elliotec · May 14, 2017 07:06
diff --git a/letsencrypt.log b/letsencrypt.log
 2017-05-14 06:45:08,109:DEBUG:certbot.main:Root logging level set at 20
 2017-05-14 06:45:08,110:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
 2017-05-14 06:45:08,111:DEBUG:certbot.main:certbot version: 0.12.0
 2017-05-14 06:45:08,111:DEBUG:certbot.main:Arguments: ['--webroot', '--webroot-path=/srv/www/elliotec.com/', '-d', 'elliotec.com', '-d', 'www.elliotec.com', '--staging']
 2017-05-14 06:45:08,111:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
 2017-05-14 06:45:08,112:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
 2017-05-14 06:45:08,112:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
 Description: Place files in webroot directory
 Interfaces: IAuthenticator, IPlugin
 Entry point: webroot = certbot.plugins.webroot:Authenticator
 Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f6be2b9aa10>
 Prep: True
 2017-05-14 06:45:08,113:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f6be2b9aa10> and installer None
 2017-05-14 06:45:08,281:DEBUG:certbot.main:Picked account: <Account(d753a044dd814678fe7d28ae7bc48795)>
 2017-05-14 06:45:08,282:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/directory.
 2017-05-14 06:45:08,295:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging.api.letsencrypt.org
 2017-05-14 06:45:08,452:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 372
 2017-05-14 06:45:08,453:DEBUG:acme.client:Received response:
 HTTP 200
 Content-Length: 372
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: MvH25W5BWuIttVtRMWJ9aKDzlGKU8jNMcLEPepQ-0Fo
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: Dv-puUHq3kewAlfbQI2Yhd6ZQOocgk08taDDpq9HQTY

 {
  "key-change": "https://acme-staging.api.letsencrypt.org/acme/key-change",
  "new-authz": "https://acme-staging.api.letsencrypt.org/acme/new-authz",
  "new-cert": "https://acme-staging.api.letsencrypt.org/acme/new-cert",
  "new-reg": "https://acme-staging.api.letsencrypt.org/acme/new-reg",
  "revoke-cert": "https://acme-staging.api.letsencrypt.org/acme/revoke-cert"
 }
 2017-05-14 06:45:08,455:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/elliotec.com.conf is broken. Skipping.
 2017-05-14 06:45:08,456:DEBUG:certbot.cert_manager:Traceback was:
 Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/certbot/cert_manager.py", line 246, in _search_lineages
    candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
  File "/usr/lib/python2.7/dist-packages/certbot/storage.py", line 392, in __init__
    self._check_symlinks()
  File "/usr/lib/python2.7/dist-packages/certbot/storage.py", line 451, in _check_symlinks
    "expected {0} to be a symlink".format(link))
 CertStorageError: expected /etc/letsencrypt/live/elliotec.com/cert.pem to be a symlink

 2017-05-14 06:45:08,456:INFO:certbot.main:Obtaining a new certificate
 2017-05-14 06:45:08,456:DEBUG:acme.client:Requesting fresh nonce
 2017-05-14 06:45:08,456:DEBUG:acme.client:Sending HEAD request to https://acme-staging.api.letsencrypt.org/acme/new-authz.
 2017-05-14 06:45:08,491:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
 2017-05-14 06:45:08,492:DEBUG:acme.client:Received response:
 HTTP 405
 Content-Length: 91
 Allow: POST
 Boulder-Request-Id: bchZcAG2G8QdolFqBGAZQhl8lb0M9Hn8rMDW3f1-PcU
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 Content-Type: application/problem+json
 Replay-Nonce: Pyrhil6k9Bj5QYE4YZZ3QO67lfg87hkL8hbs2KPqdbM


