When DNS and CAA checks pass, ProvisioningError is set to nil but was only persisted later alongside the challenge data. If GetHTTPChallenge then failed, the update was never reached, leaving stale DNS/CAA error messages visible to the user. Signed-off-by: Bryan Frimin <bryan@getprobo.com>