# Connection error using CertBot

**URL:** <https://community.letsencrypt.org/t/connection-error-using-certbot/121251>\
**Category:** Help\
**Created:** [April 30, 2020, 5:31pm UTC](https://community.letsencrypt.org/t/connection-error-using-certbot/121251 "2020-04-30T17:31:26Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![jderham](https://avatars.discourse-cdn.com/v4/letter/j/f6c823/32.png) [@jderham](https://community.letsencrypt.org/u/jderham)\
**Post date:** [April 30, 2020, 5:31pm UTC](https://community.letsencrypt.org/t/connection-error-using-certbot/121251/1 "2020-04-30T17:31:26Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:  
[jmdok.chickenkiller.com](http://jmdok.chickenkiller.com)

I ran this command:  
sudo sudo certbot --apache --staging -d [jmdok.chickenkiller.com](http://jmdok.chickenkiller.com)

It produced this output:  
Domain: [jmdok.chickenkiller.com](http://jmdok.chickenkiller.com)  
Type: connection  
Detail: Fetching  
[http://jmdok.chickenkiller.com/.well-known/acme-challenge/4dw40XKQMO28wdIp-\_pc2yE1jlWJSqKIW5K7aYJwefs:](http://jmdok.chickenkiller.com/.well-known/acme-challenge/4dw40XKQMO28wdIp-_pc2yE1jlWJSqKIW5K7aYJwefs:)  
Timeout during connect (likely firewall problem)

My web server is (include version):  
Apache

The operating system my web server runs on is (include version):  
Ubuntu 18.04 LTS

My hosting provider, if applicable, is:  
N/A

I can login to a root shell on my machine (yes or no, or I don’t know): YES

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):  
No

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):  
certbot 0.31.0

I am running wireshark on my target machine and I see no requests coming in when running certbot. However, when I put [http://jmdok.chickenkiller.com](http://jmdok.chickenkiller.com) into a browser on another machine, I do see requests coming in and I get the apache front page. When I enter the URL that certbot is reporting, I got a Not Found response. It just seems like there is no connection coming from the certbot side.

I also tried [LetsDebug.net](http://LetsDebug.net) and it too reported a failure to connect, and again I saw no messages in wireshark. The IP address in the log was correct, 24.115.193.85.

I got rate-limited running certbot, so I know my connections going out are working and certbot is trying to do it’s thing.

I am not sure where to look next. Do I need to open up any other ports on my firewall? Right now, I only have port 80 open.

Thanks for any advice.

Best Regards,  
Joe

---

_[View the full topic](https://community.letsencrypt.org/t/connection-error-using-certbot/121251)._