Cert won't renew but port 80 is open

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: patron.agritrails.com

I ran this command: wacs.exe (option R and option A)

It produced this output: 1: [IIS] patron.agritrails.com | patron* - renewed 17 times, due now, 46 errors like "{
"type": "urn:ietf:params:acme:error:connection",
"detail": "During secondary validation: 66.213.181.70: Fetching http://patron.agritrails.com/.well-known/acme-challenge/F8BB2XIFErtKe-BL3usb9Ou3UWOo0LJaHM4UeLWhA04: Timeout during connect (likely firewall problem)",
"status": 400
}"

My web server is (include version): IIS 10

The operating system my web server runs on is (include version): Server 2019

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot is not a recognized command

Port 80 shows open in nmap, and I can get to the website via http, so I am not sure what is keeping the renewal from validating

2

Hello @stucker, welcome to the Let's Encrypt community. :slightly_smiling_face:

Let's Encrypt uses Multi-Perspective Validation Improves Domain Validation Security - Let's Encrypt

4 Likes
3

Well, that error message shows that not everywhere can get to your website via http. It looks like it's only accessible from the US.

5 Likes
4
2 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.