Acme.sh doesnt issue certificates starting version 3.0.6

[Alaemokadem]

I have installed acme.sh version 3.0.5 and configured it against our internal acme server. Everything was working fine. So far so good.
But after upgrading it to a recent version, the issuing stopped working.

I have tried also to install a recent version and configured it the same way as version 3.0.5, but I was recieving the same internal error 500.

The installation steps that I have followed which are verified and working for version 3.0.5, but doesn't work with other posterior versions, are the following:

[root@hostname .acme.sh]# git clone --depth 1 https://github.com/acmesh-official/acme.sh.git -b 3.0.5
Cloning into 'acme.sh'...
remote: Enumerating objects: 231, done.
remote: Counting objects: 100% (231/231), done.
remote: Compressing objects: 100% (224/224), done.
remote: Total 231 (delta 29), reused 49 (delta 7), pack-reused 0 (from 0)
Receiving objects: 100% (231/231), 364.95 KiB | 8.69 MiB/s, done.
Resolving deltas: 100% (29/29), done.
Note: switching to 'b7caf7a0165d80dd1556b16057a06bb32025066d'.

Change the repository name: [root@hostname .acme.sh]#mv acme.sh acme.sh.305
Go to package repository: [root@hostname .acme.sh]#cd acme.sh.305
Install acme.sh:
[root@hostname acme.sh.305]# ./acme.sh --install -m corporate_email@domain.com
[Thu Oct 9 01:45:17 PM CEST 2025] Installing to /root/.acme.sh
[Thu Oct 9 01:45:17 PM CEST 2025] Installed to /root/.acme.sh/acme.sh
[Thu Oct 9 01:45:17 PM CEST 2025] Installing alias to '/root/.bashrc'
[Thu Oct 9 01:45:17 PM CEST 2025] OK, Close and reopen your terminal to start using acme.sh
[Thu Oct 9 01:45:17 PM CEST 2025] Installing alias to '/root/.cshrc'
[Thu Oct 9 01:45:17 PM CEST 2025] Installing alias to '/root/.tcshrc'
[Thu Oct 9 01:45:17 PM CEST 2025] Installing cron job
[Thu Oct 9 01:45:17 PM CEST 2025] Good, bash is found, so change the shebang to use bash as preferred.
[Thu Oct 9 01:45:19 PM CEST 2025] OK
[root@hostname acme.sh.305]# acme.sh --version

          https://github.com/acmesh-official/acme.sh
          v3.0.5

3. Set the ACME as the default CA:

acme.sh --set-default-ca --server https://acme.internal.com/acme/ --ca-bundle /etc/ssl/certs/ca-bundle.crt

Run below command and verify that line DEFAULT_ACME_SERVER='https://acme.internal.com/acme/' has been added

[root@hostname .acme.sh]# cat account.conf

#LOG_FILE="/root/.acme.sh/acme.sh.log"

#LOG_LEVEL=1

#AUTO_UPGRADE="1"

#NO_TIMESTAMP=1

ACCOUNT_EMAIL='corporate_email@domain.com'

UPGRADE_HASH='e6959f093c4e147b4a206f0b5d027ff3d0a59b80'

DEFAULT_ACME_SERVER='https://internal.acme.com/acme/'

USER_PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/opt/puppetlabs/bin:/root/bin'

The repository internal.acme.com/acme is added under /root/.acme.sh/ca/

4. Issue a test certificate

acme.sh –-issue --domain example.domain.com --webroot /root/.acme.sh/

5. Go to /root/.acme.sh/ca/acme.internal.com/acme

Edit ca.conf with vi (vi ca.conf)

Add the following entries:

CA_EAB_KEY_ID=xxxxxxxxxxxxx

CA_EAB_HMAC_KEY=xxxxxxxxxxxxxxxxx

5.Issue a test certificate

acme.sh –-issue --domain example.domain.com --webroot /root/.acme.sh -w /home/root/public_html

