Fixed
- When a CA fails to issue a certificate after finalization, print the ACME error from the order
- No longer checks ARI during certbot --dry-run, because --dry-run uses staging when used
with let's encrypt but the cert was issued against the default server. This would emit
a scary warning, even though the cert would renew successfully. - Contacting the CA to check ARI is now skipped for certificate lineages that
have autorenew set to False.
More details about these changes can be found on our GitHub repo.