# DNS challenges failed. Incorrect TXT record **URL:** \ **Category:** Help\ **Created:** [June 22, 2020, 3:08pm UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530 "2020-06-22T15:08:58Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![shakthydoss](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/shakthydoss/32/40607_2.png) [@shakthydoss](https://community.letsencrypt.org/u/shakthydoss)\ **Post date:** [June 22, 2020, 3:08pm UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530/1 "2020-06-22T15:08:58Z")
My domain is: [iskalar.com](http://iskalar.com) certbot 0.31.0 I ran this command: sudo certbot certonly --manual -d \*.iskalar.com -d [iskalar.com](http://iskalar.com) --agree-tos --no-bootstrap --manual-public-ip-logging-ok --preferred-challenges dns-01 --server [https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory) Output: Please deploy a DNS TXT record under the name \_acme-challenge.iskalar.com with the following value: VF2OMqNtJBL8K2uOFx\_gjSDdVioQeIwoCMcqiN3-qEQ Before continuing, verify the record is deployed. (This must be set up in addition to the previous challenges; do not remove, replace, or undo the previous challenge tasks yet. Note that you might be asked to create multiple distinct TXT records with the same name. This is permitted by DNS standards.) * * * Press Enter to Continue Waiting for verification… Cleaning up challenges Failed authorization procedure. [iskalar.com](http://iskalar.com) (dns-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Incorrect TXT record “VF2OMqNtJBL8K2uOFx\_gjSDdVioQeIwoCMcqiN3-qEQ” found at \_acme-challenge.iskalar.com IMPORTANT NOTES: - The following errors were reported by the server: Domain: [iskalar.com](http://iskalar.com) Type: unauthorized Detail: Incorrect TXT record “VF2OMqNtJBL8K2uOFx\_gjSDdVioQeIwoCMcqiN3-qEQ” found at \_acme-challenge.iskalar.com To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. - Your account credentials have been saved in your Certbot configuration directory at /etc/letsencrypt. You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained by Certbot so making regular backups of this folder is ideal. * * * $ nslookup -q=txt \_acme-challenge.iskalar.com [ns1.digitalocean.com](http://ns1.digitalocean.com) Server: [ns1.digitalocean.com](http://ns1.digitalocean.com) Address: 173.245.58.51#53 \_acme-challenge.iskalar.com text = “VF2OMqNtJBL8K2uOFx\_gjSDdVioQeIwoCMcqiN3-qEQ” * * * What should I do to make it work. Can i re run the command. Do I need to delete any files. before re running the command? ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [June 22, 2020, 8:46pm UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530/2 "2020-06-22T20:46:18Z")
Hi @shakthydoss, From context, I think the part that you missed was probably this: > [@shakthydoss](#): > > (This must be set up in addition to the previous challenges; do not remove, > replace, or undo the previous challenge tasks yet. Note that you might be > asked to create multiple distinct TXT records with the same name. This is > permitted by DNS standards.) That is, when you are requesting a single certificate for both `*.iskalar.com` and `iskalar.com`, you'll have _two separate values_ to provide as TXT records for the same name `_acme-challenge.iskalar.com`. (One of these proves that you, as the domain owner, are the same person who requested for `*.iskalar.com` to be covered by the new certificate, while the other proves that you, as the domain owner, are the same person who requested for `iskalar.com` to be covered by the new certificate.) The way that Certbot handles this, they'll both have to be configured at the same time, not replacing one of them with the other one. However, it looks like when you ran Certbot you replaced the challenge value for `iskalar.com` with the other challenge value for `*.iskalar.com` instead of serving both DNS records at the same time. > [@shakthydoss](#): > > Can i re run the command. Do I need to delete any files. before re running the command? You can re-run the command. There is a limit to how many times you can try per hour, but there is no penalty for re-trying the command in general. When you re-run the command, you'll get completely _new_ values to create as TXT records. In this case, you can delete the existing one (VF2OMqNtJBL8K2uOFx\_gjSDdVioQeIwoCMcqiN3-qEQ) from your DNS zone and only use the new ones that will be provided. You don't have to delete any files or make any other changes before trying again. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [June 24, 2020, 9:24am UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530/3 "2020-06-24T09:24:07Z")
Split this topic on June 24, 2020, 9:24am UTC A post was split to a new topic: [Creating the correct TXT entry](https://community.letsencrypt.org/t/creating-the-correct-txt-entry/126688) ---
**Author:** ![shakthydoss](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/shakthydoss/32/40607_2.png) [@shakthydoss](https://community.letsencrypt.org/u/shakthydoss)\ **Post date:** [June 24, 2020, 11:36am UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530/4 "2020-06-24T11:36:44Z")
Thank you. That explains what was the problem. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 24, 2020, 11:47am UTC](https://community.letsencrypt.org/t/dns-challenges-failed-incorrect-txt-record/126530/5 "2020-07-24T11:47:48Z")
Closed on July 24, 2020, 11:47am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.