Fixed
- When a CA fails to issue a certificate after finalization, print the ACME error from the order
- No longer checks ARI during certbot --dry-run, because --dry-run uses staging when used with let's encrypt but the cert was issued against the default server. This would emit a scary warning, even though the cert would renew successfully.
- Contacting the CA to check ARI is now skipped for certificate lineages that have autorenew set to False.
More details about these changes can be found on our GitHub repo.