diff --git a/src/acme2.js b/src/acme2.js
index 56101c2a6..c9fe73407 100644
--- a/src/acme2.js
+++ b/src/acme2.js
@@ -524,7 +524,7 @@ async function getCertificate(vhost, domain, paths, options) {
     assert.strictEqual(typeof options, 'object');
 
     let attempt = 1;
-    promiseRetry({ times: 3, interval: 0 }, async function () {
+    await promiseRetry({ times: 3, interval: 0 }, async function () {
         debug(`getCertificate: attempt ${attempt++}`);
 
         const acme = new Acme2(options || { });
diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 1daa48e18..3d1cabbf0 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -675,7 +675,7 @@ async function renewCerts(options, auditSource, progressCallback) {
 
         // hack to check if the app's cert changed or not. this doesn't handle prod/staging le change since they use same file name
         let currentNginxConfig = safe.fs.readFileSync(appDomain.nginxConfigFilename, 'utf8') || '';
-        if (currentNginxConfig.includes(bundle.certFilePath)) return;
+        if (currentNginxConfig.includes(bundle.certFilePath)) continue;
 
         debug(`renewCerts: creating new nginx config since ${appDomain.nginxConfigFilename} does not have ${bundle.certFilePath}`);