2024-04-26 16:43:55,750:DEBUG:certbot._internal.main:certbot version: 2.10.0
2024-04-26 16:43:55,751:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/local/bin/certbot
2024-04-26 16:43:55,751:DEBUG:certbot._internal.main:Arguments: ['--webroot', '--webroot-path=/usr/share/nginx/html/letsencrypt', '--email', 'najia@slc-assurances.fr', '--agree-tos', '--no-eff-email', '--staging', '-d', 'comparateur.slc-assurances.fr']
2024-04-26 16:43:55,751:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2024-04-26 16:43:55,781:DEBUG:certbot._internal.log:Root logging level set at 30
2024-04-26 16:43:55,782:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2024-04-26 16:43:55,783:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A seperate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7fda47245ee0>
Prep: True
2024-04-26 16:43:55,783:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7fda47245ee0> and installer None
2024-04-26 16:43:55,783:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2024-04-26 16:43:55,863:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-staging-v02.api.letsencrypt.org/acme/acct/144748474', new_authzr_uri=None, terms_of_service=None), 1ec5532130e65443d11476456e0e43c4, Meta(creation_dt=datetime.datetime(2024, 4, 15, 16, 45, 9, tzinfo=<UTC>), creation_host='724f11395b0d', register_to_eff=None))>
2024-04-26 16:43:55,863:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/directory.
2024-04-26 16:43:55,866:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging-v02.api.letsencrypt.org:443
2024-04-26 16:44:00,321:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 821
2024-04-26 16:44:00,322:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Fri, 26 Apr 2024 16:44:00 GMT
Content-Type: application/json
Content-Length: 821
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "Ik8AAoMObpY": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf",
    "website": "https://letsencrypt.org/docs/staging-environment/"
  },
  "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-staging-v02.api.letsencrypt.org/draft-ietf-acme-ari-02/renewalInfo/",
  "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert"
}
2024-04-26 16:44:00,330:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for comparateur.slc-assurances.fr
2024-04-26 16:44:00,333:DEBUG:acme.client:Requesting fresh nonce
2024-04-26 16:44:00,334:DEBUG:acme.client:Sending HEAD request to https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce.
2024-04-26 16:44:00,488:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
2024-04-26 16:44:00,489:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Fri, 26 Apr 2024 16:44:00 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: gP7UL-1ggo1t0Wp5W6elEe3uOHuX_9FCTjt7W3XBHaI4TrTNwW8
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800


