Certbot 5.8.0 was recently released, which upgraded pinned dependencies, which upgraded the Cryptography library, which upgraded pinned dependencies, which upgraded the rust-asn1 library, and now it can't parse OCSP responses from Sectigo for ECDSA certificates. Certificate renewal still works, and ARI should deal with revoked certificates, but it does break the informational "certbot certificates" command. I'm starting to think it's a miracle any of this ever works. https://bugzilla.mozilla.org/show_bug.cgi?id=2072647 https://community.letsencrypt.org/t/certbot-5-8-0-release/250783/2 https://github.com/certbot/certbot/discussions/10788