bash getssl -u -d -w /usr/local/getssl adsynergy.net
 
detected os type = linux
 
Running \S
Kernel \r on \m (\l)
 
checking for required which ... /usr/sbin/which
 
checking for required openssl ... /usr/sbin/openssl
 
checking for required curl ... /usr/sbin/curl
 
checking for dig ... /usr/sbin/dig
 
function dig found at /usr/sbin/dig  - setting DNS_CHECK_FUNC to dig
 
checking for required dirname ... /usr/sbin/dirname
 
checking for required awk ... /usr/sbin/awk
 
checking for required tr ... /usr/sbin/tr
 
checking for required date ... /usr/sbin/date
 
checking for required grep ... /usr/sbin/grep
 
checking for required sed ... /usr/sbin/sed
 
checking for required sort ... /usr/sbin/sort
 
checking for required mktemp ... /usr/sbin/mktemp
 
Checking for releases at https://api.github.com/repos/srvrco/getssl/releases/latest
 
{"url":"https://api.github.com/repos/srvrco/getssl/releases/148757703","assets_url":"https://api.github.com/repos/srvrco/getssl/releases/148757703/assets","upload_url":"https://uploads.github.com/repos/srvrco/getssl/releases/148757703/assets{?name,label}","html_url":"https://github.com/srvrco/getssl/releases/tag/v2.49","id":148757703,"author":{"login":"github-actions[bot]","id":41898282,"node_id":"MDM6Qm90NDE4OTgyODI=","avatar_url":"https://avatars.githubusercontent.com/in/15368?v=4","gravatar_id":"","url":"https://api.github.com/users/github-actions%5Bbot%5D","html_url":"https://github.com/apps/github-actions","followers_url":"https://api.github.com/users/github-actions%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-actions%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-actions%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-actions%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAvJYls4I3dzH","tag_name":"v2.49","target_commitish":"master","name":"Release 2.49","draft":false,"immutable":false,"prerelease":false,"created_at":"2024-04-18T09:40:18Z","updated_at":"2024-04-18T10:00:01Z","published_at":"2024-04-17T20:45:04Z","assets":[{"url":"https://api.github.com/repos/srvrco/getssl/releases/assets/158964206","id":158964206,"node_id":"RA_kwDOAvJYls4JeZnu","name":"getssl-2.49-1.noarch.rpm","label":"","uploader":{"login":"github-actions[bot]","id":41898282,"node_id":"MDM6Qm90NDE4OTgyODI=","avatar_url":"https://avatars.githubusercontent.com/in/15368?v=4","gravatar_id":"","url":"https://api.github.com/users/github-actions%5Bbot%5D","html_url":"https://github.com/apps/github-actions","followers_url":"https://api.github.com/users/github-actions%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-actions%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-actions%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-actions%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"content_type":"raw","state":"uploaded","size":81204,"digest":null,"download_count":1016,"created_at":"2024-03-27T21:11:34Z","updated_at":"2024-03-27T21:11:34Z","browser_download_url":"https://github.com/srvrco/getssl/releases/download/v2.49/getssl-2.49-1.noarch.rpm"},{"url":"https://api.github.com/repos/srvrco/getssl/releases/assets/158964207","id":158964207,"node_id":"RA_kwDOAvJYls4JeZnv","name":"getssl-2.49-1.src.rpm","label":"","uploader":{"login":"github-actions[bot]","id":41898282,"node_id":"MDM6Qm90NDE4OTgyODI=","avatar_url":"https://avatars.githubusercontent.com/in/15368?v=4","gravatar_id":"","url":"https://api.github.com/users/github-actions%5Bbot%5D","html_url":"https://github.com/apps/github-actions","followers_url":"https://api.github.com/users/github-actions%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-actions%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-actions%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-actions%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"content_type":"raw","state":"uploaded","size":159604,"digest":null,"download_count":97,"created_at":"2024-03-27T21:11:34Z","updated_at":"2024-03-27T21:11:35Z","browser_download_url":"https://github.com/srvrco/getssl/releases/download/v2.49/getssl-2.49-1.src.rpm"},{"url":"https://api.github.com/repos/srvrco/getssl/releases/assets/158964205","id":158964205,"node_id":"RA_kwDOAvJYls4JeZnt","name":"getssl_2.49-1_all.deb","label":"","uploader":{"login":"github-actions[bot]","id":41898282,"node_id":"MDM6Qm90NDE4OTgyODI=","avatar_url":"https://avatars.githubusercontent.com/in/15368?v=4","gravatar_id":"","url":"https://api.github.com/users/github-actions%5Bbot%5D","html_url":"https://github.com/apps/github-actions","followers_url":"https://api.github.com/users/github-actions%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-actions%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-actions%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-actions%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"content_type":"raw","state":"uploaded","size":64390,"digest":null,"download_count":2961,"created_at":"2024-03-27T21:11:34Z","updated_at":"2024-03-27T21:11:34Z","browser_download_url":"https://github.com/srvrco/getssl/releases/download/v2.49/getssl_2.49-1_all.deb"}],"tarball_url":"https://api.github.com/repos/srvrco/getssl/tarball/v2.49","zipball_url":"https://api.github.com/repos/srvrco/getssl/zipball/v2.49","body":"## What's Changed\r\n* Release v2.48 by @timkimber in https://github.com/srvrco/getssl/pull/796\r\n* dns_add and dns_del for dnsmasq - a lightweight DHCP and caching DNS server by @bohnelang in https://github.com/srvrco/getssl/pull/804\r\n* Custom configuration instructions by @paulocoghi in https://github.com/srvrco/getssl/pull/810\r\n* acme-dns: improve cURL __error handling by @loganmzz in https://github.com/srvrco/getssl/pull/811\r\n* Fix to refresh CNAME by @timkimber in https://github.com/srvrco/getssl/pull/830\r\n* Add NS1 DNS Scripts by @Ayesh in https://github.com/srvrco/getssl/pull/817\r\n* Update Cloudflare documentation by @killerbees19 in https://github.com/srvrco/getssl/pull/813\r\n* Update Linode API to V4 by @softins in https://github.com/srvrco/getssl/pull/832\r\n* Allow SERVER_TYPE=postgres by @jsonn in https://github.com/srvrco/getssl/pull/835\r\n* Use --value= for add-record command (Issue #836) by @lukexcom in https://github.com/srvrco/getssl/pull/837\r\n* Add Hetzner DNS scripts by @Leo963 in https://github.com/srvrco/getssl/pull/838\r\n\r\n## New Contributors\r\n* @bohnelang made their first contribution in https://github.com/srvrco/getssl/pull/804\r\n* @paulocoghi made their first contribution in https://github.com/srvrco/getssl/pull/810\r\n* @loganmzz made their first contribution in https://github.com/srvrco/getssl/pull/811\r\n* @jsonn made their first contribution in https://github.com/srvrco/getssl/pull/835\r\n* @lukexcom made their first contribution in https://github.com/srvrco/getssl/pull/837\r\n* @Leo963 made their first contribution in https://github.com/srvrco/getssl/pull/838\r\n\r\n**Full Changelog**: https://github.com/srvrco/getssl/compare/v2.48...2.49","mentions_count":10}
 
