diff --git a/servers.js b/servers.js
index 7ac0d4a..415b2c9 100644
--- a/servers.js
+++ b/servers.js
@@ -119,7 +119,6 @@ function wrapDefaultSniCallback(opts, greenlock, secureOpts) {
 function createSecureServer(secureOpts, fn) {
 	var major = process.versions.node.split(".")[0];
 
-	console.log("debug set SNICallback:", secureOpts);
 	// TODO can we trust earlier versions as well?
 	if (major >= 12) {
 		secureOpts.allowHTTP1 = true;
diff --git a/sni.js b/sni.js
index c89defc..975f32d 100644
--- a/sni.js
+++ b/sni.js
@@ -122,7 +122,6 @@ sni.create = function(opts, greenlock, secureOpts) {
 		// TODO don't get unknown certs at all, rely on auto-updates from greenlock
 		// Note: greenlock.renew() will return an existing fresh cert or issue a new one
 		return greenlock.renew({ servername: servername }).then(function(matches) {
-			console.log("debug matches", matches);
 			var meta = getCachedMeta(servername);
 			if (!meta) {
 				meta = _cache[servername] = { secureContext: {} };