I meanwhile tried it again with the same setup and it worked. It got a "status": "valid" this time, so maybe pending/valid handling really is the problem.
# acme-client -vv lists.dl6tom.de acme-client: /etc/ssl/lists.dl6tom.de.crt: certificate renewable: -48 days left acme-client: /etc/acme/letsencrypt-privkey.pem: loaded RSA account key acme-client: /etc/ssl/private/lists.dl6tom.de.key: loaded RSA domain key acme-client: https://acme-v01.api.letsencrypt.org/directory: directories acme-client: acme-v01.api.letsencrypt.org: DNS: 104.111.246.175 acme-client: transfer buffer: [{ "ZQkeEPb4zhs": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417";, "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change";, "meta": { "caaIdentiti es": [ "letsencrypt.org" ], "terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf";, "website": "https://letsencrypt.org"; }, "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz";, "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert";, "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg";, "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"; }] (658 bytes) acme-client: https://acme-v01.api.letsencrypt.org/acme/new-authz: req-auth: lists.dl6tom.de acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "lists.dl6tom.de" }, "status": "valid", "expires": "2019-02-21T18:21:22Z", "challenges": [ { "type": "tls-sni-01", "status": "pending", "uri": "https:/ /acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932856", "token": "pedbWPKfQ3SS_6EB1nZUz8vMOjLXyVsq_W7aALRaVbE" }, { "type": "http-01", "status": "valid", "uri": "https://acme-v0 1.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858", "token": "FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s", "validationRecord": [ { "url": "http://lists.dl6tom.de/.well-known/acme-c hallenge/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s", "hostname": "lists.dl6tom.de", "port": "80", "addressesResolved": [ "88.99.190.88", "2a01:4f8:c0c:103d::2" ], "addressUsed": "88.99.190.88", "addressesTried": [ "2a01:4f 8:c0c:103d::2" ] } ] }, { "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932860";, "token": "Fc-aeqzccqH82AKNN2vJ3KY6u_jBV0y zXEpVd3yFuCo" }, { "type": "tls-alpn-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932862";, "token": "NuPrsMpxl05_qBBWjog2_ogK1w-VptNsE CjwSatGfAE" } ], "combinations": [ [ 2 ], [ 1 ], [ 0 ], [ 3 ] ] }] (1730 bytes) acme-client: /var/www/acme/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s: created acme-client: https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858: challenge acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [{ "type": "http-01", "status": "valid", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858";, "token": "FF1lMKPyjmEeEURPWUyLwBe8Z Rj3ozkdUGkyfOmGT5s", "validationRecord": [ { "url": "http://lists.dl6tom.de/.well-known/acme-challenge/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s";, "hostname": "lists.dl6tom.de", "port": "80", "addressesResolved": [ "88.99. 190.88", "2a01:4f8:c0c:103d::2" ], "addressUsed": "88.99.190.88", "addressesTried": [ "2a01:4f8:c0c:103d::2" ] } ] }] (625 bytes) acme-client: https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858: status acme-client: acme-v01.api.letsencrypt.org: cached acme-client: https://acme-v01.api.letsencrypt.org/acme/new-cert: certificate acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [0??X0??