The domain theapothecary.app is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
Requests made to the domain
Request to: theapothecary.app/2606:4700:3035::ac43:d6e4, Result: [Address=2606:4700:3035::ac43:d6e4,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=520], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3035::ac43:d6e4)
@0ms: Dialing 2606:4700:3035::ac43:d6e4
@103ms: Server response: HTTP 301 Moved Permanently
@103ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@103ms: Dialing 2606:4700:3035::ac43:d6e4
@172ms: Server response: HTTP 520
Request to: theapothecary.app/2606:4700:3037::6815:10ae, Result: [Address=2606:4700:3037::6815:10ae,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=520], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3037::6815:10ae)
@0ms: Dialing 2606:4700:3037::6815:10ae
@36ms: Server response: HTTP 301 Moved Permanently
@36ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@36ms: Dialing 2606:4700:3037::6815:10ae
@160ms: Server response: HTTP 520
Request to: theapothecary.app/104.21.16.174, Result: [Address=104.21.16.174,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=520], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 104.21.16.174)
@0ms: Dialing 104.21.16.174
@96ms: Server response: HTTP 301 Moved Permanently
@96ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@97ms: Dialing 104.21.16.174
@242ms: Server response: HTTP 520
Request to: theapothecary.app/172.67.214.228, Result: [Address=172.67.214.228,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=520], Issue:
Trace:
@0ms: Making a request to http://theapothecary.app/.well-known/acme-challenge/letsdebug-test (using initial IP 172.67.214.228)
@0ms: Dialing 172.67.214.228
@31ms: Server response: HTTP 301 Moved Permanently
@31ms: Received redirect to https://theapothecary.app/.well-known/acme-challenge/letsdebug-test
@32ms: Dialing 172.67.214.228
@167ms: Server response: HTTP 520
A and AAAA records found for this domain
theapothecary.app. 0 IN A 104.21.16.174
theapothecary.app. 0 IN A 172.67.214.228
theapothecary.app. 0 IN AAAA 2606:4700:3035::ac43:d6e4
theapothecary.app. 0 IN AAAA 2606:4700:3037::6815:10ae
Challenge update failures for theapothecary.app in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/3097084904
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": 2606:4700:3037::6815:10ae: Invalid response from https://theapothecary.app/.well-known/acme-challenge/sOTebjCm0JhkkmpaSNQ-wVO2rl9QTu115ACBT9zVhNs: 520
2 Certificates contributing to rate limits for this domain
Serial: 336486809695483099476692343908949297829343
NotBefore: 2022-07-08 18:29:43 +0000 UTC
Names: [blog.theapothecary.app]
Serial: 350827611695489796698752950352095875845075
NotBefore: 2022-07-08 18:25:35 +0000 UTC
Names: [theapothecary.app]