:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:00 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsnu4SNNxp_wjoJhhsEIkcamFPgIeaVWFsOp-10HlWxFlw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:31:00,396:DEBUG:acme.client:Storing nonce: jXyutbsnu4SNNxp_wjoJhhsEIkcamFPgIeaVWFsOp-10HlWxFlw
2023-11-25 20:31:00,396:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "onmusicstage.com"\n    },\n    {\n      "type": "dns",\n      "value": "www.onmusicstage.com"\n    }\n  ]\n}'
2023-11-25 20:31:00,403:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogImpYeXV0YnNudTRTTk54cF93am9KaGhzRUlrY2FtRlBnSWVhVldGc09wLTEwSGxXeEZsdyJ9",
  "signature": "TH3Y2kowWOWIRFQYtr45JoBqlBA5URAxPiZYtYRWQsXJeJzODWON72xgpTok3qa6wcelX800Wghq4Y7g6HhGBddOjEBCmJAkGT1sHJk88-oKUrQbHtOfeqhkCutm4oae3VP7bCR649R8y_rRc6HKn3dJpfkjFPgpmj7QLyDuzCJm1qoL-cQf__LhyBm0_WUkPNprSiHrbhFd-jtQ9y9ihHg-wH8W0qZEjgtXCyopMli-pUaA9m1_Q9LZf5bOnB4kpy-ppg_3eW9Q1iYibv0jqSPvubAR-49_DBufuUghKxCiKtXPIU8v7l6h2jgOqSMv971SOG9L39-4b1f4-g9p-g",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iCiAgICB9LAogICAgewogICAgICAidHlwZSI6ICJkbnMiLAogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iCiAgICB9CiAgXQp9"
}
2023-11-25 20:31:00,581:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 483
2023-11-25 20:31:00,582:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Sat, 25 Nov 2023 17:31:00 GMT
Content-Type: application/json
Content-Length: 483
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/16514801/224759822226
Replay-Nonce: jXyutbsnkGoX6VY6ws0JZFJNenlbic8uEKkG3HGb0q-6uf7HcSU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2023-12-02T17:31:00Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "onmusicstage.com"
    },
    {
      "type": "dns",
      "value": "www.onmusicstage.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642476",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642486"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/16514801/224759822226"
}
2023-11-25 20:31:00,583:DEBUG:acme.client:Storing nonce: jXyutbsnkGoX6VY6ws0JZFJNenlbic8uEKkG3HGb0q-6uf7HcSU
2023-11-25 20:31:00,584:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:31:00,587:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642476:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzI4NzQzNTY0MjQ3NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogImpYeXV0YnNua0dvWDZWWTZ3czBKWkZKTmVubGJpYzh1RUtrRzNIR2IwcS02dWY3SGNTVSJ9",
  "signature": "og7YQ_HLQ3pNvOU_JRlU0mfj4CNmJKcrZ0zz126IwHuzxfAfuFVkZL8BxeeQpu-1kgKHy8Cvu_SgJMUkRl-u7oRLcmoJfMAbN-G30tGVDH-geut-pC9Ox5ufxl3-nruseIhMLSyYwqEk7Xghsmf_dFYJO7e3AoEJaDQ5zMpCdd8_SWLiUWkmQvp25YorJQOexT_nYIYfLcA-Ih0R2PKVoJEuIzfDfC9T22x1ejO7cChgck2GIdMH7OaiUcCEEax_w1_nYRNkQMOMkdRbl0Wc8ZC0kGkWkV-Iwg2-W5db1zhVSNV11vzsE7fius_efBVwxshNCmLms2YmywlDkx3ivw",
  "payload": ""
}
2023-11-25 20:31:00,738:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435642476 HTTP/1.1" 200 800
2023-11-25 20:31:00,740:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:00 GMT
Content-Type: application/json
Content-Length: 800
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQj8tiIwJIdsxCAf22TViB4y0RYlqRDfXbktDJjm8FVh4U
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:31:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/GGF5CQ",
      "token": "XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/HlRPgw",
      "token": "XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/ubAz1A",
      "token": "XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY"
    }
  ]
}
2023-11-25 20:31:00,740:DEBUG:acme.client:Storing nonce: SFMYLIQj8tiIwJIdsxCAf22TViB4y0RYlqRDfXbktDJjm8FVh4U
2023-11-25 20:31:00,742:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:31:00,748:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642486:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzI4NzQzNTY0MjQ4NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogIlNGTVlMSVFqOHRpSXdKSWRzeENBZjIyVFZpQjR5MFJZbHFSRGZYYmt0REpqbThGVmg0VSJ9",
  "signature": "NeJeJYcWql2KcxwfV35_lgu42-VPcSVqGBD_uHnhtyuY-sjSHCb39y78HCMh7-x5p9k0WzoJO6MFImeC2aCd_1h11c9Vkwe8jW_nEpTI-sqd18oVEkbUgbWSBi2F7UvzuQ0iiXbNKrFPtO_FfUcrYpSi1dxKEVyClUWfjYcs4G5pyhurnPP0qTmaiNJqwxgHpN3W9cmyiK5VfyuQBU7Oo4e8sqvGDB3oTvTpvIaoDHdvGcoWNDOLLoeCthOXpD79D20TnsSixPCJPZxKxmM8ZxpuORymguLavLvdM0e5xeeBTf9Lxnh-RBJPhwPzrcB8K7NhNkIRdzozjrYrG2bhIA",
