# Adding Letsencrypt SSL certificate

**URL:** <https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907>\
**Category:** Help\
**Created:** [August 29, 2019, 7:50am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907 "2019-08-29T07:50:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Simboti](https://avatars.discourse-cdn.com/v4/letter/s/45deac/32.png) [@Simboti](https://community.letsencrypt.org/u/Simboti)\
**Post date:** [August 29, 2019, 7:50am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907/1 "2019-08-29T07:50:05Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: simboti.co.za

I ran this command: sudo certbot -d $DOMAIN -d $WILDCARD --manual --preferred-challenges dns c  
ertonly  
and I did the \_acme-challenge  
and added the TXT files

It produced this output:  
Waiting for verification…  
Resetting dropped connection: [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)  
Cleaning up challenges  
Failed authorization procedure. simboti.co.za (dns-01): urn:ietf:params:acme:error:dns :: DNS proble  
m: NXDOMAIN looking up TXT for \_acme-challenge.simboti.co.za, simboti.co.za (dns-01): urn:ietf:param  
s:acme:error:dns :: DNS problem: NXDOMAIN looking up TXT for \_acme-challenge.simboti.co.za

IMPORTANT NOTES:

- The following errors were reported by the server:

My web server is (include version): aws lightsail

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [August 29, 2019, 8:03am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907/2 "2019-08-29T08:03:40Z")

</div>

Hi @Simboti

> [@Simboti](#):
>
> Failed authorization procedure. simboti.co.za (dns-01): urn:ietf:params:acme:error:dns :: DNS proble  
> m: NXDOMAIN looking up TXT for \_acme-challenge.simboti.co.za, simboti.co.za (dns-01): urn:ietf:param  
> s:acme:error:dns :: DNS problem: NXDOMAIN looking up TXT for \_acme-challenge.simboti.co.za

looks like you have created the wrong entry ( [https://check-your-website.server-daten.de/?q=simboti.co.za#txt](https://check-your-website.server-daten.de/?q=simboti.co.za#txt) ):

 ![za](https://global.discourse-cdn.com/letsencrypt/original/3X/f/3/f39cb17014cb80bb5e6f0a0127396b4663902896.png)

`_acme-challenge.www.simboti.co.za` looks good. But that's the name you need to create a certificate with `www.simboti.co.za` as domain name.

If you want to create a wildcard certificate with the main domain, you need two entries with

```nohighlight
_acme-challenge.simboti.co.za

```

as domain name. There is nothing.

---

<div class="post-metadata">

**Author:** ![Simboti](https://avatars.discourse-cdn.com/v4/letter/s/45deac/32.png) [@Simboti](https://community.letsencrypt.org/u/Simboti)\
**Post date:** [August 29, 2019, 8:34am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907/3 "2019-08-29T08:34:56Z")

</div>

I ave created two TXT RECORD with the correct values for the challenge, but it still gives me the error

Press Enter to Continue  
Waiting for verification…  
Resetting dropped connection: [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)  
Cleaning up challenges  
Failed authorization procedure. simboti.co.za (dns-01): urn:ietf:params:acm  
e:error:dns :: DNS problem: NXDOMAIN looking up TXT for \_acme-challenge.sim  
boti.co.za, simboti.co.za (dns-01): urn:ietf:params:acme:error:dns :: DNS p  
roblem: NXDOMAIN looking up TXT for \_acme-challenge.simboti.co.za

IMPORTANT NOTES:

- The following errors were reported by the server:

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [August 29, 2019, 9:31am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907/4 "2019-08-29T09:31:14Z")

</div>

> [@Simboti](#):
>
> I ave created two TXT RECORD with the correct values for the challenge, but it still gives me the error

Then use the online tool to check, if both values are visible. If not, you're doing something wrong. Perhaps share a screenshot of your menu.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [September 28, 2019, 9:31am UTC](https://community.letsencrypt.org/t/adding-letsencrypt-ssl-certificate/100907/5 "2019-09-28T09:31:16Z")

</div>

Closed on September 28, 2019, 9:31am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.