ACME challenge error with google CloudDNS

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g., so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:
kubectl create certificate
followed by
kubectl describe challenge

kind: Certificate
name: test
namespace: default
secretName: test-tls
name: letsencrypt-staging

It produced this output:

Accepting challenge authorization failed: acme: authorization error for 400 urn:ietf:params:acme:error:dns: DNS problem: NXDOMAIN looking up TXT for - check that a DNS record exists for this domain

My web server is (include version):
i don’t have a web server yet.
The operating system my web server runs on is (include version):
i have no web server. i am trying to create certificate

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Google Cloud DNS

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
I am using Kubernetes CERT Manager version v0.16.1

1 Like

So you’re using a DNS challenge to prove control of your domain, but the acme client you are using is not creating the DNS TXT record for you. You can see that here:

1 Like

Hi @skg


not your domain, because that domain name isn't registered - see - Make your website better - DNS, redirects, mixed content, certificates

Host Type IP-Address is auth. ∑ Queries ∑ Timeout Name Error yes 1 0 Name Error yes 1 0

You don't need an A-record.

But you must be the domain owner.

But there is no domain owner, no name server of that domain.

Register that domain name or use another domain name.

1 Like

That explains a lot. :laughing: Didn’t think to check that.

1 Like

Thanks a lot! Sorry, i have never done domain registration. I created the DNS Zone and domain in Google Cloud DNS as below

The are created by me manually.
Please advise how to register the domain

1 Like

Until you register the domain name, you don’t own it. You need to purchase registration of the domain name through a registrar.

Here’s a place to get started:

1 Like

Thanks a lot! for all the suggestions


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.