  "payload": ""
}
2023-11-25 20:31:00,898:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435642486 HTTP/1.1" 200 804
2023-11-25 20:31:00,899:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:00 GMT
Content-Type: application/json
Content-Length: 804
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjTfVhN3VIGPujD2SowJFPHmUdZp573wJENXBV4xWIAf4
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "pending",
  "expires": "2023-12-02T17:31:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/Cq6u0Q",
      "token": "GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/6pS7dg",
      "token": "GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/JBHlCQ",
      "token": "GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o"
    }
  ]
}
2023-11-25 20:31:00,900:DEBUG:acme.client:Storing nonce: SFMYLIQjTfVhN3VIGPujD2SowJFPHmUdZp573wJENXBV4xWIAf4
2023-11-25 20:31:00,901:INFO:certbot.auth_handler:Performing the following challenges:
2023-11-25 20:31:00,901:INFO:certbot.auth_handler:http-01 challenge for onmusicstage.com
2023-11-25 20:31:00,902:INFO:certbot.auth_handler:http-01 challenge for www.onmusicstage.com
2023-11-25 20:31:01,027:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: onmusicstage.com in: /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:31:01,028:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: None in: /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:31:01,029:DEBUG:certbot_apache.http_01:writing a pre config file with text:
         RewriteEngine on
        RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
    
2023-11-25 20:31:01,029:DEBUG:certbot_apache.http_01:writing a post config file with text:
         <Directory /var/lib/letsencrypt/http_challenges>
            Require all granted
        </Directory>
        <Location /.well-known/acme-challenge>
            Require all granted
        </Location>
    
2023-11-25 20:31:01,073:DEBUG:certbot.reverter:Creating backup of /etc/apache2/ports.conf
2023-11-25 20:31:01,076:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/000-default.conf
2023-11-25 20:31:01,077:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/oms.conf
2023-11-25 20:31:04,542:INFO:certbot.auth_handler:Waiting for verification...
2023-11-25 20:31:04,546:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "challenge",\n  "type": "http-01"\n}'
2023-11-25 20:31:04,554:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/GGF5CQ:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzI4NzQzNTY0MjQ3Ni9HR0Y1Q1EiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJub25jZSI6ICJTRk1ZTElRalRmVmhOM1ZJR1B1akQyU293SkZQSG1VZFpwNTczd0pFTlhCVjR4V0lBZjQifQ",
  "signature": "DS7qoydNLnzkNYcy71QO_PTceWe6BGU_vcCrftUc7MxkgGIH9Axti62o_2VnaRrMqdPUBWv8f5A5YGFSC_uW205tEG2fBwTW20CxK7RzS4zF5Ywk4PNA9rVrXw7NEP5xUAWbY4tu15x7WP99rvk1tEKn760D2Gm0lxEXQWpUMoJpnMZ1ysu39vBlmKH-h_xBuzGmvaD0Gyw-CChJMLGJiN4htYmmxRZNM8vgbITGYzklvV2SCjWjN28v2LHywVYEJOB8bsm67M6YRGyKI-U9Tah9z4bZH5DCFw9Y-YvcsRkCXK_yHgFMc14G9OimpCm9zV0NAggp_IxBs9KgxcXy0w",
  "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJ0eXBlIjogImh0dHAtMDEiCn0"
}
2023-11-25 20:31:04,710:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287435642476/GGF5CQ HTTP/1.1" 200 187
2023-11-25 20:31:04,712:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:04 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642476>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/GGF5CQ
Replay-Nonce: SFMYLIQjE7BYNv_ooVXzcA0o445aMtl5aiVvLYSPuzLlSbeKf48
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/GGF5CQ",
  "token": "XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY"
}
2023-11-25 20:31:04,712:DEBUG:acme.client:Storing nonce: SFMYLIQjE7BYNv_ooVXzcA0o445aMtl5aiVvLYSPuzLlSbeKf48
2023-11-25 20:31:04,714:DEBUG:acme.client:JWS payload:
b'{\n  "resource": "challenge",\n  "type": "http-01"\n}'
2023-11-25 20:31:04,717:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/Cq6u0Q:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzI4NzQzNTY0MjQ4Ni9DcTZ1MFEiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDEuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL3JlZy8xNjUxNDgwMSIsICJub25jZSI6ICJTRk1ZTElRakU3QllOdl9vb1ZYemNBMG80NDVhTXRsNWFpVnZMWVNQdXpMbFNiZUtmNDgifQ",
