Error: Create a new certificate on Windows Server 2012 R2 IIS 8.5

[thanhphung901]

My domain is:baohiemnhantho-saigon.com

I ran this command:

• Step 1: N Create new certificate (simple for IIS)
• Step 2: 4 Manul input
• Step 3: Enter comma-separeated list of host names, starting with the common name: baohiemnhantho-saigon.com
• Step 4: Choose site to create new bindings: 59

It produced this output:
[INFO] Authorize identifier: baohiemnhantho-saigon.com
[INFO] Authorizing baohiemnhantho-saigon.com using http-01 validation
[EROR] Authorization timed out
[EROR] Create certificate failed:Authorization failed

My web server is (include version): IIS 8.5

The operating system my web server runs on is (include version): Window Server 2012 R2

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): no

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

[JuergenAuer]

Hi @thanhphung901

there are older checks of your domain - https://check-your-website.server-daten.de/?q=baohiemnhantho-saigon.com

Your https works, but your http has a timeout.

Domainname	Http-Status	redirect	Sec.	G
• http://baohiemnhantho-saigon.com/
103.1.236.214	-14		10.016	T
Timeout - The operation has timed out
• http://www.baohiemnhantho-saigon.com/
103.1.236.214	-14		10.036	T
Timeout - The operation has timed out
• https://baohiemnhantho-saigon.com/ 103.1.236.214 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 103,96 %	4.330	N
Not Found
Certificate error: RemoteCertificateNameMismatch
• https://www.baohiemnhantho-saigon.com/ 103.1.236.214 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 103,96 %	4.340	N
Not Found
Certificate error: RemoteCertificateNameMismatch
• http://baohiemnhantho-saigon.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 103.1.236.214	-14		10.033	T
Timeout - The operation has timed out
Visible Content:
• http://www.baohiemnhantho-saigon.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 103.1.236.214	-14		10.013	T
Timeout - The operation has timed out

Is there a blocking firewall?

Works http internal?

curl http://baohiemnhantho-saigon.com/
curl http://baohiemnhantho-saigon.com/.well-known/acme-challenge/1234

A working and visible port 80 is required.

There are no older certificates, so it’s your first.

[thanhphung901]

Disable port 80 is problem. I’ve added it and worked.
Thank you!