I have tried to add a new domain to my server (Debian VPS), the authentification said it failed, but I have a working certificate that works when configured in Apache manually. I ran Certbot run initially and then have run certbot renew --dry-run to test. Attempting to renew cert from /etc/letsenc…

This is most likely an IPv4/IPv6 issue. But without the domain name there is now way to be sure. My best guess is… Try resolving your domain with global DNS system. If they return IPv6 addresses, then you must either: ensure IPv6 is supported on your system or remove the IPv6 IP form DNS.

I have a post about the most common reasons for this problem at [image] Incorrect validation certificate for challenge Help Q…

@rg305 , even though IPv6 issues have been quite an epidemic recently, I don’t think they’re likely to blame here because the resolved IP address was 130.255.76.83—a working IPv4 address.

@rg305 , @schoen The domains are preopmadesimple.com and legendshockeycamps.com (with www equivalents). Preopmadesimple.com was set up first, I was trying to add the other. But now, when I try to add domains it says first certificate had names legendshockeycamps.co.uk … The DNS is all okay I am m…

[image] danclayton: The DNS is all okay I am mostly sure. legendshockeycamps.com : Non-existent domain www.legendshockeycamps.com : Non-existent domain Can you elaborate on [quote="danclayton, post:5, topic:35821"] But now, when I try to add domains it says first certificate had names legend…

@rg305 Many apologies, I meant legendshockeycamps.co.uk The certificates are functioning currently, however, the error trace above shows the result of: certbot renew --dry-run

Not sure why but the request on that IP using SNI returns the correct cert: subject=/CN= www.preopmadesimple.com issuer=/C=US/O=Let’s Encrypt/CN=Let’s Encrypt Authority X3 However, without SNI it does return the cert shown in the error message above: subject=/CN= www.legendshockeycamps.co.uk issu…

Certbot run - Incorrect validation certificate for tls-sni-01 challenge

Server

schoen June 9, 2017, 6:31pm 3

I have a post about the most common reasons for this problem at

Topic		Replies	Views
Certbot - Expected Certificate different from what presented - TLS-SNI challenge Help	3	1269	June 12, 2017
Incorrect validation certificate for tls-sni-01 challenge. Why? Help	1	2026	July 21, 2017
[Issue] Incorrect validation certificate for tls-sni-01 challenge Help	7	2730	September 22, 2017
Certbot TLS-SNI-01 : Not able to renew certificates Help	14	3929	July 25, 2017
New server, same domain name - Incorrect validation certificate for tls-sni-01 challenge Help	1	1225	June 5, 2017

Certbot run - Incorrect validation certificate for tls-sni-01 challenge

Related topics