Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com ), so withholding your domain name here does not increase secr…

[image] dburdick: During secondary validation: 173.72.165.146: Fetching http://stitchedblessings.burdicks.net/.well-known/acme-challenge/koiKNKLutVLYOZyogveXGdI2YBBjCLX369msVW6Uw0M: Timeout during connect (likely firewall problem) Do you have some GeoBlocking going on? Also see Multi-Perspec…

Thank you Bruce. You're brilliant :slight_smile: That was exactly it. I enabled GeoBlocking because I was getting slammed by requests coming from some countries. Does Let's Encrypt operate out of a country I can allow?

Read that FAQ that was linked. You can identify validation traffic by URL to allow it, but Let's Encrypt has to confirm that the request controls the name worldwide (because the certificate is valid to use worldwide).

Thank you, Peter. I understand their stance. I think I'll just write myself a note to disable the Geoblocking when I need to renew my certificate.

[image] dburdick: I think I'll just write myself a note to disable the Geoblocking when I need to renew my certificate. Certbot has --pre-hook and --post-hook options to run a script before and after. If your firewall has an API this could automate that.

Note that you might not know just based on the calendar when you need to renew. If Let's Encrypt messes some technical procedure up when issuing certificates, they may need to revoke those and reissue new ones. Newer versions of Certbot will run a couple times a day and will use ARI to know if they …

Certificate Expired, now I can't create a new one

Help

Bruce5051 May 1, 2026, 12:54am 2

Do you have some GeoBlocking going on?

Also see Multi-Perspective Validation & Geoblocking FAQ

Topic		Replies	Views
Cannot renew certificate Help	4	172	October 21, 2024
The certificate has expired: that is the notAfter date is before the current time Help	4	520	June 1, 2024
Hello - Unable to create ssl cert after expiration Help	2	126	August 19, 2024
Certificate renew stopped working Help	6	2368	March 20, 2020
Access log shows file correctly accessed, but I am getting error during secondary validation for subdomain Help	6	401	December 22, 2023

Certificate Expired, now I can't create a new one

Related topics