Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:beta.artoreal.com
I ran this command:sudo certbot --nginx-path=/usr/share/nginx/letsencrypt -m email@example.com --agree-tos -d beta.artoreal.com
It produced this output: Domain: beta.artoreal.com
Detail: DNS problem: SERVFAIL looking up CAA for beta.artoreal.com
My web server is (include version):nginx 1.10.3
The operating system my web server runs on is (include version):ubantu 16.04
My hosting provider, if applicable, is:Softcell
I can login to a root shell on my machine (yes or no, or I don’t know):Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):No
The version of my client is (e.g. output of
certbot --version or
certbot-auto --version if you’re using Certbot):certbot 0.31.0
Seems to be a DNSSEC issue on at least one of the nameservers: https://letsdebug.net/beta.artoreal.com/40549
The nameservers appear to be running PowerDNS, so whoever runs them can try:
sudo pdnsutil rectify-zone artoreal.com
No SOA known for ‘artoreal.com.’, is such a zone in the database?
No SOA known for ‘beta.artoreal.com.’, is such a zone in the database?
Above result’s i get when i run this command “sudo pdnsutil rectify-zone artoreal.com or sudo pdnsutil rectify-zone beta.artoreal.com” for both main & sub domain.
What server are you running that command on?
Can you try it on
What server are you running that command on? : on Putty
Can you try it on
ns2.softcell.co.in ? No, I don’t have C-panel access.
Sounds like you’re going to have to contact Softcell to fix it.
The alternative is to just disable DNSSEC entirely.
We setup this same SSl on www.tumbhistudio.com successfully.
With Apache + Ubantu , but not able to set on beta.artoreal.com due to this error: " [DNS problem: SERVFAIL looking up CAA for beta.artoreal.com".
Just contact Softcell and link them to this thread.
They need to rectify
artoreal.com on their side.
Thanks for your valuable time & support.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.