During update from 3.2.1 to 3.2.2 Create new ISPConfig SSL certificate (yes,no) [no]: yes Checking / creating certificate for domain.com Using certificate path /etc/letsencrypt/live/domain.com Using apache for certificate validation Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for domain.com Using the webroot path /usr/local/ispconfig/interface/acme for all unmatched domains. Broadcast message from [email protected] (Mon 2021-01-10 10:10:10 CET): Password entry required for 'Enter passphrase for SSL/TLS keys for domain.com:8080 (RSA):' (PID 14717). Please enter password with the systemd-tty-ask-password-agent tool: Waiting for verification... Challenge failed for domain domain.com http-01 challenge for domain.com Cleaning up challenges Some challenges have failed. Issuing certificate via certbot failed. Please check log files and make sure that your hostname can be verified by letsencrypt Could not issue letsencrypt certificate, falling back to self-signed. Generating RSA private key, 4096 bit long modulus (2 primes) ---------------------------- ports 80/443 open all known letsencrypt IP subnets whitelisted Any ideas? Mail clients not working without proper cert.