Can't Register A Certificate For A Specific Domain

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: meijo.se

I ran this command: Using Nginx Proxy Manager, I'm pressing on "Save"

Screenshot at 2022-06-23 16-13-15

It produced this output:

Error: Command failed: certbot certonly --non-interactive --config "/etc/letsencrypt.ini" --cert-name "npm-96" --agree-tos --email "proxy-dc@zawack.ca" --preferred-challenges "dns,http" --domains "meijo.se" Saving debug log to /var/log/letsencrypt/letsencrypt.log Some challenges have failed. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. at ChildProcess.exithandler (node:child_process:326:12) at ChildProcess.emit (node:events:369:20) at maybeClose (node:internal/child_process:1067:16) at Process.ChildProcess._handle.onexit (node:internal/child_process:301:5)

My web server is (include version): I'm running Nginx Proxy Manager v2.9.4

The operating system my web server runs on is (include version): Ubuntu Server 20.04 LTS

My hosting provider, if applicable, is: Seflhosted.

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Nginx Proxy Manager v2.9.4

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Also I wish to add, creating certificates for sub domains also fails. However, it works for all my other domains.

Best regards,

Guillaume

2

It's not possible to literally get it from the outputs you've posted (the NPM error you've posted does literally tells us nothing except that it failed), but I think it's a DNS issue. Your domain is having serious DNSSEC issues. See meijo.se | DNSViz for example. When trying to resolve your domain with DNSSEC enabled resolvers, it will fail.

3 Likes
3

Yes, sometime we're not able to resolve this domain for certain networks.

May I please know how to fix this? I already contact my registrar and they say everything is okay on their side with the DNS records.

All my other domains are working just fine.

Thank-you

Guillaume

1 Like
4

Your own domain meijo.se itself does not have DNSSEC enabled, while the .se nameservers do have a DS resource record for meijo.se, which does mandate DNSSEC for that domain.

3 Likes
5

Is is possible to enable DNSSEC and if yes, how to.

Thank-you

Guillaume

EDIT

I'd send an email to my registrar asking they if this can be enabled.

2 Likes
6

That's probably the best step indeed.

5 Likes
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.