Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: xyz.net
I ran this command:
docker run --rm -v /tmp/letsencrypt:/etc/letsencrypt -e AWS_ACCESS_KEY_ID=XXXX -e
AWS_SECRET_ACCESS_KEY=XXXX certbot/dns-route53:v1.10.1 certonly --agree-tos --
register-unsafely-without-email --dns-route53 --dns-route53-propagation-seconds 60 -d “ .xyz.net” -d “ .sub1.xyz.net” -d “*.sub2.sub1.xyz.net”
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Found credentials in environment variables.
Plugins selected: Authenticator dns-route53, Installer None
Account registered.
Requesting a certificate for *.xyz.net and 2 more domains
Performing the following challenges:
dns-01 challenge for xyz.net
dns-01 challenge for sub1.xyz.net
dns-01 challenge for sub2.sub1.xyz.net
Waiting for verification...
Challenge failed for domain sub1.xyz.net
Challenge failed for domain sub2.sub1.xyz.net
dns-01 challenge for sub1.xyz.net
dns-01 challenge for sub2.sub1.xyz.net
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
- The following errors were reported by the server:Domain: sub1.xyz.net
Type: dns
Detail: DNS problem: NXDOMAIN looking up TXT for
_acme-challenge.sub1.xyz.net - check that a DNS record exists
for this domainDomain: sub2.sub1.xyz.net
Type: dns
Detail: DNS problem: NXDOMAIN looking up TXT for
_acme-challenge.sub2.sub1.xyz.net - check that a DNS record
exists for this domain
My web server is (include version): nil
The operating system my web server runs on is (include version): nil
My hosting provider, if applicable, is: aws
I can login to a root shell on my machine (yes or no, or I don't know): N/A just need cert
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): n/a
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): i am using docker certbot/dns-route53:v1.10.1