I have not been able to install LetsEncrypt certificates to allow HTTPS GUI access.

Certificate Manager is v. 14.0.20. All modules and PBX updater are up to date.

FreePBX firewall is off; using NAT router with port 80 fully open and fwd'd to PBX.

Initial creation attempt returned a token error, so i did:

rm /etc/pki/tls/certs/ca-bundle.crt

... then:

curl https://curl.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt -k

When tested with: curl https://letsencrypt.com 

results in: *Redirecting to https://letsencrypt.org/*

Went to re-create a new LetsEncrypt cert and now get the error:

There was an error updating the certificate:

Forbidden

You don't have permission to access /lechecker.php on this server.

How do I proceed from here?