set +e
echo "=== [R1] LE renewal 目录 ==="
ls -1 /etc/letsencrypt/renewal/ 2>/dev/null | head -10
echo "=== [R2] alotbuy.com 续期配置（去注释） ==="
grep -vE "^\s*#|^\s*$" /etc/letsencrypt/renewal/alotbuy.com.conf 2>/dev/null | head -25
echo "=== [R3] 证书 SAN ==="
openssl x509 -in /etc/letsencrypt/live/alotbuy.com/fullchain.pem -noout -subject -dates 2>/dev/null
openssl x509 -in /etc/letsencrypt/live/alotbuy.com/fullchain.pem -noout -ext subjectAltName 2>/dev/null | tr ',' '\n' | head -12
echo "=== [R4] certbot 与 DNS 插件 ==="
which certbot 2>/dev/null; certbot --version 2>&1 | head -2
certbot plugins 2>/dev/null | grep -iE "cloudflare|dns|webroot|nginx" | head -8
echo "=== [R5] 是否存在凭据文件（只报存在性，不打印内容） ==="
for p in /root/.secrets/cloudflare.ini /etc/letsencrypt/dns-cloudflare.ini /root/cloudflare.ini /etc/letsencrypt/cloudflare.ini; do
  [ -f "$p" ] && echo "存在: $p ($(stat -c%s "$p") B, mode $(stat -c%a "$p"))" || echo "无: $p"
done
ls -la /root/.secrets/ 2>/dev/null | head -6
echo "=== [R6] dsh.alotbuy.com.conf 的证书路径 ==="
grep -nE "ssl_certificate|server_name|listen|proxy_pass" /www/server/panel/vhost/nginx/dsh.alotbuy.com.conf 2>/dev/null | head -10
echo "=== [R7] relay-direct.alotbuy.com 证书 ==="
grep -nE "ssl_certificate|server_name|listen" /www/server/panel/vhost/nginx/relay-direct.conf 2>/dev/null | head -8