[root@hostname acme.sh.306]# acme.sh --issue --domain example.domain.com --webroot /root/.acme.sh/ --force
[Thu Oct 9 01:44:47 PM CEST 2025] Using CA: https://acme.internal.com/acme/
[Thu Oct 9 01:44:47 PM CEST 2025] Single domain='example.domain.com'
[Thu Oct 9 01:44:47 PM CEST 2025] Getting domain auth token for each domain
[Thu Oct 9 01:44:47 PM CEST 2025] Getting webroot for domain='example.domain.com'
[Thu Oct 9 01:44:47 PM CEST 2025] example.domain.com is already verified, skip http-01.
[Thu Oct 9 01:44:47 PM CEST 2025] Verify finished, start to sign.
[Thu Oct 9 01:44:48 PM CEST 2025] Lets finalize the order.
[Thu Oct 9 01:44:48 PM CEST 2025] Le_OrderFinalize='https://acme.internal.com/ACME/orders/424aa992-4b75-4ab0-8f83-3e8616966bbd/Finalize'
[Thu Oct 9 01:44:48 PM CEST 2025] Sign failed, finalize code is not 200.
[Thu Oct 9 01:44:48 PM CEST 2025] {"type":"urn:ietf:params:acme:error:serverInternal","status":500}
[Thu Oct 9 01:44:48 PM CEST 2025] Please add '--debug' or '--log' to check more details.
[Thu Oct 9 01:44:48 PM CEST 2025] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

Can you help mw with that, I don't know what is this internal error 500 is due to what

Thanks a lot!

[github-actions]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

[Alaemokadem]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

I have upgraded to the latest version and I have the following same error:

