[2.15.0] Certbot error: crypto.X509Extension

Checklist

• Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
  • Yes
• Are you sure you're not using someone else's docker image?
  • Yes
• Have you searched for similar issues (both open and closed)?
  • Yes

Describe the bug

When trying to renew a certificate or adding a new one with Gandi Live DNS and ECDSA 256 key type, I get an Internal Error.

Nginx Proxy Manager Version

2.15.0

To Reproduce
Steps to reproduce the behavior:

1. Go to Certificates
2. Click on Add Certificate
3. Select ECDSA 256 key type and Gandi Live DNS as provider
4. Click save
5. See error

Expected behavior

The certificat is renewed/created

Screenshots

Operating System

Docker on Debian 6.12.41-1

Additional context

[6/1/2026] [7:35:00 AM] [Express  ] › ⚠  warning   Traceback (most recent call last):
  File "/opt/certbot/bin/certbot", line 3, in <module>
    from certbot.main import main
  File "/opt/certbot/lib/python3.13/site-packages/certbot/main.py", line 6, in <module>
    from certbot._internal import main as internal_main
  File "/opt/certbot/lib/python3.13/site-packages/certbot/_internal/main.py", line 23, in <module>
    from acme import client as acme_client
  File "/opt/certbot/lib/python3.13/site-packages/acme/client.py", line 27, in <module>
    from acme import challenges
  File "/opt/certbot/lib/python3.13/site-packages/acme/challenges.py", line 24, in <module>
    from acme import crypto_util
  File "/opt/certbot/lib/python3.13/site-packages/acme/crypto_util.py", line 504, in <module>
    extensions: Optional[List[crypto.X509Extension]] = None,
                              ^^^^^^^^^^^^^^^^^^^^
  File "/opt/certbot/lib/python3.13/site-packages/cryptography/utils.py", line 76, in __getattr__
    obj = getattr(self._module, name)
AttributeError: module 'OpenSSL.crypto' has no attribute 'X509Extension'

Start by reproducing the Certificates flow with ECDSA 256 and Gandi Live DNS, then read the traceback through /opt/certbot/lib/python3.13/site-packages/acme/crypto_util.py and the related Certbot, acme, cryptography, and OpenSSL packages. Done means certificate creation and renewal complete without the crypto.X509Extension error in the Docker image.