  "signature": "FRuNX4TfKqaIzXY6jtDSS9iwGlKnmG86Sv7vHgbShG2Pp-AMu_MlM_RznwnG27LI_EXAy7Qdtqy9P87vD6Vz7-vG_7_p0SwxVvryhg22-VUiWU0JyBKzjuXvUJ2mAWJDqipb68m9BA164VUPRR1bv6iJ7Gnq5snWeND8WLShrY9BwfwT3Lb5YN4n4THmAlvJNo9E8fnJPpwHPhhjcbtCngrGVZ04N9fwKF1nviJF9s33xlCymM9IJEc3kZCFQsR9jn1dCYsvEX859DGeMVnD-n1r76IZpTnXOynu1RQ1eviKUT4iu6g6d8umNa3UOFKzecmPz27Z4Rc2MwJnHWb_Ag",
  "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJ0eXBlIjogImh0dHAtMDEiCn0"
}
2023-11-25 20:31:04,870:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/287435642486/Cq6u0Q HTTP/1.1" 200 187
2023-11-25 20:31:04,872:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:04 GMT
Content-Type: application/json
Content-Length: 187
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642486>;rel="up"
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/Cq6u0Q
Replay-Nonce: SFMYLIQj-fT0DudFoQq0vGxiS5XMirY903cWBTuxY5MNu-Y0kZE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/Cq6u0Q",
  "token": "GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o"
}
2023-11-25 20:31:04,872:DEBUG:acme.client:Storing nonce: SFMYLIQj-fT0DudFoQq0vGxiS5XMirY903cWBTuxY5MNu-Y0kZE
2023-11-25 20:31:07,877:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:31:07,881:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642476:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzI4NzQzNTY0MjQ3NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogIlNGTVlMSVFqLWZUMER1ZEZvUXEwdkd4aVM1WE1pclk5MDNjV0JUdXhZNU1OdS1ZMGtaRSJ9",
  "signature": "oWulbGwJ7LQPE4dpTfA6f_9gAikhnkYZLu8JLoyJbGWcvDU84ojCDKrzsQfnz-yynQw9j7sGc5Q24ih-JqxeEZJKewlSPpKZUM3K_EQ-dE1CBCNZ1IH0bxSoV9bKwKzfadcIdTm62wooM28IOZ1M_wSxD9b4a9QJ8jmKfoAUDpxdJjflo8UxszR-FlklJIKwgDzGGDtzOcFLa-fN1sVt3UjbC6LBY50q4OH1YNIBPDAyg5wOsBhupyVuASd0ZYOZyiGpv1EjTkE74JxjmpjNdafZ0jCFsNORdKFaK-NSAtZnjxfYM6NMG8rlswzt6b9d239a9Lfj2rFJ67yf-Wc9FQ",
  "payload": ""
}
2023-11-25 20:31:08,036:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435642476 HTTP/1.1" 200 1032
2023-11-25 20:31:08,038:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:07 GMT
Content-Type: application/json
Content-Length: 1032
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjw65zkGTNPmFNA2A-lIClfJeZa8N_iZeFjh-KZ2Sob38
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:31:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642476/GGF5CQ",
      "token": "XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY",
      "validationRecord": [
        {
          "url": "http://onmusicstage.com/.well-known/acme-challenge/XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY",
          "hostname": "onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:31:04Z"
    }
  ]
}
2023-11-25 20:31:08,039:DEBUG:acme.client:Storing nonce: SFMYLIQjw65zkGTNPmFNA2A-lIClfJeZa8N_iZeFjh-KZ2Sob38
2023-11-25 20:31:08,043:DEBUG:acme.client:JWS payload:
b''
2023-11-25 20:31:08,046:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/287435642486:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzI4NzQzNTY0MjQ4NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgIm5vbmNlIjogIlNGTVlMSVFqdzY1emtHVE5QbUZOQTJBLWxJQ2xmSmVaYThOX2laZUZqaC1LWjJTb2IzOCJ9",
  "signature": "bJf5d-ByNUmtyiRQCjSacShE6WQxNFzWzEGFhqH30TXPfzYUCjR9rRW7SFHD9UxiVSCvf8bdH7SjbPCxJN1WZLwmyKP1HGmIua09jcsVMQ2o8pkUXLvygE4P7whofrtNybKTZVPBOmpjF9HvXM6__H0CQtPB6iyCU6SxD6BjYRPuWOzZuFfTSpuNRntnoNjEzn3Q1VcCrfzfQFalsw9_3OYejVRa2uXAeIMkA9ScnjEVGPLKn1BLMH1oxLOfZEavOWqHoo1Lo_5P1zBsI17mFsDjPFrBfMfHRRHUt5M3McZXcW2py47Nqyq9QFTVH3-T0gZT68qx_zuCLpw8ch0VGA",
  "payload": ""
}
2023-11-25 20:31:08,209:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/287435642486 HTTP/1.1" 200 1048
2023-11-25 20:31:08,211:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:31:08 GMT
Content-Type: application/json
Content-Length: 1048
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjMvtddICMjgVo2nHmnNrdNMnlSU_KUeO5LKzVN_wivks
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "www.onmusicstage.com"
  },
  "status": "invalid",
  "expires": "2023-12-02T17:31:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o: 502",