current code is version 2.49
 
Most recent version is  2.49
 
reading config from /usr/local/getssl/getssl.cfg
 
checking for required dig ... /usr/sbin/dig
 
Making temp directory - /usr/local/getssl/adsynergy.net/tmp
 
reading config from /usr/local/getssl/adsynergy.net/getssl.cfg
 
HAS NSLOOKUP=true
 
HAS DIG_OR_DRILL=dig -r
 
DIG_SUPPORTS_NOIDNOUT=true
 
HAS HOST=true
 
Using certificate issuer: https://acme-v02.api.letsencrypt.org
 
checking config
 
checked ACCOUNT_KEY_TYPE 
 
checked PRIVATE_KEY_ALG 
 
checking domain adsynergy.net
 
DNS lookup using dig -r  adsynergy.net
 
DNS lookup using host  adsynergy.net
 
DNS lookup using nslookup  -query AAAA adsynergy.net
 
found IPv4 record for adsynergy.net
 
adsynergy.net: check_config completed  - all OK
 
ca_all_loc from https://acme-v02.api.letsencrypt.org gives <!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Boulder: The Let's Encrypt CA</title>

  <style type="text/css">
    header { display: flex; max-height: 30vh; flex-wrap: wrap; margin-bottom: 10vh; }
    header img { display: flex; max-height: 20vh; align-content: flex-end; margin-right: 20px; }
  </style>
</head>

