Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: ncop.tech

I ran this command: certbot certonly --nginx -d ncop.tech

It produced this output:Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: ncop.tech
Type: dns
Detail: DNS problem: SERVFAIL looking up A for ncop.tech - the domain's nameservers may be malfunctioning; DNS problem: SERVFAIL looking up AAAA for ncop.tech - the domain's nameservers may be malfunctioning

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

The operating system my web server runs on is (include version):ubuntu 22

My hosting provider, if applicable, is: ovh

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.21.0

2

I think you can try again.

2 Likes
3

DNS seems fine now; however I find this that Port 443 is closed.

$ nmap -Pn -p80,443 ncop.tech
Starting Nmap 7.94SVN ( https://nmap.org ) at 2023-12-23 13:10 PST
Nmap scan report for ncop.tech (54.36.163.205)
Host is up (0.15s latency).
rDNS record for 54.36.163.205: vps-ac9debea.vps.ovh.net

PORT    STATE  SERVICE
80/tcp  open   http
443/tcp closed https

Nmap done: 1 IP address (1 host up) scanned in 0.53 seconds

From around the world tests with this tool https://check-host.net/ yields of "Connection refused"
Permanent link to this check report

2 Likes
4

Looks like you successfully got a certificate issued https://decoder.link/sslchecker/ncop.tech/443
on "Not Before: Dec 24, 2023 12:05:06 GMT".

2 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.