        "status": 403
      },
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/287435642486/Cq6u0Q",
      "token": "GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o",
      "validationRecord": [
        {
          "url": "http://www.onmusicstage.com/.well-known/acme-challenge/GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o",
          "hostname": "www.onmusicstage.com",
          "port": "80",
          "addressesResolved": [
            "88.99.170.246"
          ],
          "addressUsed": "88.99.170.246"
        }
      ],
      "validated": "2023-11-25T17:31:04Z"
    }
  ]
}
2023-11-25 20:31:08,211:DEBUG:acme.client:Storing nonce: SFMYLIQjMvtddICMjgVo2nHmnNrdNMnlSU_KUeO5LKzVN_wivks
2023-11-25 20:31:08,213:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY: 502

Domain: www.onmusicstage.com
Type:   unauthorized
Detail: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o: 502

To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2023-11-25 20:31:08,215:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o: 502

2023-11-25 20:31:08,215:DEBUG:certbot.error_handler:Calling registered functions
2023-11-25 20:31:08,215:INFO:certbot.auth_handler:Cleaning up challenges
2023-11-25 20:31:08,838:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1250, in certonly
    lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
    self._respond(aauthzrs, resp, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond
    self._poll_challenges(aauthzrs, chall_update, best_effort)
  File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://onmusicstage.com/.well-known/acme-challenge/XUL8r6eO8-aBU7xcdYWaOHPSycf7t49fGwGa8GymkXY: 502, www.onmusicstage.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 88.99.170.246: Invalid response from http://www.onmusicstage.com/.well-known/acme-challenge/GrEI2lVsL2RjTcMX_YpGrz5qlGOMKb1LbfB5O8TRg-o: 502
2023-11-25 20:36:26,943:DEBUG:certbot.main:certbot version: 0.31.0
2023-11-25 20:36:26,946:DEBUG:certbot.main:Arguments: ['--apache', '-d', 'onmusicstage.com', '-d', 'www.onmusicstage.com']
2023-11-25 20:36:26,948:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2023-11-25 20:36:26,983:DEBUG:certbot.log:Root logging level set at 20
2023-11-25 20:36:26,986:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2023-11-25 20:36:26,989:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2023-11-25 20:36:27,249:DEBUG:certbot_apache.configurator:Apache version is 2.4.18
2023-11-25 20:36:28,056:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7fc839d827b8>
Prep: True
2023-11-25 20:36:28,060:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7fc839d827b8> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7fc839d827b8>
2023-11-25 20:36:28,061:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2023-11-25 20:36:28,069:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(new_authzr_uri='https://acme-v01.api.letsencrypt.org/acme/new-authz', body=Registration(status=None, key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7fc839c50d30>)>), terms_of_service_agreed=None, contact=('mailto:snoof@list.ru',), agreement='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', only_return_existing=None, external_account_binding=None), uri='https://acme-v01.api.letsencrypt.org/acme/reg/16514801', terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 9f3862a1dbba370e17c48dbf63514088, Meta(creation_dt=datetime.datetime(2017, 6, 7, 8, 48, 6, tzinfo=<UTC>), creation_host='Ubuntu-1604-xenial-64-minimal'))>
2023-11-25 20:36:28,072:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2023-11-25 20:36:28,078:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2023-11-25 20:36:28,720:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 752
2023-11-25 20:36:28,722:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:36:28 GMT
Content-Type: application/json
Content-Length: 752
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "haURzpBjoY8": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-01/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2023-11-25 20:36:28,752:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2021-08-23 20:46:15 UTC.