2024-04-26 16:44:00,489:DEBUG:acme.client:Storing nonce: gP7UL-1ggo1t0Wp5W6elEe3uOHuX_9FCTjt7W3XBHaI4TrTNwW8
2024-04-26 16:44:00,489:DEBUG:acme.client:JWS payload:
b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "comparateur.slc-assurances.fr"\n    }\n  ]\n}'
2024-04-26 16:44:00,494:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNDQ3NDg0NzQiLCAibm9uY2UiOiAiZ1A3VUwtMWdnbzF0MFdwNVc2ZWxFZTN1T0h1WF85RkNUanQ3VzNYQkhhSTRUclROd1c4IiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
  "signature": "drmoR5QOEoyZk_HmRssXXkh6nqw7GO5G42zWEYGyyw1EUwJsQaCWP6Nief7cBwuqYq__sCqljG9SfEBCN5Xfa1NnlMaq03Fujyt69JsdN0m9pE-C6Z3_qtrXhhYjhNGebtJoR6O9N3UoBBJXqpguMlBwkLpDwe6dmDmnaz_Ta0Tsf9ngWiUjN-TrnbdokTDUZA_Uh8qGFeN1M2DKnHOiUx2UqEEIqmcq6mW-3HsANENdyjQBAt5KDZVgCw5AZ0wtPO_8_wFemSLVNei1vYciRloQe8ANKkb3vO---mMFqQulYb52s4yl50OPwG90CIvnKTXKq9kPIq5ZskjF8KF-OA",
  "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImNvbXBhcmF0ZXVyLnNsYy1hc3N1cmFuY2VzLmZyIgogICAgfQogIF0KfQ"
}
2024-04-26 16:44:00,730:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 368
2024-04-26 16:44:00,731:DEBUG:acme.client:Received response:
HTTP 201
Server: nginx
Date: Fri, 26 Apr 2024 16:44:00 GMT
Content-Type: application/json
Content-Length: 368
Connection: keep-alive
Boulder-Requester: 144748474
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/144748474/16166828024
Replay-Nonce: gP7UL-1g0MFlI5SPBLmmMvdLL2nUsO3toxBGnqfom7D2n79HlN0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "status": "pending",
  "expires": "2024-05-03T16:44:00Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "comparateur.slc-assurances.fr"
    }
  ],
  "authorizations": [
    "https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/12153389004"
  ],
  "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/144748474/16166828024"
}
2024-04-26 16:44:00,731:DEBUG:acme.client:Storing nonce: gP7UL-1g0MFlI5SPBLmmMvdLL2nUsO3toxBGnqfom7D2n79HlN0
2024-04-26 16:44:00,732:DEBUG:acme.client:JWS payload:
b''
2024-04-26 16:44:00,734:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/12153389004:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNDQ3NDg0NzQiLCAibm9uY2UiOiAiZ1A3VUwtMWcwTUZsSTVTUEJMbW1NdmRMTDJuVXNPM3RveEJHbnFmb203RDJuNzlIbE4wIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzEyMTUzMzg5MDA0In0",
  "signature": "FrtX0IiSnTcE1S7lyUVqHf7IKaIIwXihNJiRI7hVn0Jm1-brXR1qw-9ry2DbrE4Fc7CJ4-77njrksV9gwuKnVKTL3Fln33Gg4ZGaRfqKnP3DLTAQrgqYKM-_1hV2DS_rx22Sg8TUnHWTROEneFeNzSk3-nnWwR5MvBm2M6dPObxzZuxHAcFq9YW1J-TV0A2LMZ2gtGDIF9paDcfYOTdRm1Y0yXuHkMZ7_0Vq66waSlh-v6JZ_rLT3RSr2zoFrKkX_lSN17lpGwKHEbgwCmXTCdMQz5h8KIlYqA6Oo3ESMcdHy7en18MLa9JO4nMV2WaHNQIjGf4B1pYPA0krrKwNmA",
  "payload": ""
}
2024-04-26 16:44:00,892:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/12153389004 HTTP/1.1" 200 834
2024-04-26 16:44:00,892:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Fri, 26 Apr 2024 16:44:00 GMT
Content-Type: application/json
Content-Length: 834
Connection: keep-alive
Boulder-Requester: 144748474
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: vU6liGrnIOzTsrCscVZa7puQDqZafLe3dwJhTRYpHN_kxsyszSs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "comparateur.slc-assurances.fr"
  },
  "status": "pending",
  "expires": "2024-05-03T16:44:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/HHjYZg",
      "token": "3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/NEnlMA",
      "token": "3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/PvfLMA",
      "token": "3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU"
    }
  ]
}
2024-04-26 16:44:00,893:DEBUG:acme.client:Storing nonce: vU6liGrnIOzTsrCscVZa7puQDqZafLe3dwJhTRYpHN_kxsyszSs
2024-04-26 16:44:00,893:INFO:certbot._internal.auth_handler:Performing the following challenges:
2024-04-26 16:44:00,893:INFO:certbot._internal.auth_handler:http-01 challenge for comparateur.slc-assurances.fr
2024-04-26 16:44:00,894:INFO:certbot._internal.plugins.webroot:Using the webroot path /usr/share/nginx/html/letsencrypt for all unmatched domains.
2024-04-26 16:44:00,894:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge
2024-04-26 16:44:00,895:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU
2024-04-26 16:44:00,896:DEBUG:acme.client:JWS payload:
b'{}'
2024-04-26 16:44:00,898:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/HHjYZg:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNDQ3NDg0NzQiLCAibm9uY2UiOiAidlU2bGlHcm5JT3pUc3JDc2NWWmE3cHVRRHFaYWZMZTNkd0poVFJZcEhOX2t4c3lzelNzIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzEyMTUzMzg5MDA0L0hIallaZyJ9",
  "signature": "dUT2XgDa6Ecf-Abt2SSg4-QFb7n5ysXREckc2cQJskFbEy82gBMqHWpyg3yZqvHUfpdUoim-t08mzDQVMbtxaA8MN5m0BzztYBN7Zizt8zBxO_V2dZZxQbEAvD9MLS7972tA3f6eKUlV7KecI8NLMG5SkV3IKjOHEJQWENP5k09BFZ5r-VnBAqmmZD5kU9jIMOrvIG4zugwjGo5QQmQArqMWZlvl8b130DTp5ImlaAi2AyT2txg3hyNelEFDwwcwR8Vm931eCqUb0rMOD1QdSRQniGDsrMFcELJIQrPOD_A5E-LG5i04shLbmXrOWoW1FDioQ4lYNX6zCWUda6kcxQ",
  "payload": "e30"
}
2024-04-26 16:44:01,058:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/12153389004/HHjYZg HTTP/1.1" 200 194
2024-04-26 16:44:01,059:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Fri, 26 Apr 2024 16:44:00 GMT
Content-Type: application/json
Content-Length: 194
Connection: keep-alive
Boulder-Requester: 144748474
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/12153389004>;rel="up"
Location: https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/HHjYZg
Replay-Nonce: gP7UL-1gNaisIqLrADnZydfxUARO9QvxLO69aPoictwbRxrwaMs
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/HHjYZg",
  "token": "3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU"
}
2024-04-26 16:44:01,059:DEBUG:acme.client:Storing nonce: gP7UL-1gNaisIqLrADnZydfxUARO9QvxLO69aPoictwbRxrwaMs
2024-04-26 16:44:01,060:INFO:certbot._internal.auth_handler:Waiting for verification...
2024-04-26 16:44:02,060:DEBUG:acme.client:JWS payload:
b''
2024-04-26 16:44:02,061:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/12153389004:
{
  "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNDQ3NDg0NzQiLCAibm9uY2UiOiAiZ1A3VUwtMWdOYWlzSXFMckFEblp5ZGZ4VUFSTzlRdnhMTzY5YVBvaWN0d2JSeHJ3YU1zIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzEyMTUzMzg5MDA0In0",
  "signature": "NvJeQHPueHTpAunu0kvycpO8sMCjYpseU3yc7pF8glaKv7oHCgkZVUpVebtcyyD50hT6aDcefn3BrjRFzqqPrtqRnznCKBhRMR3IY9IwtiZdvqv07B38vNNgr21WkVkyyVmH9UJCldAZRoR3_Yah-jgensh0qW1b75FyWWq1h9h5lMSyxY_YJyYOZfs49OwgkWjEPSAsvp1stadu_pHITbPswbEcPgdxIOcjGUJA4sCLRAvnSkAeiTn7HTLy4sZpctNwFY2-AP7ENsn4iudBagPwk9lZfgIgH1pHKAhLuEmSwkHfU_9WqILhBeeqauC9MbfqjaN0l0lOIhvfjVrzvQ",
  "payload": ""
}
2024-04-26 16:44:02,219:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/12153389004 HTTP/1.1" 200 1203
2024-04-26 16:44:02,220:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Fri, 26 Apr 2024 16:44:02 GMT
Content-Type: application/json
Content-Length: 1203
Connection: keep-alive
Boulder-Requester: 144748474
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: gP7UL-1gGYjaNlyibyc5CEe6z1GgZXSGInIMXUZq-MzOhuuInwU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