@????????"\?????D&???`Y?F?0 ? *?H?? ?? ??0J1 0 ??U????US1?0???U? ? Let's Encrypt1#0!??U????Let's Encrypt Authority X30?? 190128194123Z? 190428194123Z0?1?0???U????lists.dl6tom.de0??"0 ? * ?H?? ??????????0?? ????????????n ? ?)?j?Tl???????J??=b?????T??????m9?_???f k???<pEz???????;?????pvR???? fl?~??c??!g?@m??r???9????c?Jb??R?Y??RJe????8??J?G???????nBt??j!??????1??m?^??x?J?BP??d??????????\???????i??? e???G?1???* ????k>_7???~????c?u????'_T????????"?V(?????7??Nq????b???????*P&?1W?~??9?`?N??o?K?q??????P?gx??????????o???V?w3??????????=??&+????{/?/?u?? ??u?M"{??@?=8?#?X?P???\?a???-?I%z???t{??3s?Q?.?Y??(??&?H??U?????????lm#???????????M??? ?~?J?%??9?'tO?? ?t?<?Q?e'|l?A;?k?K?@?u?S?d?L?+?}???< ??????Q?4??M???K???u???A?p? ?xmt??7????????f0??b0???U???????????0???U?%??0???+?????????+???????0 ??U???????0?0???U????????????$w???-??^T????0???U?#??0????Jjc?}????9??Ee??? ??0o??+????????c0a0.??+?????0??"http://ocsp.int-x3.letsencrypt.org0/??+?????0??#http://cert.int-x3.letsencrypt.org/0???U????0???lists.dl6tom.de0L??U? ?E0C0???g? ???07? +??????????0(0&??+?????????http://cps.letsencrypt.org0?? ?? +?????y????????????w?)<Q?T?9e??P?X???o?Xz)r??? ??EG?x???h?1???????H0F?!????P?wJ??????????1??(h??n@ p?5?@?!???H%??[?#??0?{?D?l?5??O?'2s B????w??iK?&??@ ????;??>??t????(??????????h?1?z?????H0F?!???]?J??*U?*???????i??P<????' ?u???!????? ?>??vAi?5???{?+-?? ?w??b??Z0 ? *?H?? ?? ?????????O??M?4?????id??xx?9??uc*?-?,?"????x??? ?v.??J?X??q?T??????n5?m???v-"???2 ?W???????wY????q???=??d???/?????=E??W???Izgl?PL@?q?PI???bt??>%??<?&?g??F?ms-????BF[z?|z??Z ????????? ?<??l?>hc???6????C??E?Nc&q??]???rA?????|?0?,?????a=?,?+wYG????c??????3? ?_?&????4] (1628 bytes) acme-client: http://cert.int-x3.letsencrypt.org/: full chain acme-client: cert.int-x3.letsencrypt.org: DNS: 104.111.245.93 acme-client: transfer buffer: [0???0??z??????? ?AB???S?sj ????0 ? *?H?? ?? ??0?1$0"??U? ??Digital Signature Trust Co.1?0???U????DST Root CA X30?? 160317164046Z? 210317164046Z0J1 0 ??U????US1?0???U? ? Let's Encrypt1#0!??U???? Let's Encrypt Authority X30??"0 ? *?H?? ??????????0?? ??????? ?Z?.G?r]7??hc0??5&?%???5?p?/??KA????5?X??*?h? ??u????bq?y?`???????xgq?i????????`<H?~?Mw?$?G?Z????7????{????J??A?6????m<?h?#*B? ?tg?????Ra???e???????V????????????? k ??}?+?e???6u?k?J???Ix/??O* %)??t??1??18????3?C????0??y1?=-6????3j?91???? ?d?3???)?? ??}??????????}0??y0???U???????0???????0???U???????????0???+????????s0q02??+?????0??&http://isrg.trustid.ocsp.identrust.com0;??+?????0??/ht tp://apps.identrust.com/roots/dstrootcax3.p7c0???U?#??0???????{,q???K?u???`???0T??U? ?M0K0???g? ???0?? +??????????000.??+????????"http://cps.root-x1.letsencrypt.org0<??U???50301?/?-?+http://crl.identrust.com/DSTROOTCAX3CRL.c rl0???U???????Jjc?}????9??Ee?????0 ? *?H?? ?? ????????3???cX8???? U?vV?pH?iG'{?$???Z?J?)7$tQ?bh???pg????N(Q?????????Z??????j?j?>W#????b????????? H????eb??T??*? ?????????2???w??ye?+?(?:?R??R ._????3?wl?@?2???\A?tl[] _3?M??8?/ {,b????o%?/???F=?~??z???zm??%???????/X??