[BUG] Letsencrypt lot of parsefail, stuck with cert generation

[bajizs]

What happened?

LE can't renew certificates for many domains. I found that LE has a problem with the account used by these certificates.

I removed the certificates through the UI to start generating them again, but the system now blocks all those domains because it keeps retrying to obtain certificates without installing them. I found a parse error in the Let's Encrypt log.

I have removed all the certificates, but the problematic files in /var/cache/bunkerweb/letsencrypt/etc/renewal/ are not deleted; when I delete them manually the system regenerates them.

How can I resolve this issue and remove all these config files? I found many renewal configs for services that were removed months ago — why doesn't LE remove renewal entries when the service no longer exists?

letsencrypt.log:

2026-06-11 09:38:45,728:DEBUG:certbot._internal.display.obj:Notifying user:   /var/cache/bunkerweb/letsencrypt/etc/renewal/******com-0001.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******com-0002.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******com-0003.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******com-0004.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******com-0005.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******com.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**-0001.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**-0002.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**-0003.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**-0004.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**-0005.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/******co.**.conf (parsefail)
.......
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.**-0001.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.**-0002.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.**-0003.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.**-0004.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.**-0005.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.rs.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com-0001.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com-0002.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com-0003.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com-0004.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com-0005.conf (parsefail)
  /var/cache/bunkerweb/letsencrypt/etc/renewal/*****.com.conf (parsefail)
2026-06-11 09:38:45,728:DEBUG:certbot._internal.display.obj:Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

How to reproduce?

remove account for LE and create new one; old domains stuck in renewal process

Configuration file(s) (yaml or .env)

Relevant log output

BunkerWeb version

1.6.11

What integration are you using?

Linux

Linux distribution (if applicable)

Debian 13

Removed private data

• I have removed all private data from the configuration file and the logs

Code of Conduct

• I agree to follow this project's Code of Conduct

[TheophileDiot]

Hi @bajizs, try to remove the certs in the letsencrypt page of the web UI.

[bajizs]

Hi @bajizs, try to remove the certs in the letsencrypt page of the web UI.

I have do it befor write from BUG:

"I removed the certificates through the UI to start generating them again, but the system now blocks all those domains because it keeps retrying to obtain certificates without installing them. I found a parse error in the Let's Encrypt log."

[bajizs]

How can I remove all of this data from database? cert removed over UI but config is there and stops letsencrypt completly

[TheophileDiot]

@bajizs, sorry for the delay. You can remove the cache folder under the "Cache" page

[bajizs]

Not solved, again created....

How can I completly reset Letsencrypt (dropp all)

[bajizs]

Delete the cache file from the UI (description by @TheophileDiot).
Remove the /var/cache/bunkerweb/letsencrypt/etc folder.
Restart certificate generation from the cron Jobs (UI).

Side effect: if you have many services, it will generate many certificates with identical issuance and expiration dates.

[TheophileDiot]

I'd recommend using the wildcard feature if you have a bunch of certificates to be generated (with the same suffix)

[TheophileDiot]

Not solved, again created....

How can I completly reset Letsencrypt (dropp all)

Well, deleting this and restarting the scheduler should have wiped the whole let's encrypt cache (certs, renewal configs, accounts and all)