Certificate generation failing. Error getting validation data

[tsr]

My domain is: connflex.xyz

I ran this command: sudo certbot --nginx -d connflex.xyz

It produced this output: Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Requesting a certificate for connflex.xyz
Performing the following challenges:
http-01 challenge for connflex.xyz
Waiting for verification...
Challenge failed for domain connflex.xyz
http-01 challenge for connflex.xyz
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: connflex.xyz
  Type: connection
  Detail: During secondary validation: 15.197.148.33: Fetching
  http://connflex.xyz/.well-known/acme-challenge/MiCq1aIPfkWnzgPzckN1eCvBuClEzjRM0-tSUKi8078:
  Error getting validation data

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address. Additionally, please check that
  your computer has a publicly routable IP address and that no
  firewalls are preventing the server from communicating with the
  client. If you're using the webroot plugin, you should also verify
  that you are serving files from the webroot path you provided.

My web server is (include version): nginx/1.12.2

The operating system my web server runs on is (include version): Amazon Linux 2

My hosting provider, if applicable, is: GoDaddy

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.11.0

when i manually try to create this test.txt file i am able to access it from the browser using http://connflex.xyz/.well-known/acme-challenge/test.txt

[griffin]

Welcome to the Let's Encrypt Community, @tsr!

Since this is a secondary validation failure, I advise simply trying again. If the problem persists, we can take a deeper look.

[aarongable]

When I test your site using Let's Debug, it appears that it is rejecting connections. Do you have a firewall which is blocking traffic from certain locations (such as "outside the united states")? If that might be the case, I suggest reading the Multi-Perspective Validation & Geoblocking FAQ .

[tsr]

There are no firewall rules blocking traffic from certain locations. i have 80 , 443 open to all.

[tsr]

I see this
The current status as reported by the Let's Encrypt status page is Service Disruption as at 2024-06-06 23:01:55.755 +0000 UTC. Depending on the reported problem, this may affect certificate issuance. For more information, please visit the status page. guessing this could be the issue

[schoen]

@tsr

guessing this could be the issue

I'm afraid it's not. If you visit that status page, you'll see

[Staging] OCSP Service Disruption

The outage is for the staging server's OCSP services, which aren't used at all in issuing your production certificate.

[Bruce5051]

@tsr

i have 80 , 443 open to all.

I would say there is some geo blocking
http://www.site24x7.com/tools/public/t/results-1717717199094.html

[tsr]

Thank You for information. I had a default A record (parked)from GoDaddy , i have deleted that record. issue is resolved .