[root@hostname acme.sh.all]# acme.sh --version
https://github.com/acmesh-official/acme.sh
v3.1.2
[root@hostname acme.sh.all]# acme.sh --issue --domain example.domain.com --webroot /root/.acme.sh/ --force --debug 2
[Thu Oct 9 02:48:39 PM CEST 2025] Let's find the script directory.
[Thu Oct 9 02:48:39 PM CEST 2025] SCRIPT='/root/.acme.sh/acme.sh'
[Thu Oct 9 02:48:39 PM CEST 2025] _script='/root/.acme.sh/acme.sh'
[Thu Oct 9 02:48:39 PM CEST 2025] _script_home='/root/.acme.sh'
[Thu Oct 9 02:48:39 PM CEST 2025] Using config home: /root/.acme.sh
[Thu Oct 9 02:48:39 PM CEST 2025] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.1.2
[Thu Oct 9 02:48:39 PM CEST 2025] Running cmd: issue
[Thu Oct 9 02:48:39 PM CEST 2025] _main_domain='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _alt_domains='no'
[Thu Oct 9 02:48:39 PM CEST 2025] Using config home: /root/.acme.sh
[Thu Oct 9 02:48:39 PM CEST 2025] default_acme_server='https://acme.domain.com/acme/'
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_DIRECTORY='https://acme.domain.com/acme/'
[Thu Oct 9 02:48:39 PM CEST 2025] _ACME_SERVER_HOST='acme.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _ACME_SERVER_PATH='acme/'
[Thu Oct 9 02:48:39 PM CEST 2025] DOMAIN_PATH='/root/.acme.sh/example.domain.com_ecc'
[Thu Oct 9 02:48:39 PM CEST 2025] '/root/.acme.sh/' does not contain 'dns'
[Thu Oct 9 02:48:39 PM CEST 2025] Le_NextRenewTime
[Thu Oct 9 02:48:39 PM CEST 2025] Using ACME_DIRECTORY: https://acme.domain.com/acme/
[Thu Oct 9 02:48:39 PM CEST 2025] _init API for server: https://acme.domain.com/acme/
[Thu Oct 9 02:48:39 PM CEST 2025] GET
[Thu Oct 9 02:48:39 PM CEST 2025] url='https://acme.domain.com/acme/'
[Thu Oct 9 02:48:39 PM CEST 2025] timeout=10
[Thu Oct 9 02:48:39 PM CEST 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L --trace-ascii /tmp/tmp.9fKNGo3Aio -g --connect-timeout 10'
[Thu Oct 9 02:48:39 PM CEST 2025] ret='0'
[Thu Oct 9 02:48:39 PM CEST 2025] response='{"newNonce":"https://bi-acme.domain.com/ACME/nonce","newAccount":"https://acme.domain.com/ACME/accounts","newOrder":"https://bi-acme.domain.com/ACME/orders","meta":{"externalAccountRequired":true}}'
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_KEY_CHANGE
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_NEW_AUTHZ
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_NEW_ORDER='https://acme.domain.com/ACME/orders'
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_NEW_ACCOUNT='https://acme.domain.com/ACME/accounts'
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_REVOKE_CERT
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_AGREEMENT
[Thu Oct 9 02:48:39 PM CEST 2025] ACME_NEW_NONCE='https://acme.domain.com/ACME/nonce'
[Thu Oct 9 02:48:39 PM CEST 2025] Using CA: https://acme.domain.com/acme/
[Thu Oct 9 02:48:39 PM CEST 2025] _on_before_issue
[Thu Oct 9 02:48:39 PM CEST 2025] _chk_main_domain='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _chk_alt_domains
[Thu Oct 9 02:48:39 PM CEST 2025] '/root/.acme.sh/' does not contain 'no'
[Thu Oct 9 02:48:39 PM CEST 2025] Le_LocalAddress
[Thu Oct 9 02:48:39 PM CEST 2025] d='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] Checking for domain='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _currentRoot='/root/.acme.sh/'
[Thu Oct 9 02:48:39 PM CEST 2025] d
[Thu Oct 9 02:48:39 PM CEST 2025] '/root/.acme.sh/' does not contain 'apache'
[Thu Oct 9 02:48:39 PM CEST 2025] _saved_account_key_hash='GJ3h3YmBN0GAHkmNfExp9sAK6jNR+ly12TbrBp1/IcA='
[Thu Oct 9 02:48:39 PM CEST 2025] _saved_account_key_hash was not changed, skipping account registration.
