Error 400 with Let's encrypt

[tlozano]

When I run the command /usr/local/hestia/bin/v-add-letsencrypt-host or when I want to add a new website and ask for a LE certificate, I always get this error:

“type”: “urn:ietf:params:acme:error:malformed”,
“detail”: “Unable to validate JWS :: JWS verification error”,
“status”: 400

This is the log for admin user:

=============================
Date Time: 2025-08-28 13:23:58
WEB_SYSTEM: nginx
PROXY_SYSTEM: 
user: admin
domain: ayp.midominio.es


- aliases: 
- proto: http-01
- wildcard: 


==[Step 1]==
- status: 200
- nonce: xxxxxxxxxxx-H2s_SWyZhFW0V51_J8l3m3EnzCB4ONxuYEgp8m4
- answer: HTTP/2 200 
server: nginx
date: Thu, 28 Aug 2025 11:23:59 GMT
content-type: application/json
content-length: 995
cache-control: public, max-age=0, no-cache
replay-nonce: xxxxxxxxxxx-H2s_SWyZhFW0V51_J8l3m3EnzCB4ONxuYEgp8m4
x-frame-options: DENY
strict-transport-security: max-age=604800



==[API call]==
exit status: 0


==[Step 2]==
- status: 400
- nonce: xxxxxxxx-Z2SX4GwlDzFYJR75aA-14bIHzmt_FP2XHiM2ePY5kg
- authz: 
- finalize: 
- payload: {"identifiers":[{"type":"dns","value":"ayp.midominio.es"}]}
- answer: HTTP/2 400 
server: nginx
date: Thu, 28 Aug 2025 11:23:59 GMT
content-type: application/problem+json
content-length: 133
boulder-requester: 1080556887
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: xxxxxxxx-Z2SX4GwlDzFYJR75aA-14bIHzmt_FP2XHiM2ePY5kg

{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to validate JWS :: JWS verification error",
  "status": 400
}
 order: 

I test my site with https://letsdebug.net/ and all is ok.

I did a lot of test and I am very lost at this point… Can some one help me?.

I edit the /usr/local/hestia/bin/v-add-letsencrypt-host wirh a set -x and I can see that the error is in the line:

/usr/local/hestia/bin/v-add-letsencrypt-domain admin ayp.midominio.es

Thank you

[sahsanu]

Try removing the account conf for your user and Let’s Encrypt.

mkdir -p /root/backup_admin_le_account/
mv /usr/local/hestia/data/users/admin/ssl/le.conf /root/backup_admin_le_account/
mv /usr/local/hestia/data/users/admin/ssl/user.key /root/backup_admin_le_account/

And try to issue the certificate again.

[tlozano]

Thak you!!. It works fine.