Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:safmobile.nairobiwater.co.ke
I ran this command: /usr/bin/certbot certonly --webroot --webroot-path /opt/glassfish4/glassfish/domains/domain1/docroot --cert-name safmobile.nairobiwater.co.ke -d safmobile.nairobiwater.co.ke
It produced this output:
"identifier": {
"type": "dns",
"value": "safmobile.nairobiwater.co.ke"
},
"status": "invalid",
"expires": "2025-05-02T13:30:36Z",
"challenges": [
{
"type": "http-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall/2361737297/510944684527/L_JKBQ",
"status": "invalid",
"validated": "2025-04-25T13:30:37Z",
"error": {
"type": "urn:ietf:params:acme:error:dns",
"detail": "DNS problem: NXDOMAIN looking up A for safmobile.nairobiwater.co.ke - check that a DNS record exists for this dom>
"status": 400
},
"token": "s8rGA-KHR7OaczETY2sWXSMuPJIO3yRjDgwS9OEfoAk"
}
]
}
2025-04-25 16:30:41,762:DEBUG:acme.client:Storing nonce: q507sl7m-9Z0M1wEnbbUBDfSfOT5Owld_IgBconRkoDDG-Uf2lc
2025-04-25 16:30:41,762:INFO:certbot._internal.auth_handler:Challenge failed for domain safmobile.nairobiwater.co.ke
2025-04-25 16:30:41,763:INFO:certbot._internal.auth_handler:http-01 challenge for safmobile.nairobiwater.co.ke
2025-04-25 16:30:41,763:DEBUG:certbot._internal.display.obj:Notifying user:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Remote side unexpectedly closed network connection
My web server is (include version): glassfish 4.1.1
The operating system my web server runs on is (include version):ubuntu 20.04
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 4.0.0