[Thu Oct 9 02:48:39 PM CEST 2025] Read key length: ec-256
[Thu Oct 9 02:48:39 PM CEST 2025] _createcsr
[Thu Oct 9 02:48:39 PM CEST 2025] domain='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] domainlist
[Thu Oct 9 02:48:39 PM CEST 2025] csrkey='/root/.acme.sh/example.domain.com_ecc/example.domain.com.key'
[Thu Oct 9 02:48:39 PM CEST 2025] csr='/root/.acme.sh/example.domain.com_ecc/example.domain.com.csr'
[Thu Oct 9 02:48:39 PM CEST 2025] csrconf='/root/.acme.sh/example.domain.com_ecc/example.domain.com.csr.conf'
[Thu Oct 9 02:48:39 PM CEST 2025] Single domain='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] seg='example'
[Thu Oct 9 02:48:39 PM CEST 2025] _is_idn_d='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _idn_temp
[Thu Oct 9 02:48:39 PM CEST 2025] _is_idn_d='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _idn_temp
[Thu Oct 9 02:48:39 PM CEST 2025] _csr_cn='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] seg='example'
[Thu Oct 9 02:48:39 PM CEST 2025] Getting domain auth token for each domain
[Thu Oct 9 02:48:39 PM CEST 2025] seg='example'
[Thu Oct 9 02:48:39 PM CEST 2025] _is_idn_d='example.domain.com'
[Thu Oct 9 02:48:39 PM CEST 2025] _idn_temp
[Thu Oct 9 02:48:39 PM CEST 2025] d
[Thu Oct 9 02:48:39 PM CEST 2025] _identifiers='{"type":"dns","value":"example.domain.com"}'
[Thu Oct 9 02:48:39 PM CEST 2025] _notBefore
[Thu Oct 9 02:48:39 PM CEST 2025] _notAfter
[Thu Oct 9 02:48:39 PM CEST 2025] STEP 1, Ordering a Certificate
[Thu Oct 9 02:48:39 PM CEST 2025] =======Sending Signed Request=======
[Thu Oct 9 02:48:39 PM CEST 2025] url='https://acme.domain.com/ACME/orders'
[Thu Oct 9 02:48:39 PM CEST 2025] payload='{"identifiers": [{"type":"dns","value":"example.domain.com"}]}'
[Thu Oct 9 02:48:39 PM CEST 2025] RSA key
[Thu Oct 9 02:48:39 PM CEST 2025] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.domain.com/ACME/nonce'
[Thu Oct 9 02:48:39 PM CEST 2025] HEAD
[Thu Oct 9 02:48:39 PM CEST 2025] _post_url='https://acme.domain.com/ACME/nonce'
[Thu Oct 9 02:48:39 PM CEST 2025] body
[Thu Oct 9 02:48:39 PM CEST 2025] _postContentType='application/jose+json'
[Thu Oct 9 02:48:39 PM CEST 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L --trace-ascii /tmp/tmp.B6QJ5q0I8H -g -I '
[Thu Oct 9 02:48:39 PM CEST 2025] _ret='0'
[Thu Oct 9 02:48:39 PM CEST 2025] _headers='HTTP/2 200
cache-control: no-cache
pragma: no-cache
content-length: 0
expires: -1
server: Microsoft-IIS/10.0
replay-nonce: 831oPqidBEyJA2c--ZGa4w
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 09 Oct 2025 12:48:39 GMT
'
[Thu Oct 9 02:48:39 PM CEST 2025] nonce='831oPqidBEyJA2c--ZGa4w'
[Thu Oct 9 02:48:39 PM CEST 2025] POST
[Thu Oct 9 02:48:39 PM CEST 2025] _post_url='https://acme.domain.com/ACME/orders'
[Thu Oct 9 02:48:39 PM CEST 2025] body='{"protected": "eyJub25jZSI6ICI4MzFvUHFpZEJFeUpBMmMtLVpHYTR3IiwgInVybCI6ICJodHRwczovL2JpLWFjbWUuYm9laHJpbmdlci5jb20vQUNNRS9vcmRlcnMiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2JpLWFjbWUuYm9laHJpbmdlci5jb20vQUNNRS9hY2NvdW50cy80ZWQxNGNiYy0zMjJmLTRiMjItYjk0Zi03ODY5ZDRjMTIyMzgifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImV4YW1wbGUuYm9laHJpbmdlci5jb20ifV19", "signature": "RJADnUXE_tIflojlEwYXy4_8MqYn4U6K8rQp1zT3ZBuEjHQElOyTPTGcq49A3HfBRx3XbMeVi-o7v35RACo_hyDc5UIY1ZFbVSNh1cYTAO6dgdjsH--ub6TLZUvZlir3YwbzqAfXw8V4xcgWnnjkDKMaCE2-z-HdR7yJ_U2qw9ilhCk9ZvoyB-6F1_33agzKHYOAjAHYoyhfRgyfgmpbAf9clQZNKW2eeOsRFGnok33exvXJotNtlQKYzJzlwuijNJZByXaaXcW6f3H8i_Tbyz52igk01-QELTWCAnhICskHg7ivRpOAJdDtVi2mR-uLjKfbPv8pwnki_80KdJGLlw"}'
