# Cant generate ssl **URL:** \ **Category:** Help\ **Created:** [November 1, 2020, 2:28pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307 "2020-11-01T14:28:00Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![TheStupidUglyBoy](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/thestupiduglyboy/32/44140_2.png) [@TheStupidUglyBoy](https://community.letsencrypt.org/u/TheStupidUglyBoy)\ **Post date:** [November 1, 2020, 2:28pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/1 "2020-11-01T14:28:00Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: **lju65i.online** I ran this command:sudo /usr/local/bin/certbot-auto certonly --dry-run --agree-tos --email admin@lju65i.online --webroot -w /var/lib/letsencrypt/ -d lju65i.online -d www.lju65i.online It produced this output:Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for lju65i.online http-01 challenge for www.lju65i.online Using the webroot path /var/lib/letsencrypt for all unmatched domains. Waiting for verification... Challenge failed for domain lju65i.online Challenge failed for domain www.lju65i.online http-01 challenge for lju65i.online http-01 challenge for www.lju65i.online Cleaning up challenges Some challenges have failed. IMPORTANT NOTES: - The following errors were reported by the server: My web server is (include version): centos 8 The operating system my web server runs on is (include version): centos 8 My hosting provider, if applicable, is: digitalocean I can login to a root shell on my machine (yes or no, or I don't know): yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): both DNS are properly point to my server ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [November 1, 2020, 2:31pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/2 "2020-11-01T14:31:12Z")
> [@TheStupidUglyBoy](#): > > -w /var/lib/letsencrypt/ I'm _pretty_ sure that path is _not_ the webroot of your site. ---
**Author:** ![TheStupidUglyBoy](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/thestupiduglyboy/32/44140_2.png) [@TheStupidUglyBoy](https://community.letsencrypt.org/u/TheStupidUglyBoy)\ **Post date:** [November 1, 2020, 2:35pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/3 "2020-11-01T14:35:14Z")
> [@TheStupidUglyBoy](#): > > /usr/local/bin/certbot-aut hi this supposed to which path ? ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [November 1, 2020, 2:37pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/4 "2020-11-01T14:37:17Z")
I'm afraid I don't understand the question. The path you're quoting is the path of the certbot-auto script. The path _I'm_ quoting, is the webroot path. These are two very different things. ---
**Author:** ![TheStupidUglyBoy](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/thestupiduglyboy/32/44140_2.png) [@TheStupidUglyBoy](https://community.letsencrypt.org/u/TheStupidUglyBoy)\ **Post date:** [November 1, 2020, 2:38pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/5 "2020-11-01T14:38:52Z")
i follow this tutorial > **[Secure Nginx with Let's Encrypt on CentOS 8](https://linuxize.com/post/secure-nginx-with-let-s-encrypt-on-centos-8/#installing-certbot)** > > In this tutorial, we'll provide a step by step instructions about how to install a free Let's Encrypt SSL certificate on CentOS 8 running Nginx as a web server. We’ll also show how to configure Nginx to use the SSL certificate and enable HTTP/2. encounter error when obtaining the certificate ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [November 1, 2020, 2:42pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/6 "2020-11-01T14:42:56Z")
What's the complete output of `nginx -T`? Please place three backticks (```) above and below the output, so the forum software can format it properly. ---
**Author:** ![TheStupidUglyBoy](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/thestupiduglyboy/32/44140_2.png) [@TheStupidUglyBoy](https://community.letsencrypt.org/u/TheStupidUglyBoy)\ **Post date:** [November 1, 2020, 2:52pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/7 "2020-11-01T14:52:15Z")
hey thanks for the reply I had solved it because all my www.subomian no dns , so I exclude the those domains.and it works (bow) ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [November 1, 2020, 2:54pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/8 "2020-11-01T14:54:08Z")
> [@TheStupidUglyBoy](#): > > because all my www.subomian no dns , so I exclude the those domains.and it works (bow) Your `www` subdomain is a CNAME for `lju65i.online`. It looks like there isn't any DNS issue for your `www` subdomain. Also, your hostname `lju65i.online` _without_ the `www` subdomain gave a 404 file not found error.. But hey, if you got things working and you're happy, I'm happy 🙂 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [December 1, 2020, 2:54pm UTC](https://community.letsencrypt.org/t/cant-generate-ssl/137307/9 "2020-12-01T14:54:12Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.