<body>
  <header>
    <section>
      <img src="/static/images/LE-Logo-LockOnly.svg"/>
    </section>
    <section>
      <h1>Boulder<br>
      <small>The Let's Encrypt CA</small></h1>
    </section>
  </header>

  <section>
    <p>This is an <a href="https://tools.ietf.org/html/rfc8555">ACME</a> Certificate Authority running <a href="https://github.com/letsencrypt/boulder">Boulder</a>.</p>
    <p>This is a <em>programmatic</em> endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See <a href="https://letsencrypt.org/docs"><tt>https://letsencrypt.org/docs</tt></a> for help.</p>
    <p>If you're trying to use this service, note that the starting point, <em>the directory</em>, is available at this URL: <a href="https://acme-v02.api.letsencrypt.org/directory"><tt>https://acme-v02.api.letsencrypt.org/directory</tt></a>.</p>
  </section>

  <footer>
      <p>
        <a href="https://letsencrypt.status.io" title="Status">Service Status (letsencrypt.status.io)</a> |
      </p>
  </footer>

</body>
</html>
 
ca_all_loc from https://acme-v02.api.letsencrypt.org/directory gives {
  "JWKOCMVkQTc": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "profiles": {
      "classic": "https://letsencrypt.org/docs/profiles#classic",
      "shortlived": "https://letsencrypt.org/docs/profiles#shortlived",
      "tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient",
      "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver"
    },
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
 
Using API v2
 
created SAN list = subjectAltName=DNS:adsynergy.net
 
Account key exists at /usr/local/getssl/account.key skipping generation
 
domain key exists at /usr/local/getssl/adsynergy.net/adsynergy.net.key - skipping generation
 
domain csr exists at - /usr/local/getssl/adsynergy.net/adsynergy.net.csr
 
Existing csr at /usr/local/getssl/adsynergy.net/adsynergy.net.csr contains same domains as the config
 
jwk alg = RS256
Registering account
 
url https://acme-v02.api.letsencrypt.org/acme/new-acct
 
KID is blank, so using jwk
 
payload = {"termsOfServiceAgreed": true, "contact": ["mailto: ianbrown@iclick.media"]}
 
responseHeaders HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 May 2026 17:00:31 GMT
Content-Type: application/json
Content-Length: 808
Connection: keep-alive
Boulder-Requester: 103790287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/acct/103790287
Replay-Nonce: YXn3IxfDC3gQLWXr3vnbZcdsEdYFGdQt4nfSt8BoEyQR4Se3mQA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

 
response {  "key": {    "kty": "RSA",    "n": "x6VIY41OTSD7TM-Hp4QPnZZBgdF09O60hR3LynLIFIKFTXhNW2KYtBR1T_4q16H2zgox9CqzDUqfMUaPkkty2Rk6fjp5Tup0L9-zrShi4Izv85rTRI6SUHfFIEuFC6IHFeRwTWtZv2myXLrdRKbHna1Rcd_RXjJv2NP0ZByyPWGHG5i3YP1ilIgVq6I5AwazZ6TVwGdb8JKsrDl1FwExOG5wvwzXFGjXStahoD4kOHRrqDC-x26K8Yqae27G-dV12HpVabctYc3L1zNV_lIGLxTGzTHb5XHCKtA1AIRRYIyfCZJCdrP_0hReY5xblbYVd01tHH_mp2EL8BQYzzga7P6eDXl99Juhf31CXbAXtmC5ZGEW9tdiixPYCx220opxLgd-ilW28UMZ1k8OAYaMGJEqSBaJvtjAqcaV6v45tkTe5Kex6WzvCKQMXxV1ZgDHt2fnsz71Cv-Dq5Dqn639yJySU1aUlarp4h012rCzFdS-tRT2Di_jHNmLh2pOQzNPFYfrwrwq6XxDnLRFZHc0rBzaWENgGsJCD0Bws4cQ_yi-ywoUO1v9Kxe8emfvAcImMI4nf_9ay5zTZDVQpfro9N6YLaIUqXTm8pqrXZTAGotAw5vKQUsGaHxkqyKKX1QhsxIKEYNa83WhvIMAPlu-cjEXtsIaOtpfSeC7O7FkasE",    "e": "AQAB"  },  "createdAt": "2020-11-26T18:38:41Z",  "status": "valid"}
 
code 200
 
response status = valid
 
responseHeaders HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 May 2026 17:00:31 GMT
Content-Type: application/json
Content-Length: 808
Connection: keep-alive
Boulder-Requester: 103790287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/acct/103790287
Replay-Nonce: YXn3IxfDC3gQLWXr3vnbZcdsEdYFGdQt4nfSt8BoEyQR4Se3mQA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