2023-11-25 20:36:28,752:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2023-11-25 20:36:28,753:INFO:certbot.main:Renewing an existing certificate
2023-11-25 20:36:28,788:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0031_key-certbot.pem
2023-11-25 20:36:28,795:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0031_csr-certbot.pem
2023-11-25 20:36:28,797:DEBUG:acme.client:Requesting fresh nonce
2023-11-25 20:36:28,797:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
2023-11-25 20:36:28,964:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2023-11-25 20:36:28,965:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 25 Nov 2023 17:36:28 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: SFMYLIQjl7riDsl6foJh8kqkMk8gMphpuMIDqQkZ-CMl1rjpygg
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2023-11-25 20:36:28,965:DEBUG:acme.client:Storing nonce: SFMYLIQjl7riDsl6foJh8kqkMk8gMphpuMIDqQkZ-CMl1rjpygg
2023-11-25 20:36:28,966:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "value": "onmusicstage.com",\n      "type": "dns"\n    },\n    {\n      "value": "www.onmusicstage.com",\n      "type": "dns"\n    }\n  ]\n}'
2023-11-25 20:36:28,972:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
{
  "protected": "eyJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzE2NTE0ODAxIiwgImFsZyI6ICJSUzI1NiIsICJub25jZSI6ICJTRk1ZTElRamw3cmlEc2w2Zm9KaDhrcWtNazhnTXBocHVNSURxUWtaLUNNbDFyanB5Z2ciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
  "signature": "cdYM5ZU3qbj0LUXqkNoxxWM8XnZ4JoS2j5Keq86UaqBilJaY0dXaUPdi_zwyBskIuuzbmOan8XN0P9eTluAWRUTLRbybcbQqKnS9nLafNWnb05XCuOm58bIQqs-Hm3kQx3a8LcGWRbUn6qGwshmRnCAW24Vey0HD7SJrv8tJ1lat7TkDMJbj8afGkywO0p8ibZIcvJ6vSpp1R7ODIieqgFHiOfnPC-wTSbB7Lm4XRDU11zB5MxRL4q7S-2LX5jezo_k05XFu9AWuOGDdhDWXADxWID1L94hrulxy_hBdRd7304uy5-ZN1ZjBuuUuB4ZWOkqM6Ljc6irIwgT5Nc3Erg",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInZhbHVlIjogIm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9LAogICAgewogICAgICAidmFsdWUiOiAid3d3Lm9ubXVzaWNzdGFnZS5jb20iLAogICAgICAidHlwZSI6ICJkbnMiCiAgICB9CiAgXQp9"
}
2023-11-25 20:36:29,161:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 429 213
2023-11-25 20:36:29,163:DEBUG:acme.client:Received response:
HTTP 429
Server: nginx
Date: Sat, 25 Nov 2023 17:36:29 GMT
Content-Type: application/problem+json
Content-Length: 213
Connection: keep-alive
Boulder-Requester: 16514801
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: jXyutbsn0TmqWbGalbB9-avY_EpY34uWNgEunRvm5cIPjyWIhYI

{
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/",
  "status": 429
}
2023-11-25 20:36:29,163:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
    return config.func(config, plugins)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run
    certname, lineage)
  File "/usr/lib/python3/dist-packages/certbot/main.py", line 116, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 323, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/usr/lib/python3/dist-packages/certbot/client.py", line 385, in _get_order_and_authorizations
    orderr = self.acme.new_order(csr_pem)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 889, in new_order
    return self.client.new_order(csr_pem)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 672, in new_order
    response = self._post(self.directory['newOrder'], order)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 96, in _post
    return self.net.post(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 1204, in post
    return self._post_once(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 1218, in _post_once
    response = self._check_response(response, content_type=content_type)
  File "/usr/lib/python3/dist-packages/acme/client.py", line 1073, in _check_response
    raise messages.Error.from_json(jobj)
acme.messages.Error: urn:ietf:params:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/
2023-11-25 20:36:29,167:ERROR:certbot.log:An unexpected error occurred:
2023-11-25 20:36:29,167:ERROR:certbot.log:There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/