Unable to install a Let's Encrypt certificate: Order's status ("pending") is not acceptable for finalization or No order for ID

kb: bug Plesk for Windows kb: fixed Plesk for Linux ext: le ABT: Group B

Applicable to:

A Let's Encrypt certificate installation fails with one of the following error messages:

PLESK_ERROR: Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
...
Details:
Type: urn:ietf:params:acme:error:orderNotReady
Status: 403
Detail: Order's status ("pending") is not acceptable for finalization

PLESK_ERROR: Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/order/63114583/905220149.
Details:
Type: urn:ietf:params:acme:error:malformed
Status: 404
Detail: No order for ID 905220149
Previously, there was an attempt to install a Let's Encrypt certificate on the same domain, but it failed.

Product issue:

#EXTLETSENC-765 "If users face the “No order for ID” error when they renew their SSL/TLS certificates, the extension fixes the error in the background and the users are asked to issue an SSL/TLS certificate once again, which helps in most cases."
Fixed in:
- Let’s Encrypt 2.8.5 07 February 2020

Please consider updating your server:

Click on a section to expand

Plesk for Linux

Connect to the Plesk server via SSH
Search for the JSON file which contains the Let's Encrypt order in the /usr/local/psa/var/modules/letsencrypt/orders folder:

# egrep -Ril example.com /usr/local/psa/var/modules/letsencrypt/orders
/usr/local/psa/var/modules/letsencrypt/orders/**c92788fed3b07d20e4ad823731285d30f0c88dcb.json
**

Note: replace the example.com with the name of the affected domain.
Remove the JSON file retrieved with the previous command:

# rm /usr/local/psa/var/modules/letsencrypt/orders/c92788fed3b07d20e4ad823731285d30f0c88dcb.json
Reissue the Let's Encrypt certificate

Plesk for Windows

Connect to the Plesk server via RDP
Start a command prompt as Administrator
Search for the JSON file which contains the Let's Encrypt order in the %plesk_dir%var\modules\letsencrypt\orders folder:

C:\> findstr /M example.com "%plesk_dir%var\modules\letsencrypt\orders\*"
C:\Program Files (x86)\Plesk\var\modules\letsencrypt\orders\**1eda6b4e824a9ddcf4d0f43b6b3b9600b76344b6.json
**

Note: replace the example.com with the name of the affected domain.
Remove the JSON file retrieved with the previous command:

C:\> del "%plesk_dir%var\modules\letsencrypt\orders\1eda6b4e824a9ddcf4d0f43b6b3b9600b76344b6.json"
Reissue the Let's Encrypt certificate