Could not issue SSL/TLS certificate for

[cbastian]

My domain is: https://www.wbof.de

I ran this command: I try to request a certifcate via Plesk (Domain already created)

It produced this output:

Could not issue an SSL/TLS certificate for wbof.de
Details
Could not issue a Let’s Encrypt SSL/TLS certificate for wbof.de. Authorization for the domain failed.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/2261827224.

Details:

Type: urn:ietf:params:acme:error:unauthorized

Status: 403

Detail: No TXT record found at _acme-challenge.wbof.de

My web server is (include version): Apache

The operating system my web server runs on is (include version): Cent OS 7

My hosting provider, if applicable, is: IONOS.DE

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): PLESK

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): ?

If i Register a new Domain, everything is fine (i already get certificates at creating a Domain in Plesk).

But if i request a certificate after creating a Domain, i get this error above…

[JuergenAuer]

Hi @cbastian

@cbastian

Detail: No TXT record found at _acme-challenge.wbof.de

there is no TXT record - https://check-your-website.server-daten.de/?q=wbof.de#txt

Ok, may be deleted.

But does your Plesk connect the correct name server?

ns1030.ui-dns.biz is one of your name servers.

[cbastian]

I checked the DNS-entries in Plesk and they look correct.

I’m wondering why everything is fine with the other Domains!?

Familie-Bastian.org is another Domain and it works fine, but if i check it with your URL, i get also
‘_acme-challenge.familie-bastian.org - missing entry or wrong length’

Confusing is, that it works for new Domains…

For the wbof-domain, after i create a new certificate, i get a screen where plesk says:

Please wait while Plesk finishes adding a DNS record with the following parameters:
Record type: TXT
Domain name: _acme-challenge .wbof.de
Record: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

But it never come back… And if i click on Rebload, i get the error above….

Mybe it is a bug in Plesk!?

[JuergenAuer]

These entries

@cbastian

Familie-Bastian.org is another Domain and it works fine, but if i check it with your URL, i get also
‘_acme-challenge.familie-bastian.org - missing entry or wrong length’

are not good, but not critical.

If there is no TXT entry, the server should send an error 3 - Domainname does not exist. Not an empty value and NOERROR.

So the name server answer isn't really good, but that's not critical to create a Letsencrypt certificate.

That

@cbastian

But it never come back… And if i click on Rebload, i get the error above….

Mybe it is a bug in Plesk!?

looks like a Plesk bug. Perhaps ask in the Plesk forum or check, if there is an update.

[cbastian]

Thank you for the help…
I was able to install the certificate manually.

It Looks like the function in Plesk makes some problems, if you try to install a certificate AFTER the domain is already created…. (Plesk Version 18.0.21 up5)

Kind regards
Christoph