Certificate failed to Renew

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
cxmcm.no-ip.org
I ran this command:
renew certificate
It produced this output:
Let's Encrypt is unable to validate this domain name. Please make sure your DiskStation and router have port 80 open to Let;s Encrypt domain validation from the internet. All other communications with Let's Encrypt go over HTTPS to keep your DiskStation secure.

I validated I can access it via port 80. Does lets encrypts connection come from the US?

My web server is (include version):

The operating system my web server runs on is (include version):
Synology DSM 7.1
My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

That name doesn't seem to resolve to any IPs right now.

The connections come from multiple places around the world, some of which are in the US.

5 Likes

I changed my firewall momentarily to allow non US connections and it worked. Should check US addresses from US locations. I have no need to allow foreign connections into my site.

That may be, but Let's Encrypt's certificates are valid worldwide, so they have to ensure that you control the domain name as seen from multiple places worldwide.

You may want to read this:

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.