Different site and mail servers

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: platinumroofingandgutters.co.uk

It produced this output: Could not issue an SSL/TLS certificate for platinumroofingandgutters.co.uk
Details

Could not request a Let's Encrypt SSL/TLS certificate for platinumroofingandgutters.co.uk.

The operating system my web server runs on is (include version): Windows Server 2022 (Standard)

My hosting provider, if applicable, is: Dedicated server

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Plesk Obsidian 18.0.73

I have a server which has sites and email on.

However, I have a domain where I host the email but the site is hosted elsewhere, which works OK except I cannot install a Let's Encrypt as the dns for the site is different to the plesk dns.

The site has ssl but I need ssl on the email.

2

Hello @And1m, welcome to the Let's Encrypt community. :slightly_smiling_face:

Here is a list of issued certificates crt.sh | platinumroofingandgutters.co.uk.
https://platinumroofingandgutters.co.uk/
is serving this certificate crt.sh | 21520113691
as demonstrated here https://decoder.link/sslchecker/platinumroofingandgutters.co.uk/443
Note that certificate only covers the domain name platinumroofingandgutters.co.uk
and not the domain name mail.platinumroofingandgutters.co.uk, which is what the MX Record indicates is the mail server.

What domain name do you want for for your mail server?

Edit

Supplemental information

curl -Ii http://platinumroofingandgutters.co.uk/.well-known/acme-challenge/sometestfile 
$ curl -Ii http://platinumroofingandgutters.co.uk/.well-known/acme-challenge/sometestfile
HTTP/1.1 403 Forbidden
Date: Sun, 26 Oct 2025 18:46:45 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: 99c5a7cb-d354-4c5a-b544-39e3e2bd2025
x-amzn-ErrorType: MissingAuthenticationTokenException
x-amz-apigw-id: TEXnXF__IAMEhlg=
X-Cache: Error from cloudfront
Via: 1.1 4685cae701bd588fa0176a1c8b1e52f4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: IAD12-P2
X-Amz-Cf-Id: DS44nCMonW91BTO1NP6gYQ-cpR2HRDfaQWM82fkhNipGGIe_Vzwr4g==

$ nmap -Pn platinumroofingandgutters.co.uk
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-10-26 18:53 UTC
Nmap scan report for platinumroofingandgutters.co.uk (76.223.113.161)
Host is up (0.011s latency).
rDNS record for 76.223.113.161: a850d542ec7f4311c.awsglobalaccelerator.com
Not shown: 998 filtered tcp ports (no-response)
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 6.42 seconds
curl -Ii https://mail.platinumroofingandgutters.co.uk/.well-known/acme-challenge/sometestfile 
$ curl -Ii http://mail.platinumroofingandgutters.co.uk/.well-known/acme-challenge/sometestfile
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 4873
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Sun, 26 Oct 2025 18:46:37 GMT

$ nmap -Pn mail.platinumroofingandgutters.co.uk
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-10-26 18:53 UTC
Nmap scan report for mail.platinumroofingandgutters.co.uk (77.68.25.198)
Host is up (0.15s latency).
rDNS record for 77.68.25.198: theemailserver.co.uk
Not shown: 992 filtered tcp ports (no-response)
PORT     STATE SERVICE
21/tcp   open  ftp
80/tcp   open  http
110/tcp  open  pop3
143/tcp  open  imap
443/tcp  open  https
993/tcp  open  imaps
3389/tcp open  ms-wbt-server
8443/tcp open  https-alt

Nmap done: 1 IP address (1 host up) scanned in 8.32 seconds
1 Like