Certbot failed to authenticate some domains (authenticator: standalone)

My domain is: ainashemmy.xyz

I ran this command: sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
sudo certbot certonly --standalone -d $fqn. --non-interactive --agree-tos -m $email
sudo chown -R $USER:$USER /etc/letsencrypt/

It produced this output: sudo chown -R $USER:$USER /etc/letsencrypt/Saving debug log to /var/log/letsencrypt/letsencrypt.log

Requesting a certificate for ainashemmy.xyz

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: ainashemmy.xyz
Type: connection
Detail: Fetching http://ainashemmy.xyz/.well-known/acme-challenge/vLah2bY9MUMykYbzaqzEiJfiRsqQNg46oJdl4WZ5nbE: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 2.8.0

TCP port 80 needs to be open. Currently there is no connectivity on TCP port 80 on that IP address, probably a firewall as mentioned in the error message. Sometimes a NAT portmap is missing, depending on the situation.


thank you. how can i go about it tho.

1 Like

We need to know more about your hosting setup and what you plan to use the cert for.

For example, are you using Contabo hosting and if so what kind of server account

And, do you plan to use the cert with a server like Apache or nginx or similar? If not, what service will the cert be for?


yes. am using contabo VPS to run node. Am a newbie with this so i dont really understand the "Apache or nginx"

Following a guide on how to run the node but i get stuck there. Thats why am here. Help

We are not a general purpose help site for server configuration.

You may need to contact whoever provided that guide.

I see you have port 22 open. You also need to have port 80 available for Certbot --standalone to work. If you don't know what port 80 is you should ask Contabo support.


okay. will do that. thank you for your time


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.