Certify Certificate Manager A and AAAA records error

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: isthompson.co.uk

I ran this command: Certify Certificate Manager SSL request

It produced this output:
2024-10-23 10:52:33.027 +01:00 [ERR] [Progress] Validation failed: isthompson.co.uk
Response from Certificate Authority: no valid A records found for isthompson.co.uk; no valid AAAA records found for isthompson.co.uk [BadRequest :: urn:ietf:params:acme:error:dns]
2024-10-23 10:52:33.033 +01:00 [ERR] Validation of the required challenges did not complete successfully. Validation failed: isthompson.co.uk
Response from Certificate Authority: no valid A records found for isthompson.co.uk; no valid AAAA records found for isthompson.co.uk [BadRequest :: urn:ietf:params:acme:error:dns]

My web server is (include version): Windows Server 2022

The operating system my web server runs on is (include version): Windows Server 2022

My hosting provider, if applicable, is: GoDaddy

I can login to a root shell on my machine (yes or no, or I don't know): I don't know

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Certify the web app.

I don't know what to put in my DNS table?

First you need to get your domain working, before worrying about getting a certificate. Is your site intended to be publicly available? The IP I currently see for isthompson.co.uk is 100.92.199.104, which is in Carrier-grade NAT shared address space (RFC 6598) and not routable on the public Internet.

6 Likes

As @petercooperjr suggests I think you want to update your DNS to point your A record to your servers public IP. Are you self hosting a windows server at home or business (in which case the public IP is the one your ISP gives you, and it needs to be static) or are you hosting your windows server with a cloud host like Microsoft Azure?

5 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.