/,h&?K???? ????CJ?DNosz(???n{L}?????D????4[?B] (1174 bytes) acme-client: /etc/ssl/lists.dl6tom.de.crt: created acme-client: /etc/ssl/lists.dl6tom.de.fullchain.pem: created# acme-client -vv lists.dl6tom.de acme-client: /etc/ssl/lists.dl6tom.de.crt: certificate renewable: -48 days left acme-client: /etc/acme/letsencrypt-privkey.pem: loaded RSA account key acme-client: /etc/ssl/private/lists.dl6tom.de.key: loaded RSA domain key acme-client: https://acme-v01.api.letsencrypt.org/directory: directories acme-client: acme-v01.api.letsencrypt.org: DNS: 104.111.246.175 acme-client: transfer buffer: [{ "ZQkeEPb4zhs": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417";, "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change";, "meta": { "caaIdentiti es": [ "letsencrypt.org" ], "terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf";, "website": "https://letsencrypt.org"; }, "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz";, "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert";, "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg";, "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"; }] (658 bytes) acme-client: https://acme-v01.api.letsencrypt.org/acme/new-authz: req-auth: lists.dl6tom.de acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [{ "identifier": { "type": "dns", "value": "lists.dl6tom.de" }, "status": "valid", "expires": "2019-02-21T18:21:22Z", "challenges": [ { "type": "tls-sni-01", "status": "pending", "uri": "https:/ /acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932856", "token": "pedbWPKfQ3SS_6EB1nZUz8vMOjLXyVsq_W7aALRaVbE" }, { "type": "http-01", "status": "valid", "uri": "https://acme-v0 1.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858", "token": "FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s", "validationRecord": [ { "url": "http://lists.dl6tom.de/.well-known/acme-c hallenge/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s", "hostname": "lists.dl6tom.de", "port": "80", "addressesResolved": [ "88.99.190.88", "2a01:4f8:c0c:103d::2" ], "addressUsed": "88.99.190.88", "addressesTried": [ "2a01:4f 8:c0c:103d::2" ] } ] }, { "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932860";, "token": "Fc-aeqzccqH82AKNN2vJ3KY6u_jBV0y zXEpVd3yFuCo" }, { "type": "tls-alpn-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932862";, "token": "NuPrsMpxl05_qBBWjog2_ogK1w-VptNsE CjwSatGfAE" } ], "combinations": [ [ 2 ], [ 1 ], [ 0 ], [ 3 ] ] }] (1730 bytes) acme-client: /var/www/acme/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s: created acme-client: https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858: challenge acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [{ "type": "http-01", "status": "valid", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858";, "token": "FF1lMKPyjmEeEURPWUyLwBe8Z Rj3ozkdUGkyfOmGT5s", "validationRecord": [ { "url": "http://lists.dl6tom.de/.well-known/acme-challenge/FF1lMKPyjmEeEURPWUyLwBe8ZRj3ozkdUGkyfOmGT5s";, "hostname": "lists.dl6tom.de", "port": "80", "addressesResolved": [ "88.99. 190.88", "2a01:4f8:c0c:103d::2" ], "addressUsed": "88.99.190.88", "addressesTried": [ "2a01:4f8:c0c:103d::2" ] } ] }] (625 bytes) acme-client: https://acme-v01.api.letsencrypt.org/acme/challenge/x1Rh_VhMUuYxk_v22zHe32fL2zh7sRNh2LSKFNwkqxA/11749932858: status acme-client: acme-v01.api.letsencrypt.org: cached acme-client: https://acme-v01.api.letsencrypt.org/acme/new-cert: certificate acme-client: acme-v01.api.letsencrypt.org: cached acme-client: acme-v01.api.letsencrypt.org: cached acme-client: transfer buffer: [0??X0??