DNS problem: query timed out looking up for midominio.com

[leticia]

Hello, I am trying the certificate but I get the following error, I have seen several similar topics but the truth is that I have not found the solution. Attachment capture.

[ahaw021]

please fill out the appropriate fields. You should have been asked some questions when you first created this

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

[leticia]

My domain is: holastream.tv

I ran this command:
I tried to renew the certificate through the panel plesk

It produced this output: Fetching https://holastream.tv/.well-known/acme-challenge/2cSsX84Ex5NjPLrroizNXGZpa2A9iU0LoHrl4wFOwhY: Timeout

My web server is (include version):
CPU Intel® Xeon® CPU L5640 @ 2.27GHz (4 core(s))
Versión Plesk v12.5.30_build1205150826.19 os_Ubuntu 14.04

The operating system my web server runs on is (include version): Ubuntu 14.04.3 LTS

My hosting provider, if applicable, is: hostalia

I can login to a root shell on my machine (yes or no, or I don’t know): I don’t know

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Yes use wordpress

Thanks!

[ahaw021]

if you are using plesk

you are best to work with them to troubleshoot the issue.

You have a timeout to your website so it could be that you tried during a busy time

You can try running the command again

Andrei

[leticia]

We have tried several times (more than 10) and in none has been possible … from plesk tell us that it is not a problem of yours

[ahaw021]

hmmm it does seem like the file is being served

I will leave to others to have a look at the backend for the source of the error

[sahsanu]

Hi @leticia,

You have a serious problem with your ns servers. Let’s Encrypt always will query the A and AAAA records for your domain and your ns servers are not configured properly to answer for AAAA records, they return a NOTIMP (Not Implemented) response and that is not valid answer for Let’s Encrypt.

$ dig @ns1.servidorcloud.me hoLAstream.tv aaaa

; <<>> DiG 9.9.7 <<>> @ns1.servidorcloud.me holastream.tv aaaa
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOTIMP, id: 6770
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; WARNING: EDNS query returned status NOTIMP - retry with '+noedns'

;; QUESTION SECTION:
;holastream.tv.                 IN      AAAA

;; Query time: 25 msec
;; SERVER: 176.28.97.73#53(176.28.97.73)
;; WHEN: lun oct 09 14:28:34     2017
;; MSG SIZE  rcvd: 31

Also, your ns servers doesn’t answer properly to mixed case requests, in below example I’m querying hoLAstREam.tV and your ns server should answer at least in QUESTION section with:

;; QUESTION SECTION:
;hoLAstREam.tV.                 IN      A

but it answer with lower case:

;; QUESTION SECTION:
;holastream.tv.                 IN      A

Complete output:

$ dig @ns1.servidorcloud.me hoLAstREam.tV a

; <<>> DiG 9.9.7 <<>> @ns1.servidorcloud.me hoLAstREam.tV a
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38930
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;holastream.tv.                 IN      A

;; ANSWER SECTION:
holastream.tv.          10800   IN      A       86.109.108.234

;; AUTHORITY SECTION:
cloudexpress.es.        10800   IN      NS      ns1.cloudexpress.es.
cloudexpress.es.        10800   IN      NS      ns2.cloudexpress.es.

;; ADDITIONAL SECTION:
ns1.cloudexpress.es.    10800   IN      A       176.28.97.73
ns2.cloudexpress.es.    10800   IN      A       176.28.97.74

;; Query time: 49 msec
;; SERVER: 176.28.97.73#53(176.28.97.73)
;; WHEN: lun oct 09 14:30:08     2017
;; MSG SIZE  rcvd: 130

Also, your authoritative ns servers are ns1.servidorcloud.me and ns2.servidorcloud.me but your ns servers returns on every requested record the authoritatiuve ns servers ns1.cloudexpress.es and ns2.cloudexpress.es which is really strange.

Note: Performing these tests I’ve received several time outs trying to reach your ns servers (from different countries).

Advice, recheck your dns servers and their conf for your domain.

Good luck,
sahsanu