Certbot failed to authenticate some domains

my configaration is

server {
    server_name lgcglobalcontractingltd.com www.lgcglobalcontractingltd.com;

    location /.well-known/acme-challenge/ {
        root /var/www/letsencrypt;
        default_type text/plain;
}

    location / {
        root /var/www/jesus/dist;
        try_files $uri $uri/ /index.html;
    }

}

i am getting this error while trying to get the ssl
root@lgcglobalcontractingltd:/etc/nginx/sites-enabled# certbot --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Which names would you like to activate HTTPS for?
We recommend selecting either all domains, or all domains in a VirtualHost/server block.


1: lgcglobalcontractingltd.com
2: www.lgcglobalcontractingltd.com


Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):
Requesting a certificate for lgcglobalcontractingltd.com and www.lgcglobalcontractingltd.com

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: lgcglobalcontractingltd.com
Type: unauthorized
Detail: 2a02:4780:b:1270:0:275c:ee6c:5: Invalid response from Lgc Global Contracting Ltd 404

Domain: www.lgcglobalcontractingltd.com
Type: unauthorized
Detail: 2a02:4780:b:1270:0:275c:ee6c:5: Invalid response from http://www.lgcglobalcontractingltd.com/.well-known/acme-challenge/d8wgKg6e5lckOlKtBBIosTU_qcMFzloPpkuoCF_fffs: 404

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

Since your post you removed the AAAA record for IPv6. Are you still having problems? If so please post the error you get now.

You should add listen statement to your server block as it defaults to IPv4 only

3 Likes