# \_acme-challenge nxdomain issue - Cloudflare **URL:** \ **Category:** Help\ **Created:** [April 5, 2022, 7:48am UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165 "2022-04-05T07:48:42Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![postcd](https://avatars.discourse-cdn.com/v4/letter/p/85e7bf/32.png) [@postcd](https://community.letsencrypt.org/u/postcd)\ **Post date:** [April 5, 2022, 7:48am UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/1 "2022-04-05T07:48:42Z")
Hello, i have [same issue](https://community.letsencrypt.org/t/error-when-creating-ssl-for-domain-jws-has-an-invalid-anti-replay-nonce/141689) only i do not understand what redirection they are talking about. I do not see any acme kind of DNS entry in parent and child DNS zone files. I thought LE worked even without the need to adjust cloudflare DNS zone. If it is required though, then please let me know where to discover right values for the DNS record? The error message given to me contains only following line that contains long strings: > [INFO] retry due to: acme: error: 400 :: POST :: [https://acme-v02.api.letsencrypt.org/acme/authz-v3/SOMESTRINGREMOVEDFORPRIVACY1](https://acme-v02.api.letsencrypt.org/acme/authz-v3/SOMESTRINGREMOVEDFORPRIVACY1) :: urn:ietf:params:acme:error:badNonce :: JWS has an invalid anti-replay nonce: "SOMESTRINGREMOVEDFORPRIVACY2" Thank You ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [April 5, 2022, 11:54am UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/2 "2022-04-05T11:54:26Z")
How is your `_acme-challenge` dns record configured? Is it a CNAME? If so, does it end with a dot? ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [April 5, 2022, 6:53pm UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/3 "2022-04-05T18:53:42Z")
> [@postcd](#): > > badNonce This is your client messing up and I do not think a redirection can solve this. You need to tell us more. Right now you haven't even told us what OS is running on your server. ---
**Author:** ![postcd](https://avatars.discourse-cdn.com/v4/letter/p/85e7bf/32.png) [@postcd](https://community.letsencrypt.org/u/postcd)\ **Post date:** [April 6, 2022, 3:33pm UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/4 "2022-04-06T15:33:07Z")
DirectAdmin Linux Redhat Cloudlinux, i am not admin. /.well-known/acme-challenge/ was deleted and i re-created it again with 755 permission. Missing any file. I have asked how the DNS rec0rd should look like if is needed. ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [April 6, 2022, 3:40pm UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/5 "2022-04-06T15:40:34Z")
It's only needed during a dns-01 validation. Your acme client will tell you what is should look like. You should avoid using dns-01 validation if you don't need a wildcard. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [May 6, 2022, 3:40pm UTC](https://community.letsencrypt.org/t/acme-challenge-nxdomain-issue-cloudflare/175165/6 "2022-05-06T15:40:50Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.