# Enable SSL for subdomain on another host

**URL:** <https://community.letsencrypt.org/t/enable-ssl-for-subdomain-on-another-host/120778>\
**Category:** Help\
**Created:** [April 26, 2020, 3:01pm UTC](https://community.letsencrypt.org/t/enable-ssl-for-subdomain-on-another-host/120778 "2020-04-26T15:01:54Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [April 26, 2020, 3:46pm UTC](https://community.letsencrypt.org/t/enable-ssl-for-subdomain-on-another-host/120778/2 "2020-04-26T15:46:55Z")

</div>

Hi @srostam

> [@srostam](#):
>
> Details:
> 
> Type: urn:ietf:params:acme:error:dns
> 
> Status: 400
> 
> Detail: During secondary validation: DNS problem: query timed out looking up A for lordegan.khoshpaz.ir

if you have the "During secondary validation" error: First read

> [@ACME v1/v2: Validating challenges from multiple network vantage points](https://community.letsencrypt.org/t/acme-v1-v2-validating-challenges-from-multiple-network-vantage-points/112253):
>
> O…

So the main Letsencrypt servers are able to check your domain. The secondary servers may be blocked.

Checking your subdomain - [lordegan.khoshpaz.ir - Make your website better - DNS, redirects, mixed content, certificates](https://check-your-website.server-daten.de/?q=lordegan.khoshpaz.ir) there are some minor name server problems visible.

Checking your main domain that doesn't look good - [khoshpaz.ir - Make your website better - DNS, redirects, mixed content, certificates](https://check-your-website.server-daten.de/?q=khoshpaz.ir)

One ip address with your website and both of your name servers - `ns1.khoshpaz.ir + ns2.khoshpaz.ir` - 158.58.189.28. Normally, name servers should have different ip addresses.

May be there is a regional firewall, so the secondary servers are blocked.

And there is a new certificate of your subdomain:

| Issuer | not before | not after | Domain names | LE-Duplicate | next LE |
| --- | --- | --- | --- | --- | --- |
| Let's Encrypt Authority X3 | 2020-04-22 | 2020-07-21 | lordegan.khoshpaz.ir, www.lordegan.khoshpaz.ir - 2 entries | duplicate nr. 1 | |

Created 2020-04-22. Isn't it possible to use that?

---

_[View the full topic](https://community.letsencrypt.org/t/enable-ssl-for-subdomain-on-another-host/120778)._