{
  "identifier": {
    "type": "dns",
    "value": "comparateur.slc-assurances.fr"
  },
  "status": "invalid",
  "expires": "2024-05-03T16:44:00Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "invalid",
      "error": {
        "type": "urn:ietf:params:acme:error:connection",
        "detail": "51.255.71.144: Fetching http://comparateur.slc-assurances.fr/.well-known/acme-challenge/3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU: Connection refused",
        "status": 400
      },
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/12153389004/HHjYZg",
      "token": "3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU",
      "validationRecord": [
        {
          "url": "http://comparateur.slc-assurances.fr/.well-known/acme-challenge/3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU",
          "hostname": "comparateur.slc-assurances.fr",
          "port": "80",
          "addressesResolved": [
            "51.255.71.144"
          ],
          "addressUsed": "51.255.71.144",
          "resolverAddrs": [
            "A:10.0.32.84:23899",
            "AAAA:10.0.32.82:23095"
          ]
        }
      ],
      "validated": "2024-04-26T16:44:00Z"
    }
  ]
}
2024-04-26 16:44:02,220:DEBUG:acme.client:Storing nonce: gP7UL-1gGYjaNlyibyc5CEe6z1GgZXSGInIMXUZq-MzOhuuInwU
2024-04-26 16:44:02,220:INFO:certbot._internal.auth_handler:Challenge failed for domain comparateur.slc-assurances.fr
2024-04-26 16:44:02,221:INFO:certbot._internal.auth_handler:http-01 challenge for comparateur.slc-assurances.fr
2024-04-26 16:44:02,221:DEBUG:certbot._internal.display.obj:Notifying user: 
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
  Domain: comparateur.slc-assurances.fr
  Type:   connection
  Detail: 51.255.71.144: Fetching http://comparateur.slc-assurances.fr/.well-known/acme-challenge/3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU: Connection refused

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

2024-04-26 16:44:02,222:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.

2024-04-26 16:44:02,222:DEBUG:certbot._internal.error_handler:Calling registered functions
2024-04-26 16:44:02,222:INFO:certbot._internal.auth_handler:Cleaning up challenges
2024-04-26 16:44:02,222:DEBUG:certbot._internal.plugins.webroot:Removing /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/3m4-5_dq__hANVGYx3UR0098odBo7XGSDX7MBOCaNTU
2024-04-26 16:44:02,223:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up
2024-04-26 16:44:02,223:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/local/bin/certbot", line 33, in <module>
    sys.exit(load_entry_point('certbot', 'console_scripts', 'certbot')())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/main.py", line 19, in main
    return internal_main.main(cli_args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1894, in main
    return config.func(config, plugins)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1600, in certonly
    lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 143, in _get_and_save_cert
    lineage = le_client.obtain_and_enroll_certificate(domains, certname)
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 517, in obtain_and_enroll_certificate
    cert, chain, key, _ = self.obtain_certificate(domains)
                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 428, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2024-04-26 16:44:02,226:ERROR:certbot._internal.log:Some challenges have failed.