# Can't renew certificate

**URL:** <https://community.letsencrypt.org/t/cant-renew-certificate/153818>\
**Category:** Help\
**Created:** [June 14, 2021, 4:30pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818 "2021-06-14T16:30:16Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![candym](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/candym/32/50394_2.png) [@candym](https://community.letsencrypt.org/u/candym)\
**Post date:** [June 14, 2021, 4:30pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/1 "2021-06-14T16:30:16Z")

</div>

I'm stuggling to renew my certficate as well via certbot

**ERROR:**

> Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:  
> Domain: [jmartinteam.com](http://jmartinteam.com)  
> Type: connection  
> Detail: Fetching [http://jmartinteam.com/.well-known/acme-challenge/hiddenforsecurity:](http://jmartinteam.com/.well-known/acme-challenge/hiddenforsecurity:) Timeout during connect (likely firewall problem)
> 
> Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
> 
> Some challenges have failed.

Domain: [jmartinteam.com](http://jmartinteam.com)  
Apahce on Ubuntu 16 xerial  
I can loggin via shell

---

<div class="post-metadata">

**Author:** ![candym](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/candym/32/50394_2.png) [@candym](https://community.letsencrypt.org/u/candym)\
**Post date:** [June 14, 2021, 4:40pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/2 "2021-06-14T16:40:18Z")

</div>

My domain is: [jmartinteam.com](http://jmartinteam.com)

**I ran this command:** certbot --apache

**It produced this output:**

> Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:  
> Domain: [jmartinteam.com](http://jmartinteam.com/)  
> Type: connection  
> Detail: Fetching [http://jmartinteam.com/.well-known/acme-challenge/hiddenforsecurity:](http://jmartinteam.com/.well-known/acme-challenge/hiddenforsecurity:) Timeout during connect (likely firewall problem)
> 
> Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
> 
> Some challenges have failed.

**Web Server:**  
Apache/2.4.18 (Ubuntu)

**Web Server OS:**  
Ubuntu 16.04.7 LTS (Xenial Xerus)

**My hosting provider:** N/A

**I can login to a root shell on my machine:** Yes

**I'm using a control panel to manage my site:** No

**The version of my client is:** Cerbot 1.16.0

---

<div class="post-metadata">

**Author:** ![candym](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/candym/32/50394_2.png) [@candym](https://community.letsencrypt.org/u/candym)\
**Post date:** [June 14, 2021, 4:45pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/3 "2021-06-14T16:45:28Z")

</div>

Same error with and with out the following lines in vhost config

```nohighlight
	RewriteEngine on
	RewriteRule ^\.well-known\/acme-challenge\/ - [L]

```

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [June 14, 2021, 4:53pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/4 "2021-06-14T16:53:32Z")

</div>

Welcome to the Let's Encrypt Community 🙂

Your port 80 appears to be closed. It could be being filtered by a firewall.

You can see the closed port 80 here:

[https://www.yougetsignal.com/tools/open-ports/](https://www.yougetsignal.com/tools/open-ports/)

> **[Test result for jmartinteam.com: Error](https://letsdebug.net/jmartinteam.com/565340)**
>
> 2 unique issue(s) detected (ANotWorking, IssueFromLetsEncrypt)

> **[Best Practice - Keep Port 80 Open - Let's Encrypt](https://letsencrypt.org/docs/allow-port-80/)**
>
> We occasionally get reports from people who have trouble using the HTTP-01 challenge type because they’ve firewalled off port 80 to their web server. Our recommendation is that all servers meant for general web use should offer both HTTP on...

---

<div class="post-metadata">

**Author:** ![candym](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/candym/32/50394_2.png) [@candym](https://community.letsencrypt.org/u/candym)\
**Post date:** [June 14, 2021, 6:09pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/5 "2021-06-14T18:09:21Z")

</div>

Opening port 80 fixed it. Thanks!

---

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [June 14, 2021, 6:10pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/6 "2021-06-14T18:10:32Z")

</div>

You're quite welcome! 😊

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [July 14, 2021, 7:28pm UTC](https://community.letsencrypt.org/t/cant-renew-certificate/153818/7 "2021-07-14T19:28:07Z")

</div>

Closed on July 14, 2021, 7:28pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.