Any product created by a company that has demonstrated evil intent should be considered evil, even if there are legitimate valid uses. You have to trust not only the person using it, but also the company that controls what the device can/will do with or without the users constent.

Not sure if this is anything or not.

You pasted the httpd-ssl.conf file.

The script output is referencing httpd.conf

I think it’s sending the challenge request via port 80 and that might be where you’re looking in the wrong place.