add some verbose logging for 8964

certbot/certbot/_internal/client.py

@@ -306,6 +306,7 @@ class Client:
                                                            orderr.alternative_fullchains_pem,
                                                            self.config.preferred_chain,
                                                            not self.config.dry_run)
+        logger.info("orderr.fullchain_pem: %s, fullchain: %s", orderr.fullchain_pem, fullchain)
         cert, chain = crypto_util.cert_and_chain_from_fullchain(fullchain)
         return cert.encode(), chain.encode()
 

certbot/certbot/crypto_util.py

@@ -619,6 +619,7 @@ def cert_and_chain_from_fullchain(fullchain_pem):
     # TODO: This will silently skip over any "explanatory text" in between boundaries,
     # which is prohibited by RFC8555.
     certs = CERT_PEM_REGEX.findall(fullchain_pem.encode())
+    logger.info("regex match: %s", certs)
     if len(certs) < 2:
         raise errors.Error("failed to parse fullchain into cert and chain: " +
                            "less than 2 certificates in chain")