Renewal fails with ‘no webroot in conf’ message, but you have webroot and webroot_path entries. Comment them out and add the following block: [[webroot_map]]your.server.com = /path/to/webroot