 2017-05-14 06:45:08,492:DEBUG:acme.client:Storing nonce: Pyrhil6k9Bj5QYE4YZZ3QO67lfg87hkL8hbs2KPqdbM
 2017-05-14 06:45:08,492:DEBUG:acme.client:JWS payload:
 {
  "identifier": {
    "type": "dns", 
    "value": "elliotec.com"
  }, 
  "resource": "new-authz"
 }
 2017-05-14 06:45:08,495:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/new-authz:
 {
  "header": {
    "alg": "RS256", 
    "jwk": {
      "e": "AQAB", 
      "kty": "RSA", 
      "n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
    }
  }, 
  "protected": "eyJub25jZSI6ICJQeXJoaWw2azlCajVRWUU0WVpaM1FPNjdsZmc4N2hrTDhoYnMyS1BxZGJNIn0", 
  "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAiZWxsaW90ZWMuY29tIgogIH0sIAogICJyZXNvdXJjZSI6ICJuZXctYXV0aHoiCn0", 
  "signature": "ceMWo1FpLH7Fyla_qfk3wggO14vQHFrqM233Dh7TXuWgfAA2J--iyAHoApxRJLGlFr5HyZGe7_X0FgFDpHazL1XRhdbcM5WD0nIDP0DNFtzuVU1B0PMzM4Y4ABR7hHecGOUGp7z6WXI6orUZd9H4mOlOXcTKUGp_cRJmfMZSgdNoh1dq7aEUuJ3pQpmjck5FsboqEs0r-xbggFddj1gosdUrItwe_BS29YjbA_3_uOcA-iGVLZnwFkoKtk-91oqeqmydrl-oHDooZ_hAI02wodfJeg9SY7WGxhJ_he-WO9C4yV4qIqK0KmVBLPwwfQYyj7x_eEgdeTswyaZete0ZbQ"
 }
 2017-05-14 06:45:08,573:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1005
 2017-05-14 06:45:08,573:DEBUG:acme.client:Received response:
 HTTP 201
 Content-Length: 1005
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: AV0iiEbH1ulCZm5oe09ac3bkTKyDq_C778oHphC6bvE
 Boulder-Requester: 2239509
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Location: https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: 3GULbXv1Y9bRTr4hHIBUpFK_cqXmv0nP0zMPXd2rvho

 {
  "identifier": {
    "type": "dns",
    "value": "elliotec.com"
  },
  "status": "pending",
  "expires": "2017-05-21T06:45:08.58350495Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
      "token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
      "token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
      "token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      0
    ],
    [
      2
    ]
  ]
 }
 2017-05-14 06:45:08,574:DEBUG:acme.client:Storing nonce: 3GULbXv1Y9bRTr4hHIBUpFK_cqXmv0nP0zMPXd2rvho
 2017-05-14 06:45:08,575:DEBUG:acme.client:JWS payload:
 {
  "identifier": {
    "type": "dns", 
    "value": "www.elliotec.com"
  }, 
  "resource": "new-authz"
 }
 2017-05-14 06:45:08,578:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/new-authz:
 {
  "header": {
    "alg": "RS256", 
    "jwk": {
      "e": "AQAB", 
      "kty": "RSA", 
      "n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
    }
  }, 
  "protected": "eyJub25jZSI6ICIzR1VMYlh2MVk5YlJUcjRoSElCVXBGS19jcVhtdjBuUDB6TVBYZDJydmhvIn0", 
  "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAid3d3LmVsbGlvdGVjLmNvbSIKICB9LCAKICAicmVzb3VyY2UiOiAibmV3LWF1dGh6Igp9", 
  "signature": "YE0b2xPkgwr-MWGeX-CMGjr1FzDdY8Ab7Ke5xI3miRDIR4auaDWN7PL4I5adY-eU7mI6fZ2KthQ9Xwyfx8iM4Ju9NzQgH-dbTYpi5tEykQyyDyVLVEOv6DFwPaqbBJz_gWhLFJQU1f6hsSmquvZQ2H2rH1HuTVk0D8JXtY1Kz5elrpi1ooVXDFmFvBBZdf6RYxh1VPX_xNsWkHTmK8ITj8voBNtEli7sfYa4RVEJ7trhqYHfQGlJJamOQYf4011NV3pWp2Z64L6z3YkRqaINxD_rowhqZEl6zKB2WPqCCSe7OghseLXBbHlWmdIWjVxEQaGqkirOK68-8yZXq1UnOw"
 }
 2017-05-14 06:45:08,632:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1008
 2017-05-14 06:45:08,633:DEBUG:acme.client:Received response:
 HTTP 201
 Content-Length: 1008
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: aOFPrOqmiyUw7kNUmWpWFc4NbyE1KRo2DssWqjq8MCw
 Boulder-Requester: 2239509
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Location: https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: RQpmiFEvnj14U4puqHyFtcSadmtquNu_8DwJh4wuS9o

