Could not issue an SSL/TLS certificate for domain.com Details Could not issue a Let's Encrypt SSL/TLS certificate for domain.com. Authorization for the domain failed

Help
21

At these moments i have this entries in my goddady:

|A|@|54.225.75.68|
|A|*|54.225.75.68|
|A|ipv4.visyon-hub.com|54.225.75.68|
|A|mail.visyon-hub.com|54.225.75.68|
|A|ns59.domaincontrol.com|54.225.75.68|
|A|webmail|54.225.75.68|
|A|webmail.visyon-hub.com|54.225.75.68|
|CNAME|www|@|
|CNAME|_domainconnect|_domainconnect.gd.domaincontrol.com|
|NS|@|ns59.domaincontrol.com|
|NS|@|ns60.domaincontrol.com|
|NS|visyon-hub.com|ns1.visyon-hub.com|
|NS|visyon-hub.com|ns2.visyon-hub.com|
|SOA|@|Nombre del servidor principal: ns59.domaincontrol.com.|
|TXT|_acme-challenge.visyon-hub.com|nvFgUPei63AzslCCZY5RsFqYXXw1YEmxtIZFz|

Is it correct?

And the error is:

Started issuing a wildcard SSL/TLS certificate from Let's Encrypt for the domain visyon-hub.com.

Please wait while Plesk finishes adding a DNS record with the following parameters:
Record type: TXT
Domain name: _acme-challenge .visyon-hub.com
Record: R0olWlLEYTml59g--e3HMEvy-Of8Q3JhFBe-zz8NJjM

To terminate and delete the existing certificate request, click "Cancel".

Before clicking "Reload", make sure that the DNS record was added and can be resolved externally.

22

Not needed - remove.

23

inaccurate - remove them

24

outdated/expired - remove/replace with current TXT record

25
26

I have removed and replace it, is this correct?

|A|@|54.225.75.68|
|A|*|54.225.75.68|
|A|ipv4.visyon-hub.com|54.225.75.68|
|A|mail.visyon-hub.com|54.225.75.68|
|A|webmail|54.225.75.68|
|A|webmail.visyon-hub.com|54.225.75.68|
|CNAME|www|@|
|CNAME|_domainconnect|_domainconnect.gd.domaincontrol.com|
|NS|@|ns59.domaincontrol.com|
|NS|@|ns60.domaincontrol.com|
|SOA|@|Nombre del servidor principal: ns59.domaincontrol.com.|
|TXT|_acme-challenge.visyon-hub.com|R0olWlLEYTml59g--e3HMEvy-Of8Q3JhFBe-zz8NJjM|

27

That may also now be outdated.
You need to run the cert request and it will show you a new TXT record.
pause there and add the record to your DNS
then confirm the record shows in both DNS servers (ns59 and ns60)
then continue the cert request

28
  • I reissue the certificate, then verify and add the DNS registry in goddady:

Started issuing a wildcard SSL/TLS certificate from Let's Encrypt for the domain visyon-hub.com.

Please wait while Plesk finishes adding a DNS record with the following parameters:
Record type: TXT
Domain name: _acme-challenge .visyon-hub.com
Record: -RFxkwOjLq_arWeRoA91F9KvLRoBXlPzUQlGjy_H37U

To terminate and delete the existing certificate request, click "Cancel".

Before clicking "Reload", make sure that the DNS record was added and can be resolved externally.

