LE Multi-Certificate renewal doesn't include main domain

Hello,
I have some websites with alias-Domains.
When I create the Website or when I disable cert ->save->enable cert. All will work as expected.
But when the cert is renewed with the nighly script, the certificate contains only the alias-Names, not the main name.
When I recreate the cert with ISPConfig or with the shell command, it works correct.
SSH: /root/.acme.sh/acme.sh -r -f -d xxx-yyy.de

Can someone help me?
Regards Thomas

 

Can you check the log in /var/log/ispconfig/acme.log? Is there anything in there that might explain it?

 

All domains are listed in log-File. No Errors in the script. Only two messages appears:
'/usr/local/ispconfig/interface/acme' does not contain 'dns'
'/usr/local/ispconfig/interface/acme' does not contain 'no'

 

This you should never do.

For LE failure for main domain, if this is true, do troubleshoot using LE FAQ.

 

Why not? This is the acme-script to renew a certificate. ISPConfig use the same script.

In the LE FAQ there is no hint for this problem.
It happens for all websites with domain alias, resulting in a multi-domain certificate.
Using the shell command, the certificate contains all names, so I think the problem is not in the acme script

 

I have the solution to my problem:
For whatever reason, a configuration was stored in the /root/.acme.sh/ folder for the main domain and for the domain aliases.
If the certificate was renewed, first the main domain and then the alias domains were renewed, overwriting the certificate of the main domain.
The problem was solved by deleting the configuration for the alias domains.

However, I cannot say why this configuration was created.