Authorization fails

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: www.petureperfect.com

I ran this command: wacs.exe n,1,34(www.petureperfect.com)

It produced this output:

[INFO] A simple Windows ACMEv2 client (WACS)
[INFO] Software version 200.0.6965.40688 (RELEASE)
[INFO] IIS version 8.5
[INFO] Please report issues at https://github.com/PKISharp/win-acme

N: Create new certificate
M: Create new certificate with advanced options
L: List scheduled renewals
R: Renew scheduled
S: Renew specific
A: Renew all
C: Cancel scheduled renewal
X: Cancel all scheduled renewals
T: (Re)create scheduled task
I: Import scheduled renewals from WACS/LEWS 1.9.x
Q: Quit

Please choose from the menu: n

[INFO] Running in mode: Interactive, Simple

1: Single binding of an IIS site
2: SAN certificate for all bindings of an IIS site
3: SAN certificate for all bindings of multiple IIS sites
4: Manually input host names
C: Cancel

Which kind of certificate would you like to create?: 1

1: xxxxx
2: xxxxx.co.uk (SiteId 15)
3: xxxxx.co.uk (SiteId 46)
4: xxxxx.com (SiteId 16)
5: dev.xxxxx.com (SiteId 36)
6: dev.xxxxx.com (SiteId 44)
7: xxxxx.co.uk (SiteId 19)
8: xxxxx.org.uk (SiteId 39)
9: xxxxx.co.uk (SiteId 45)
10: xxxxx.com (SiteId 45)
11: xxxxx.co.uk (SiteId 10)
12: xxxxx.co.uk (SiteId 28)
13: xxxxx.com (SiteId 25)
14: newdev.xxxxx.com (SiteId 38)
15: office.xxxxx.org (SiteId 42)
16: office.xxxxx.com (SiteId 41)
17: petureperfect.com (SiteId 47)
18: xxxxx.com (SiteId 9)
19: xxxxx.com (SiteId 26)
20: the-xxxxx.info (SiteId 29)
21: www.xxxxxco.uk (SiteId 14)
22: www.xxxxx.co.uk (SiteId 15)
23: www.xxxxx.co.uk (SiteId 46)
24: www.xxxxx.com (SiteId 16)
25: www.xxxxx.com (SiteId 22)
26: www.xxxxx.co.uk (SiteId 19)
27: www.xxxxx.org.uk (SiteId 39)
28: www.xxxxx.co.uk (SiteId 45)
29: www.xxxxx.com (SiteId 45)
30: www.xxxxx.co.uk (SiteId 10)
31: www.xxxxx.org (SiteId 43)
32: www.xxxxx.co.uk (SiteId 28)
33: www.xxxxx.com (SiteId 25)
34: www.petureperfect.com (SiteId 47)
35: www.xxxxx.com (SiteId 9)
36: www.xxxxx.com (SiteId 26)
37: www.xxxxx.com (SiteId 7)
38: www.the-xxxxx.info (SiteId 29)
C: Cancel

Choose binding: 34

[INFO] Target generated using plugin IISBinding: www.petureperfect.com
[INFO] Authorize identifier: www.petureperfect.com
[INFO] Authorizing www.petureperfect.com using http-01 validation (SelfHosting)

[EROR] Authorization result: invalid
[EROR] Create certificate failed: Authorization failed

N: Create new certificate
M: Create new certificate with advanced options
L: List scheduled renewals
R: Renew scheduled
S: Renew specific
A: Renew all
C: Cancel scheduled renewal
X: Cancel all scheduled renewals
T: (Re)create scheduled task
I: Import scheduled renewals from WACS/LEWS 1.9.x
Q: Quit

Please choose from the menu: n

I have created a few certificates and this is the first to fail.

2

Hi @pzh20

that can't work.

Checking your DNS there is no A- or AAAA - record ( https://check-your-website.server-daten.de/?q=petureperfect.com ):

Host T IP-Address is auth. ∑ Queries ∑ Timeout
petureperfect.com A yes 2 0
AAAA yes
www.petureperfect.com Name Error yes 1 0

If you want to create a certificate, an A- or AAAA record

your domain name -> ip address of your server

is required.

Not only a local website with that domain name.

1 Like
3

Thanks for this, it turns out my hosting company had a problem when registering this domain and set the dns incorrectly. So it was all their fault.

Thanks agani
Pete

2 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.