Certbot failed to authenticate some domains (authenticator: standalone)

[Osiris]

@MikeMcQ

I'd be curious to know what method they used to get the cert for api subdomain the last time. Something must be different in their configuration. I now see Apache replying to HTTP(port 80) requests so it can't be an ISP block.

I don't see an api subdomain on crt.sh nor does that subdomain resolve. I do however see an hr subdomain which has a different IP address (ending in 10 instead of 12) and has LiteSpeed listening.

I also see an Entrust wildcard (pre)certificate which could also be used I guess, so not sure why OP requires these LE certs to begin with.