diff --git a/acmev2/client.go b/acmev2/client.go
index ce126470..40acdbc1 100644
--- a/acmev2/client.go
+++ b/acmev2/client.go
@@ -296,6 +296,7 @@ DNSNames:
 		for _, auth := range order.Identifiers {
 			identErrors[auth.Value] = err
 		}
+		return CertificateResource{}, identErrors
 	}
 	authz, failures := c.getAuthzForOrder(order)
 	// If any challenge fails - return. Do not generate partial SAN certificates.
@@ -350,6 +351,7 @@ func (c *Client) ObtainCertificate(domains []string, bundle bool, privKey crypto
 		for _, auth := range order.Identifiers {
 			identErrors[auth.Value] = err
 		}
+		return CertificateResource{}, identErrors
 	}
 	authz, failures := c.getAuthzForOrder(order)
 	// If any challenge fails - return. Do not generate partial SAN certificates.