  • DNS Goddady:
    |A|@|54.225.75.68|
    | --- | --- | --- | --- | --- |
    |A|*|54.225.75.68|
    |A|ipv4.visyon-hub.com|54.225.75.68|
    |A|mail.visyon-hub.com|54.225.75.68|
    |A|webmail|54.225.75.68|
    |A|webmail.visyon-hub.com|54.225.75.68|
    |CNAME|www|@|
    |CNAME|_domainconnect|_domainconnect.gd.domaincontrol.com|
    |NS|@|ns59.domaincontrol.com|
    |NS|@|ns60.domaincontrol.com|
    |SOA|@|Nombre del servidor principal: ns59.domaincontrol.com.|
    |TXT|_acme-challenge.visyon-hub.com| -RFxkwOjLq_arWeRoA91F9KvLRoBXlPzUQlGjy_H37U**|

  • DNS Plesk:

mail.visyon-hub.com. A 54.225.75.68
webmail.visyon-hub.com. A 54.225.75.68
ns2.visyon-hub.com. A 54.225.75.68
ns1.visyon-hub.com. A 54.225.75.68
ipv4.visyon-hub.com. A 54.225.75.68
visyon-hub.com. A 54.225.75.68
ftp.visyon-hub.com. CNAME visyon-hub.com.
www.visyon-hub.com. CNAME visyon-hub.com.
visyon-hub.com. MX (10) mail.visyon-hub.com.
visyon-hub.com. NS ns2.visyon-hub.com.
visyon-hub.com. NS ns1.visyon-hub.com.
_domainkey.visyon-hub.com. TXT o=-
_dmarc.visyon-hub.com. TXT v=DMARC1; p=none
default._domainkey.visyon-hub.com. TXT v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEmPpzJDsJmQfggbHqGeers2HCa2IbJsgBfywnPwI6j8NP9XWFwv225/ikEVNgA+8/hoC90QBN5FJYlJ0ycbrqbQDvQmdm0Z3dz7DT88yxH5tAmfO+UCISrcIeZJbxyU/iI0txSFwyLzhVwkL5p+1puaEj7FmnYu4rNa2kpa6lwQIDAQAB;
visyon-hub.com. TXT v=spf1 +a +mx +a:plesk.visyonapps.com -all
_domainconnect.visyon-hub.com. TXT domainconnect.plesk.com/host/plesk.visyonapps.com/port/8443
_acme-challenge.visyon-hub.com. TXT -RFxkwOjLq_arWeRoA91F9KvLRoBXlPzUQlGjy_H37U
  • How i can confirm the record shows in both DNS servers (ns59 and ns60)?

screen

29 
nslookup -q=txt _acme-challenge.visyon-hub.com ns59.domaincontrol.com
nslookup -q=txt _acme-challenge.visyon-hub.com ns60.domaincontrol.com
30

You are adding the entire FQDN to the domain:

nslookup -q=txt _acme-challenge.visyon-hub.com.visyon-hub.com ns59.domaincontrol.com
_acme-challenge.visyon-hub.com.visyon-hub.com   text =

        "-RFxkwOjLq_arWeRoA91F9KvLRoBXlPzUQlGjy_H37U"

DO NOT ADD TXT RECORD:
“_acme-challenge.visyon-hub.com”
ONLY ADD TXT RECORD:
“_acme-challenge”

1 Like
31

OK:

|A|@|54.225.75.68|
|A|*|54.225.75.68|
|A|ipv4.visyon-hub.com|54.225.75.68|
|A|mail.visyon-hub.com|54.225.75.68|
|A|webmail|54.225.75.68|
|A|webmail.visyon-hub.com|54.225.75.68|
|CNAME|www|@|
|CNAME|_domainconnect|_domainconnect.gd.domaincontrol.com|
|NS|@|ns59.domaincontrol.com|
|NS|@|ns60.domaincontrol.com|
|SOA|@|Nombre del servidor principal: ns59.domaincontrol.com.|
|TXT|_acme-challenge|-RFxkwOjLq_arWeRoA91F9KvLRoBXlPzUQlGjy_H37U|

32

now press reload

33

It seems works:

image
image1181×500 39.1 KB

How can i check everything it’s ok?

34
35

It works perfect:

image
image1586×763 77.8 KB

Thanks you very much for your help.

Best regards.

1 Like
36

I accept beer4.work
Or
feel free to donate to LetsEncrypt

Either way,
Cheers from Miami :beers:

37

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.