An error occurred renewing certificates with Let's Encrypt:

[djdonniedeeza]

An error occurred renewing certificates with Let's Encrypt:

My domain is: shop.stonecountertops.co.za

I ran this command: sudo /opt/bitnami/bncert-tool

It produced this output: An error occurred renewing certificates with Let's Encrypt:

My web server is (include version):

The operating system my web server runs on is (include version): aws

My hosting provider, if applicable, is: lightsail

I can login to a root shell on my machine yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

/tmp/bncert-202406042201.log

[MikeMcQ]

If you could post the contents of /tmp/bncert-202406042201.log we might be able to help. There isn't a lot in your post for us to work with.

I'd first suggest reviewing the Troubleshooting section for the bncert tool here:
https://docs.bitnami.com/aws/how-to/understand-bncert/

[Bruce5051]

Here https://dnsviz.net/d/shop.stonecountertops.co.za/dnssec/ is showing some DNSSEC errors
and here Hardenize Report: shop.stonecountertops.co.za is showing DNS Zone errors.

[MikeMcQ]

Adding on to @Bruce5051 info ... with LightSail you probably shouldn't be using Cloudflare alongside the AWS Route53 / Lightsail DNS.

I don't know why https://unboundtest.com and Let's Debug test with Let's Encrypt Staging are even able to get consistent DNS results. But, they do.

So, maybe above are DNS issues are not related to your cert failure but still should be corrected

Will need to see that log I mentioned

Test result for shop.stonecountertops.co.za: OK

https://unboundtest.com/m/A/shop.stonecountertops.co.za/CTZADW6M

[djdonniedeeza]

@MikeMcQ

Learn about the Bitnami HTTPS Configuration Tool

/tmp/bncert-202406212210.log

[MikeMcQ]

That is just the name of the log file. You should either use the upload button to send it to this forum. Or, copy/paste the contents into a post.

I see you have improved your DNS. But, there are still errors. See pic below from dnsviz test. It is possible these DNS problems are your only problem. Or, you might have other problems too. In any case you should correct the DNS.

LightSail DNS was slightly different than Route53. I am not sure if it still is. If it is the same as Route53 then you need to make sure the 4 nameservers listed under "Hosted zone details" in the Route 53 console are the same ones listed at both your registrar, and in the NS record for your zone. (Refer to "Step 4" of the documentation for using Route 53 as your DNS .)