[Thu Oct 9 02:48:39 PM CEST 2025] _postContentType='application/jose+json'
[Thu Oct 9 02:48:39 PM CEST 2025] Http already initialized.
[Thu Oct 9 02:48:39 PM CEST 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L --trace-ascii /tmp/tmp.B6QJ5q0I8H -g '
[Thu Oct 9 02:48:40 PM CEST 2025] _ret='0'
[Thu Oct 9 02:48:40 PM CEST 2025] responseHeaders='HTTP/2 201
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
location: https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c
server: Microsoft-IIS/10.0
replay-nonce: _8fhoL_VDkOsUK9nI8Ljow
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 09 Oct 2025 12:48:39 GMT
content-length: 293
'
[Thu Oct 9 02:48:40 PM CEST 2025] code='201'
[Thu Oct 9 02:48:40 PM CEST 2025] original='{"status":"ready","identifiers":[{"type":"dns","value":"example.domain.com"}],"finalize":"https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize","authorizations":["https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7"]}'
[Thu Oct 9 02:48:40 PM CEST 2025] response='{"status":"ready","identifiers":[{"type":"dns","value":"example.domain.com"}],"finalize":"https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize","authorizations":["https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7"]}'
[Thu Oct 9 02:48:40 PM CEST 2025] Le_LinkOrder='https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c'
[Thu Oct 9 02:48:40 PM CEST 2025] Le_OrderFinalize='https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize'
[Thu Oct 9 02:48:40 PM CEST 2025] _authorizations_seg='https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] STEP 2, Get the authorizations of each domain
[Thu Oct 9 02:48:40 PM CEST 2025] _authz_url='https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] =======Sending Signed Request=======
[Thu Oct 9 02:48:40 PM CEST 2025] url='https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] payload
[Thu Oct 9 02:48:40 PM CEST 2025] Use cached jwk for file: /root/.acme.sh/ca/acme.domain.com/acme//account.key
[Thu Oct 9 02:48:40 PM CEST 2025] Use _CACHED_NONCE='_8fhoL_VDkOsUK9nI8Ljow'
[Thu Oct 9 02:48:40 PM CEST 2025] nonce='_8fhoL_VDkOsUK9nI8Ljow'
[Thu Oct 9 02:48:40 PM CEST 2025] POST
[Thu Oct 9 02:48:40 PM CEST 2025] _post_url='https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] body='{"protected": "eyJub25jZSI6ICJfOGZob0xfVkRrT3NVSzluSThMam93IiwgInVybCI6ICJodHRwczovL2JpLWFjbWUuYm9laHJpbmdlci5jb20vQUNNRS9hdXRob3JpemF0aW9ucy9hZWFjMmUwMi0zMGMyLTQ3NjctOGI3Zi0yMWZmMzAzYTU0ZTciLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2JpLWFjbWUuYm9laHJpbmdlci5jb20vQUNNRS9hY2NvdW50cy80ZWQxNGNiYy0zMjJmLTRiMjItYjk0Zi03ODY5ZDRjMTIyMzgifQ", "payload": "", "signature": "YtZaHSUe1a5H_hpkS2kR5egBHm_E5pjfNLx8VwE8QZPCNpGike5OOcQgO_3DtSnwXAiDHin8P655koLm6_OAPf9qOqLO8BV15n8D-b_ALUAsBlsZLwpxbAYHUN4TK-2lHVtShxTg7eio5QxCEO5EZzbw2oibLlJerJeKbEBQZStvpNXO7wxGur8ufAgGvVXiymcIL87dPUb9MSv7sI1mWLwcYH3Vzyjr3-tvhRErCmLAG_D4ciXPWWikD7IyQjLaJVKjQtRz28ANrQLhS9oK2CmO1X8ret8y8DbgesN54NqV-K4nMv7LQ-rPODc3XvZjrHvBbgQex7-Cqnai5w3Sbg"}'
[Thu Oct 9 02:48:40 PM CEST 2025] _postContentType='application/jose+json'
[Thu Oct 9 02:48:40 PM CEST 2025] Http already initialized.
[Thu Oct 9 02:48:40 PM CEST 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L --trace-ascii /tmp/tmp.B6QJ5q0I8H -g '
[Thu Oct 9 02:48:40 PM CEST 2025] _ret='0'
[Thu Oct 9 02:48:40 PM CEST 2025] responseHeaders='HTTP/2 200
cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
replay-nonce: cP-WjgTuc0Kw8d67YfjYmg
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 09 Oct 2025 12:48:39 GMT