 {
  "identifier": {
    "type": "dns",
    "value": "www.elliotec.com"
  },
  "status": "pending",
  "expires": "2017-05-21T06:45:08.6496456Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
      "token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8"
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
      "token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
      "token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      2
    ],
    [
      0
    ]
  ]
 }
 2017-05-14 06:45:08,633:DEBUG:acme.client:Storing nonce: RQpmiFEvnj14U4puqHyFtcSadmtquNu_8DwJh4wuS9o
 2017-05-14 06:45:08,634:INFO:certbot.auth_handler:Performing the following challenges:
 2017-05-14 06:45:08,634:INFO:certbot.auth_handler:http-01 challenge for elliotec.com
 2017-05-14 06:45:08,635:INFO:certbot.auth_handler:http-01 challenge for www.elliotec.com
 2017-05-14 06:45:08,635:INFO:certbot.plugins.webroot:Using the webroot path /srv/www/elliotec.com for all unmatched domains.
 2017-05-14 06:45:08,635:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /srv/www/elliotec.com/.well-known/acme-challenge
 2017-05-14 06:45:08,636:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /srv/www/elliotec.com/.well-known/acme-challenge
 2017-05-14 06:45:08,639:DEBUG:certbot.plugins.webroot:Attempting to save validation to /srv/www/elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q
 2017-05-14 06:45:08,643:DEBUG:certbot.plugins.webroot:Attempting to save validation to /srv/www/elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8
 2017-05-14 06:45:08,643:INFO:certbot.auth_handler:Waiting for verification...
 2017-05-14 06:45:08,643:DEBUG:acme.client:JWS payload:
 {
  "keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI", 
  "type": "http-01", 
  "resource": "challenge"
 }
 2017-05-14 06:45:08,646:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778:
 {
  "header": {
    "alg": "RS256", 
    "jwk": {
      "e": "AQAB", 
      "kty": "RSA", 
      "n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
    }
  }, 
  "protected": "eyJub25jZSI6ICJSUXBtaUZFdm5qMTRVNHB1cUh5RnRjU2FkbXRxdU51XzhEd0poNHd1UzlvIn0", 
  "payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogIm5BWnJhRGE2LWNUV2VmNmpGSXZYMTN1MUswcUUxUjlRbk5JMUFIbFpLX1EuMlFNdVp5a1c3OVVCcERCSVI0R2tVSE1aN0Vjd0pRT18zSS0zdlpHQ0ZjSSIsIAogICJ0eXBlIjogImh0dHAtMDEiLCAKICAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIgp9", 
  "signature": "jWe6xsmMfFxMo-85J9MAKsXa0QuVhiQbsUBchP7qwc-VFAngSHOYOZTe68YnoRZfnU36w-IWS8E0a16x0oLTVFnoe4_neleBHEZ4H4EQ5ijji7jg661jBnZ6__i499WWIfirwfdgfQie-8FvT3DoBwG9MXd8WiqSwTK9xRir1vnAryac76bVN2igHaHg7uxdvUXrs-afcQPKe5o8dOTR2z0K5Y90XzBuVV25UQp0E98IwwsyzNVz2Ro5zYsIgoTJfJ4dIst89x_Vi3K5Z_WbANJiFlig7C14ZSIbrDP9h3Plh9_9jUw5QKSoDNqDOnAUP_5L9Q5E53gettK4ruxW3A"
 }
 2017-05-14 06:45:08,698:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778 HTTP/1.1" 202 338
 2017-05-14 06:45:08,698:DEBUG:acme.client:Received response:
 HTTP 202
 Content-Length: 338
 Boulder-Request-Id: -Q2EoCcE4ZYSWBmqzuaTUzUnWOeQawSsY47js7ra3r8
 Boulder-Requester: 2239509
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM>;rel="up"
 Location: https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 Content-Type: application/json
 Replay-Nonce: ktlb8mYoKILJSgP1OSpSGWxOdeuhpxCrS5g1Yf5kxus