 
Already registered account, AccountId=https://acme-v02.api.letsencrypt.org/acme/acct/103790287
Verify each domain
 
url https://acme-v02.api.letsencrypt.org/acme/new-order
 
using KID=https://acme-v02.api.letsencrypt.org/acme/acct/103790287
 
payload = {"identifiers": [{"type":"dns","value":"adsynergy.net"}]}
 
responseHeaders HTTP/1.1 201 Created
Server: nginx
Date: Tue, 26 May 2026 17:00:32 GMT
Content-Type: application/json
Content-Length: 345
Connection: keep-alive
Boulder-Requester: 103790287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-v02.api.letsencrypt.org/acme/order/103790287/514969545266
Replay-Nonce: EZ1Rp1KYDFdK3ctIDVrBdqyfMhXZ0bKdiueG2pGorg0hzxfL_2M
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

 
response {  "status": "pending",  "expires": "2026-06-02T13:11:11Z",  "identifiers": [    {      "type": "dns",      "value": "adsynergy.net"    }  ],  "authorizations": [    "https://acme-v02.api.letsencrypt.org/acme/authz/103790287/710997937416"  ],  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/103790287/514969545266"}
 
code 201
 
response status = pending
 
Order link https://acme-v02.api.letsencrypt.org/acme/order/103790287/514969545266
 
Finalize link https://acme-v02.api.letsencrypt.org/acme/finalize/103790287/514969545266
 
Requesting authorizations link for https://acme-v02.api.letsencrypt.org/acme/authz/103790287/710997937416
 
url https://acme-v02.api.letsencrypt.org/acme/authz/103790287/710997937416
 
using KID=https://acme-v02.api.letsencrypt.org/acme/acct/103790287
 
payload = 
 
responseHeaders HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 May 2026 17:00:32 GMT
Content-Type: application/json
Content-Length: 818
Connection: keep-alive
Boulder-Requester: 103790287
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: EZ1Rp1KYIFFUJMXDfC1rANN-e-yFyygjcn2L428PuhXwOkdZbhA
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

 
response {  "identifier": {    "type": "dns",    "value": "adsynergy.net"  },  "status": "pending",  "expires": "2026-06-02T13:11:11Z",  "challenges": [    {      "type": "dns-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/UQuz2w",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "tls-alpn-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/1cWnyQ",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "http-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/_dXymA",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    }  ]}
 
code 200
 
response status = pending
 
wildcard=
 
Saving authorization response for adsynergy.net for domain alldomains[0]
 
Response = {  "identifier": {    "type": "dns",    "value": "adsynergy.net"  },  "status": "pending",  "expires": "2026-06-02T13:11:11Z",  "challenges": [    {      "type": "dns-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/UQuz2w",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "tls-alpn-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/1cWnyQ",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "http-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/_dXymA",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    }  ]}
Verifying adsynergy.net
 
authlink response = {  "identifier": {    "type": "dns",    "value": "adsynergy.net"  },  "status": "pending",  "expires": "2026-06-02T13:11:11Z",  "challenges": [    {      "type": "dns-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/UQuz2w",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "tls-alpn-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/1cWnyQ",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    },    {      "type": "http-01",      "url": "https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/_dXymA",      "status": "pending",      "token": "GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg"    }  ]}
 
uri https://acme-v02.api.letsencrypt.org/acme/chall/103790287/710997937416/_dXymA
 
copying file from /usr/local/getssl/adsynergy.net/tmp/GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg to /usr/www/adsynergy.net/.well-known/acme-challenge
copying challenge token to /usr/www/adsynergy.net/.well-known/acme-challenge/GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg
 
copied /usr/local/getssl/adsynergy.net/tmp/GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg to /usr/www/adsynergy.net/.well-known/acme-challenge/GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg
 
wellknown_url http://adsynergy.net/.well-known/acme-challenge/GP5ZGeJFdrLVymzmcmcljNxF5FOqepP0uotMWWtOoQg