content-length: 132
'
[Thu Oct 9 02:48:40 PM CEST 2025] code='200'
[Thu Oct 9 02:48:40 PM CEST 2025] original='{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}'
[Thu Oct 9 02:48:40 PM CEST 2025] response='{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}'
[Thu Oct 9 02:48:40 PM CEST 2025] response='{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}'
[Thu Oct 9 02:48:40 PM CEST 2025] _d='example.domain.com'
[Thu Oct 9 02:48:40 PM CEST 2025] _authorizations_map='example.domain.com,{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}#https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7
'
[Thu Oct 9 02:48:40 PM CEST 2025] d='example.domain.com'
[Thu Oct 9 02:48:40 PM CEST 2025] Getting webroot for domain='example.domain.com'
[Thu Oct 9 02:48:40 PM CEST 2025] _w='/root/.acme.sh/'
[Thu Oct 9 02:48:40 PM CEST 2025] _currentRoot='/root/.acme.sh/'
[Thu Oct 9 02:48:40 PM CEST 2025] _is_idn_d='example.domain.com'
[Thu Oct 9 02:48:40 PM CEST 2025] _idn_temp
[Thu Oct 9 02:48:40 PM CEST 2025] _candidates='example.domain.com,{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}#https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] response='{"status":"valid","expires":"9999-12-31T10:59:59.999Z","identifier":{"type":"dns","value":"example.domain.com"},"challenges":[]}#https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] _authz_url='https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] example.domain.com is already valid.
[Thu Oct 9 02:48:40 PM CEST 2025] keyauthorization='verified_ok'
[Thu Oct 9 02:48:40 PM CEST 2025] entry
[Thu Oct 9 02:48:40 PM CEST 2025] dvlist='example.domain.com#verified_ok##http-01#/root/.acme.sh/#https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7'
[Thu Oct 9 02:48:40 PM CEST 2025] d
[Thu Oct 9 02:48:40 PM CEST 2025] vlist='example.domain.com#verified_ok##http-01#/root/.acme.sh/#https://acme.domain.com/ACME/authorizations/aeac2e02-30c2-4767-8b7f-21ff303a54e7,'
[Thu Oct 9 02:48:40 PM CEST 2025] d='example.domain.com'
[Thu Oct 9 02:48:40 PM CEST 2025] example.domain.com has already been verified, skipping http-01.
[Thu Oct 9 02:48:40 PM CEST 2025] OK, let's start verification
[Thu Oct 9 02:48:40 PM CEST 2025] example.domain.com is already verified, skipping http-01.
[Thu Oct 9 02:48:40 PM CEST 2025] pid
[Thu Oct 9 02:48:40 PM CEST 2025] No need to restore nginx config, skipping.
[Thu Oct 9 02:48:40 PM CEST 2025] clearupdns
[Thu Oct 9 02:48:40 PM CEST 2025] dns_entries
[Thu Oct 9 02:48:40 PM CEST 2025] Skipping dns.
[Thu Oct 9 02:48:40 PM CEST 2025] Verification finished, beginning signing.
[Thu Oct 9 02:48:40 PM CEST 2025] i='2'
[Thu Oct 9 02:48:40 PM CEST 2025] j='8'
[Thu Oct 9 02:48:40 PM CEST 2025] Let's finalize the order.
[Thu Oct 9 02:48:40 PM CEST 2025] Le_OrderFinalize='https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize'
[Thu Oct 9 02:48:40 PM CEST 2025] =======Sending Signed Request=======
[Thu Oct 9 02:48:40 PM CEST 2025] url='https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize'
[Thu Oct 9 02:48:40 PM CEST 2025] payload='{"csr": "MIIBLjCB1gIBADAhMR8wHQYDVQQDDBZleGFtcGxlLmJvZWhyaW5nZXIuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKEE30Iy5pJM3IZx8aVkMS7mV2ooHXc3Wk_A6QGsaBpi1Ln4_aCHvNqXmZYJ4Bh4v7B93i9bFod_BhgO3pdCEp6BTMFEGCSqGSIb3DQEJDjFEMEIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCEGA1UdEQQaMBiCFmV4YW1wbGUuYm9laHJpbmdlci5jb20wCgYIKoZIzj0EAwIDRwAwRAIgZWqyf_3RRCRtPQr1qs7td-3h-e7WlRMYG8yy6KHGk0CIEjZm4dKJmVfD3dLUB-DUw1pZHmpkn4sE88QHmrLQLLJ"}'