 {
  "type": "http-01",
  "status": "pending",
  "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
  "token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
  "keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
 }
 2017-05-14 06:45:08,698:DEBUG:acme.client:Storing nonce: ktlb8mYoKILJSgP1OSpSGWxOdeuhpxCrS5g1Yf5kxus
 2017-05-14 06:45:08,699:DEBUG:acme.client:JWS payload:
 {
  "keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI", 
  "type": "http-01", 
  "resource": "challenge"
 }
 2017-05-14 06:45:08,702:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781:
 {
  "header": {
    "alg": "RS256", 
    "jwk": {
      "e": "AQAB", 
      "kty": "RSA", 
      "n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
    }
  }, 
  "protected": "eyJub25jZSI6ICJrdGxiOG1Zb0tJTEpTZ1AxT1NwU0dXeE9kZXVocHhDclM1ZzFZZjVreHVzIn0", 
  "payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogIjc3cG1DSEtZY2czNkRjN0NxTE4wTmRNR00xOHhoRFBTbW82b2VfM3NaXzguMlFNdVp5a1c3OVVCcERCSVI0R2tVSE1aN0Vjd0pRT18zSS0zdlpHQ0ZjSSIsIAogICJ0eXBlIjogImh0dHAtMDEiLCAKICAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIgp9", 
  "signature": "Pys_cf1U79nYchtWlDdtViS70O0aF1QZaLEBnm8tJ7CGsq_ji_qBJ3FcqPrImm9PbWPCL_jCtcoKqie883uwsAZSaj7WvkDso14zQg4iVuzIEEB9rJlx_6Iaue6hLixLip-IB-OFRc7IGajUS3n2Y5AXhMGKsv-C3UBTqqRaXYvZDkCuXgyw-I867wYSwHSB8HM8xWJeFeQWZMJIkOg86ztA3lLWEwNDz8JjWI7h0zEYZTUUciE2Tqyy71tckz67zqKvCNb9RyxXK85-toUq28tGhI3ln3iHiAL-TF9RlMIgKxpyseRBrfaQNgNafb8YnHdwRIxW5iPGteN6clWQnQ"
 }
 2017-05-14 06:45:08,765:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781 HTTP/1.1" 202 338
 2017-05-14 06:45:08,766:DEBUG:acme.client:Received response:
 HTTP 202
 Content-Length: 338
 Boulder-Request-Id: fupUIybI_IGqMYP1jhu1fIpZ8iwUvMDWeY6YjgbYazo
 Boulder-Requester: 2239509
 Expires: Sun, 14 May 2017 06:45:08 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg>;rel="up"
 Location: https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:08 GMT
 Content-Type: application/json
 Replay-Nonce: pf9xwqsj5-SE2q-G8Yn6vCZt8TIRX9Hu4fdkz_cEg1A

 {
  "type": "http-01",
  "status": "pending",
  "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
  "token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
  "keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
 }
 2017-05-14 06:45:08,766:DEBUG:acme.client:Storing nonce: pf9xwqsj5-SE2q-G8Yn6vCZt8TIRX9Hu4fdkz_cEg1A
 2017-05-14 06:45:11,769:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM.
 2017-05-14 06:45:12,335:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM HTTP/1.1" 200 1113
 2017-05-14 06:45:12,336:DEBUG:acme.client:Received response:
 HTTP 200
 Content-Length: 1113
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: _NjARZvGLaBnblbEwQcPkkZJpeGO-pG_FLOM9WsMY-k
 Expires: Sun, 14 May 2017 06:45:12 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:12 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: oEJwei70-yUEHMiC76_u_K6uRz18MACk7mTNqzTq0CE

 {
  "identifier": {
    "type": "dns",
    "value": "elliotec.com"
  },
  "status": "pending",
  "expires": "2017-05-21T06:45:08Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
      "token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
      "keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
      "token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
      "token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      0
    ],
    [
      2
    ]
  ]
 }
 2017-05-14 06:45:12,337:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg.
 2017-05-14 06:45:12,501:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg HTTP/1.1" 200 1117
 2017-05-14 06:45:12,502:DEBUG:acme.client:Received response:
 HTTP 200
 Content-Length: 1117
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: nnlcAszabjsRgErfZ1KWJityGXOnNDmNlTPuLbxlndU
 Expires: Sun, 14 May 2017 06:45:12 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:12 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: YQH9st1I4NsSllQgJ56MkM1mqZb6qp3FvM887Iv7SsI

 {
  "identifier": {
    "type": "dns",
    "value": "www.elliotec.com"
  },
  "status": "pending",
  "expires": "2017-05-21T06:45:08Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
      "token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
      "keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
      "token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
      "token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      2
    ],
    [
      0
    ]
  ]
 }
 2017-05-14 06:45:15,505:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM.
 2017-05-14 06:45:15,550:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM HTTP/1.1" 200 2115
 2017-05-14 06:45:15,551:DEBUG:acme.client:Received response:
 HTTP 200
 Content-Length: 2115
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: JZW80A6wso1PB2rZn01bvjfra85AvaxfNVUkcINWNr8
 Expires: Sun, 14 May 2017 06:45:15 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:15 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: OA2Jzp1WyAOLX4rTsYf9pfUG3_ETrQGcr5rA73b5bM8

