The domain theapothecary.app is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
Requests made to the domain
Request to: theapothecary.app/2606:4700:3035::ac43:d6e4, Result: [Address=2606:4700:3035::ac43:d6e4,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=526], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3035::ac43:d6e4)
@0ms: Dialing 2606:4700:3035::ac43:d6e4
@27ms: Server response: HTTP 301 Moved Permanently
@27ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@27ms: Dialing 2606:4700:3035::ac43:d6e4
@86ms: Server response: HTTP 526
Request to: theapothecary.app/2606:4700:3037::6815:10ae, Result: [Address=2606:4700:3037::6815:10ae,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=526], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3037::6815:10ae)
@0ms: Dialing 2606:4700:3037::6815:10ae
@40ms: Server response: HTTP 301 Moved Permanently
@40ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@40ms: Dialing 2606:4700:3037::6815:10ae
@126ms: Server response: HTTP 526
Request to: theapothecary.app/172.67.214.228, Result: [Address=172.67.214.228,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=526], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 172.67.214.228)
@0ms: Dialing 172.67.214.228
@32ms: Server response: HTTP 301 Moved Permanently
@32ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@32ms: Dialing 172.67.214.228
@100ms: Server response: HTTP 526
Request to: theapothecary.app/104.21.16.174, Result: [Address=104.21.16.174,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=526], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 104.21.16.174)
@0ms: Dialing 104.21.16.174
@39ms: Server response: HTTP 301 Moved Permanently
@39ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@39ms: Dialing 104.21.16.174
@98ms: Server response: HTTP 526
A and AAAA records found for this domain
theapothecary.app. 0 IN A 172.67.214.228
theapothecary.app. 0 IN A 104.21.16.174
theapothecary.app. 0 IN AAAA 2606:4700:3035::ac43:d6e4
theapothecary.app. 0 IN AAAA 2606:4700:3037::6815:10ae
Challenge update failures for theapothecary.app in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/3095949374
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": 2606:4700:3035::ac43:d6e4: Invalid response from https://theapothecary.app/.well-known/acme-challenge/B6N7Ls-xf4ydnuu7zkL7mfRVHo1APx89lRetDbxhcpU: 526