[Thu Oct 9 02:48:40 PM CEST 2025] Use cached jwk for file: /root/.acme.sh/ca/acme.domain.com/acme//account.key
[Thu Oct 9 02:48:40 PM CEST 2025] Use _CACHED_NONCE='cP-WjgTuc0Kw8d67YfjYmg'
[Thu Oct 9 02:48:40 PM CEST 2025] nonce='cP-WjgTuc0Kw8d67YfjYmg'
[Thu Oct 9 02:48:40 PM CEST 2025] POST
[Thu Oct 9 02:48:40 PM CEST 2025] _post_url='https://acme.domain.com/ACME/orders/14bcb480-7150-4564-b50b-57c424476c3c/Finalize'
[Thu Oct 9 02:48:40 PM CEST 2025] body='{"protected": "eyJub25jZSI6ICJjUC1XamdUdWMwS3c4ZDY3WWZqWW1nIiwgInVybCI6ICJodHRwczovL2JpLWFjbWUuYm9laHJpbmdlci5jb20vQUNNRS9vcmRlcnMvMTRiY2I0ODAtNzE1MC00NTY0LWI1MGItNTdjNDI0NDc2YzNjL0ZpbmFsaXplIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9iaS1hY21lLmJvZWhyaW5nZXIuY29tL0FDTUUvYWNjb3VudHMvNGVkMTRjYmMtMzIyZi00YjIyLWI5NGYtNzg2OWQ0YzEyMjM4In0", "payload": "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", "signature": "GSaAXLWKt4aw5kq9-_U8_xbj0fmrzob9qd3i-Bnyt8QDFka_MWpW7_rguad0M9Cs0ezZI_TDsTcHNPB3iajUgM6W0lQoKZk74z710aHA2AIa38bBpletmu66gq2ofPRNZSshFIy2_vGCxSuDinrWEc-nThspDY6MGv9oqQVI3lRcW81tn4-zBTlOz-dAQ07VM5-M-SrrsPDtZJmSjCuqfGwT6peo1CZmAYUd5vfbp7sWuGW4ckNN39KbKN-oyzMzoavnnx9INwbB-vMr7D8ShegvvMJuGbFNuPAbbT3F5qlV4JxRjYYkOjiLOZv0rLaVfOfGXOV8EXcEQVO1pPKa1A"}'
[Thu Oct 9 02:48:40 PM CEST 2025] _postContentType='application/jose+json'
[Thu Oct 9 02:48:40 PM CEST 2025] Http already initialized.
[Thu Oct 9 02:48:40 PM CEST 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L --trace-ascii /tmp/tmp.B6QJ5q0I8H -g '
[Thu Oct 9 02:48:40 PM CEST 2025] _ret='0'
[Thu Oct 9 02:48:40 PM CEST 2025] responseHeaders='HTTP/2 500
cache-control: no-cache
pragma: no-cache
content-type: application/problem+json
expires: -1
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Thu, 09 Oct 2025 12:48:40 GMT
content-length: 65
'
[Thu Oct 9 02:48:40 PM CEST 2025] code='500'
[Thu Oct 9 02:48:40 PM CEST 2025] original='{"type":"urn:ietf:params:acme:error:serverInternal","status":500}'
[Thu Oct 9 02:48:40 PM CEST 2025] response='{"type":"urn:ietf:params:acme:error:serverInternal","status":500}'
[Thu Oct 9 02:48:40 PM CEST 2025] Signing failed. Finalize code was not 200.
[Thu Oct 9 02:48:40 PM CEST 2025] {"type":"urn:ietf:params:acme:error:serverInternal","status":500}
[Thu Oct 9 02:48:40 PM CEST 2025] _on_issue_err
[Thu Oct 9 02:48:40 PM CEST 2025] Please add '--debug' or '--log' to see more information.
[Thu Oct 9 02:48:40 PM CEST 2025] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Thu Oct 9 02:48:40 PM CEST 2025] _chk_vlist
[Thu Oct 9 02:48:40 PM CEST 2025] Diagnosis versions:
openssl:openssl
OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
Apache:
Apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.1 on Apr 18 2024 00:00:00
running on Linux version #1 SMP PREEMPT_DYNAMIC Fri Aug 1 16:21:10 UTC 2025, release 5.14.0-427.42.1.el9_4.94ciq_lts.6.2.x86_64, machine x86_64
features:
#define WITH_STDIO 1
#define WITH_FDNUM 1
#define WITH_FILE 1
#define WITH_CREAT 1
#define WITH_GOPEN 1
#define WITH_TERMIOS 1
#define WITH_PIPE 1
#define WITH_UNIX 1
#define WITH_ABSTRACT_UNIXSOCKET 1
#define WITH_IP4 1
#define WITH_IP6 1
#define WITH_RAWIP 1
#define WITH_GENERICSOCKET 1
#define WITH_INTERFACE 1
#define WITH_TCP 1
#define WITH_UDP 1
#define WITH_SCTP 1
#define WITH_LISTEN 1
#define WITH_SOCKS4 1
#define WITH_SOCKS4A 1
#define WITH_VSOCK 1
#define WITH_PROXY 1
#define WITH_SYSTEM 1
#define WITH_EXEC 1
#define WITH_READLINE 1
#define WITH_TUN 1
#define WITH_PTY 1
#define WITH_OPENSSL 1
#undef WITH_FIPS
#undef WITH_LIBWRAP
#define WITH_SYCLS 1
#define WITH_FILAN 1
#define WITH_RETRY 1
#define WITH_MSGLEVEL 0 /debug/