 {
  "identifier": {
    "type": "dns",
    "value": "elliotec.com"
  },
  "status": "invalid",
  "expires": "2017-05-21T06:45:08Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:acme:error:connection",
        "detail": "Could not connect to elliotec.com",
        "status": 400
      },
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
      "token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
      "keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
      "validationRecord": [
        {
          "url": "https://elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
          "hostname": "elliotec.com",
          "port": "443",
          "addressesResolved": [
            "138.68.236.200",
            "2604:a880:2:d0::972:f001"
          ],
          "addressUsed": "138.68.236.200",
          "addressesTried": []
        },
        {
          "url": "http://elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
          "hostname": "elliotec.com",
          "port": "80",
          "addressesResolved": [
            "138.68.236.200",
            "2604:a880:2:d0::972:f001"
          ],
          "addressUsed": "138.68.236.200",
          "addressesTried": [
            "2604:a880:2:d0::972:f001"
          ]
        }
      ]
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
      "token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
      "token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      0
    ],
    [
      2
    ]
  ]
 }
 2017-05-14 06:45:15,552:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg.
 2017-05-14 06:45:15,597:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg HTTP/1.1" 200 1706
 2017-05-14 06:45:15,598:DEBUG:acme.client:Received response:
 HTTP 200
 Content-Length: 1706
 Strict-Transport-Security: max-age=604800
 Boulder-Request-Id: O-dcCEO22wSftPfoxsvw4hR_7RO4cJMx0tyXZ3fwf_A
 Expires: Sun, 14 May 2017 06:45:15 GMT
 Server: nginx
 Connection: keep-alive
 Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
 Pragma: no-cache
 Cache-Control: max-age=0, no-cache, no-store
 Date: Sun, 14 May 2017 06:45:15 GMT
 X-Frame-Options: DENY
 Content-Type: application/json
 Replay-Nonce: JEN5MtUnGRN0NINOoH_ye5-obhaWHTLpNgD07HqC8H0

 {
  "identifier": {
    "type": "dns",
    "value": "www.elliotec.com"
  },
  "status": "invalid",
  "expires": "2017-05-21T06:45:08Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:acme:error:connection",
        "detail": "Could not connect to www.elliotec.com",
        "status": 400
      },
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
      "token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
      "keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
      "validationRecord": [
        {
          "url": "http://www.elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
          "hostname": "www.elliotec.com",
          "port": "80",
          "addressesResolved": [
            "138.68.236.200",
            "2604:a880:2:d0::972:f001"
          ],
          "addressUsed": "2604:a880:2:d0::972:f001",
          "addressesTried": []
        }
      ]
    },
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
      "token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
      "token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
    }
  ],
  "combinations": [
    [
      1
    ],
    [
      2
    ],
    [
      0
    ]
  ]
 }
 2017-05-14 06:45:15,599:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:

 Domain: www.elliotec.com
 Type:   connection
 Detail: Could not connect to www.elliotec.com

 Domain: elliotec.com
 Type:   connection
 Detail: Could not connect to elliotec.com

 To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
 2017-05-14 06:45:15,599:INFO:certbot.auth_handler:Cleaning up challenges
 2017-05-14 06:45:15,599:DEBUG:certbot.plugins.webroot:Removing /srv/www/elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q
 2017-05-14 06:45:15,600:DEBUG:certbot.plugins.webroot:Removing /srv/www/elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8
 2017-05-14 06:45:15,600:DEBUG:certbot.plugins.webroot:All challenges cleaned up, removing /srv/www/elliotec.com/.well-known/acme-challenge
 2017-05-14 06:45:15,601:DEBUG:certbot.main:Exiting abnormally:
 Traceback (most recent call last):
  File "/usr/bin/certbot", line 11, in <module>
    load_entry_point('certbot==0.12.0', 'console_scripts', 'certbot')()
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 896, in main
    return config.func(config, plugins)
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 692, in certonly
    lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 92, in _get_and_save_cert
    lineage = le_client.obtain_and_enroll_certificate(domains, certname)
  File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 294, in obtain_and_enroll_certificate
    certr, chain, key, _ = self.obtain_certificate(domains)
  File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 265, in obtain_certificate
    self.config.allow_subset_of_names)
  File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 77, in get_authorizations
    self._respond(resp, best_effort)
  File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 134, in _respond
    self._poll_challenges(chall_update, best_effort)
  File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 198, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
 FailedChallenges: Failed authorization procedure. www.elliotec.com (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to www.elliotec.com, elliotec.com (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to elliotec.com