@????????"\?????D&???`Y?F?0 ? *?H?? ?? ??0J1 0 ??U????US1?0???U? ? Let's Encrypt1#0!??U????Let's Encrypt Authority X30?? 190128194123Z? 190428194123Z0?1?0???U????lists.dl6tom.de0??"0 ? * ?H?? ??????????0?? ????????????n ? ?)?j?Tl???????J??=b?????T??????m9?_???f k???<pEz???????;?????pvR???? fl?~??c??!g?@m??r???9????c?Jb??R?Y??RJe????8??J?G???????nBt??j!??????1??m?^??x?J?BP??d??????????\???????i??? e???G?1???* ????k>_7???~????c?u????'_T????????"?V(?????7??Nq????b???????*P&?1W?~??9?`?N??o?K?q??????P?gx??????????o???V?w3??????????=??&+????{/?/?u?? ??u?M"{??@?=8?#?X?P???\?a???-?I%z???t{??3s?Q?.?Y??(??&?H??U?????????lm#???????????M??? ?~?J?%??9?'tO?? ?t?<?Q?e'|l?A;?k?K?@?u?S?d?L?+?}???< ??????Q?4??M???K???u???A?p? ?xmt??7????????f0??b0???U???????????0???U?%??0???+?????????+???????0 ??U???????0?0???U????????????$w???-??^T????0???U?#??0????Jjc?}????9??Ee??? ??0o??+????????c0a0.??+?????0??"http://ocsp.int-x3.letsencrypt.org0/??+?????0??#http://cert.int-x3.letsencrypt.org/0???U????0???lists.dl6tom.de0L??U? ?E0C0???g? ???07? +??????????0(0&??+?????????http://cps.letsencrypt.org0?? ?? +?????y????????????w?)<Q?T?9e??P?X???o?Xz)r??? ??EG?x???h?1???????H0F?!????P?wJ??????????1??(h??n@ p?5?@?!???H%??[?#??0?{?D?l?5??O?'2s B????w??iK?&??@ ????;??>??t????(??????????h?1?z?????H0F?!???]?J??*U?*???????i??P<????' ?u???!????? ?>??vAi?5???{?+-?? ?w??b??Z0 ? *?H?? ?? ?????????O??M?4?????id??xx?9??uc*?-?,?"????x??? ?v.??J?X??q?T??????n5?m???v-"???2 ?W???????wY????q???=??d???/?????=E??W???Izgl?PL@?q?PI???bt??>%??<?&?g??F?ms-????BF[z?|z??Z ????????? ?<??l?>hc???6????C??E?Nc&q??]???rA?????|?0?,?????a=?,?+wYG????c??????3? ?_?&????4] (1628 bytes) acme-client: http://cert.int-x3.letsencrypt.org/: full chain acme-client: cert.int-x3.letsencrypt.org: DNS: 104.111.245.93 acme-client: transfer buffer: [0???0??z??????? ?AB???S?sj ????0 ? *?H?? ?? ??0?1$0"??U? ??Digital Signature Trust Co.1?0???U????DST Root CA X30?? 160317164046Z? 210317164046Z0J1 0 ??U????US1?0???U? ? Let's Encrypt1#0!??U???? Let's Encrypt Authority X30??"0 ? *?H?? ??????????0?? ??????? ?Z?.G?r]7??hc0??5&?%???5?p?/??KA????5?X??*?h? ??u????bq?y?`???????xgq?i????????`<H?~?Mw?$?G?Z????7????{????J??A?6????m<?h?#*B? ?tg?????Ra???e???????V????????????? k ??}?+?e???6u?k?J???Ix/??O* %)??t??1??18????3?C????0??y1?=-6????3j?91???? ?d?3???)?? ??}??????????}0??y0???U???????0???????0???U???????????0???+????????s0q02??+?????0??&http://isrg.trustid.ocsp.identrust.com0;??+?????0??/ht tp://apps.identrust.com/roots/dstrootcax3.p7c0???U?#??0???????{,q???K?u???`???0T??U? ?M0K0???g? ???0?? +??????????000.??+????????"http://cps.root-x1.letsencrypt.org0<??U???50301?/?-?+http://crl.identrust.com/DSTROOTCAX3CRL.c rl0???U???????Jjc?}????9??Ee?????0 ? *?H?? ?? ????????3???cX8???? U?vV?pH?iG'{?$???Z?J?)7$tQ?bh???pg????N(Q?????????Z??????j?j?>W#????b????????? H????eb??T??*? ?????????2???w??ye?+?(?:?R??R ._????3?wl?@?2???\A?tl[] _3?M??8?/ {,b????o%?/???F=?~??z???zm??%???????/X??/,h&?K???? ????CJ?DNosz(???n{L}?????D????4[?B] (1174 bytes) acme-client: /etc/ssl/lists.dl6tom.de.crt: created acme-client: /etc/ssl/lists.dl6tom.de.fullchain.pem: created
