Symptoms
-
A Let's Encrypt certificate installation fails with one of the following error messages:
Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
...
Details:
Type: urn:ietf:params:acme:error:orderNotReady
Status: 403
Detail: Order's status ("pending") is not acceptable for finalization
Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/order/63114583/905220149.
Details:
Type: urn:ietf:params:acme:error:malformed
Status: 404
Detail: No order for ID 905220149 -
Previously, there was an attempt to install a Let's Encrypt certificate on the same domain, but it failed.
Cause
Product issue:
- #EXTLETSENC-765 "If users face the “No order for ID” error when they renew their SSL/TLS certificates, the extension fixes the error in the background and the users are asked to issue an SSL/TLS certificate once again, which helps in most cases."
Fixed in:- Let’s Encrypt 2.8.5 07 February 2020
Resolution
Please consider updating your server:
Workaround
Plesk for Linux
-
Connect to the Plesk server via SSH
-
Search for the JSON file which contains the Let's Encrypt order in the
/usr/local/psa/var/modules/letsencrypt/ordersfolder:# egrep -Ril example.com /usr/local/psa/var/modules/letsencrypt/orders
/usr/local/psa/var/modules/letsencrypt/orders/**c92788fed3b07d20e4ad823731285d30f0c88dcb.json
**Note: replace the example.com with the name of the affected domain.
-
Remove the JSON file retrieved with the previous command:
# rm /usr/local/psa/var/modules/letsencrypt/orders/c92788fed3b07d20e4ad823731285d30f0c88dcb.json
Plesk for Windows
-
Connect to the Plesk server via RDP
-
Search for the JSON file which contains the Let's Encrypt order in the
%plesk_dir%varmodulesletsencryptordersfolder:C:> findstr /M example.com "%plesk_dir%varmodulesletsencryptorders*"
C:Program Files (x86)Pleskvarmodulesletsencryptorders**1eda6b4e824a9ddcf4d0f43b6b3b9600b76344b6.json
**Note: replace the example.com with the name of the affected domain.
-
Remove the JSON file retrieved with the previous command:
C:> del "%plesk_dir%varmodulesletsencryptorders1eda6b4e824a9ddcf4d0f43b6b3b9600b76344b6.json"
with