# Error install SSL

**URL:** <https://community.letsencrypt.org/t/error-install-ssl/91613>\
**Category:** Help\
**Created:** [April 19, 2019, 3:49pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613 "2019-04-19T15:49:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![montresor](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@montresor](https://community.letsencrypt.org/u/montresor)\
**Post date:** [April 19, 2019, 3:49pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613/1 "2019-04-19T15:49:10Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

## My domain is: [2i-ci.com](http://2i-ci.com) I would like to install Let’s Encrypt, but I have some error. Please can you help me to fix this.

Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator webroot, Installer None  
Obtaining a new certificate  
Performing the following challenges:  
http-01 challenge for [2i-ci.com](http://2i-ci.com)  
http-01 challenge for [www.2i-ci.com](http://www.2i-ci.com)  
Using the webroot path /var/www/vhosts/FilerWeb07/2i-ci.com/httpdocs for all unmatched domains.  
Waiting for verification…  
Challenge failed for domain [2i-ci.com](http://2i-ci.com)  
Challenge failed for domain [www.2i-ci.com](http://www.2i-ci.com)  
http-01 challenge for [2i-ci.com](http://2i-ci.com)  
http-01 challenge for [www.2i-ci.com](http://www.2i-ci.com)  
Cleaning up challenges  
All challenges have failed.  
IMPORTANT NOTES:

- The following errors were reported by the server:

Domain: [2i-ci.com](http://2i-ci.com)  
Type: unauthorized  
Detail: Invalid response from  
[http://2i-ci.com/.well-known/acme-challenge/leLlDgS6vuSbXK22G5VshzJSji1-XR1s8k3kdT4cclw](http://2i-ci.com/.well-known/acme-challenge/leLlDgS6vuSbXK22G5VshzJSji1-XR1s8k3kdT4cclw)  
[46.182.5.20]: “\<html\>\r\n\<head\>\<title\>404 Not  
Found\</title\>\</head\>\r\n\<body bgcolor=“white”\>\r\n\<center\>\<h1\>404  
Not Found\</h1\>\</center\>\r\n\<hr\>\<center\>”

Domain: [www.2i-ci.com](http://www.2i-ci.com)  
Type: unauthorized  
Detail: Invalid response from  
[http://www.2i-ci.com/.well-known/acme-challenge/PkW3-zHHgeL0GCvB5drjiWB2e0Jm2Qa7miO9xOqdOos](http://www.2i-ci.com/.well-known/acme-challenge/PkW3-zHHgeL0GCvB5drjiWB2e0Jm2Qa7miO9xOqdOos)  
[46.182.5.20]: “\<html\>\r\n\<head\>\<title\>404 Not  
Found\</title\>\</head\>\r\n\<body bgcolor=“white”\>\r\n\<center\>\<h1\>404  
Not Found\</h1\>\</center\>\r\n\<hr\>\<center\>”

To fix these errors, please make sure that your domain name was  
entered correctly and the DNS A/AAAA record(s) for that domain  
contain(s) the right IP address.

Regards

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [April 19, 2019, 4:34pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613/2 "2019-04-19T16:34:50Z")

</div>

Hi @montresor

> [@montresor](#):
>
> http-01 challenge for [2i-ci.com](http://2i-ci.com)  
> http-01 challenge for [www.2i-ci.com](http://www.2i-ci.com)

checking your domain there is an error ( [https://check-your-website.server-daten.de/?q=2i-ci.com](https://check-your-website.server-daten.de/?q=2i-ci.com) ):

| Domainname | Http-Status | redirect | Sec. | G |
| --- | --- | --- | --- | --- |
| • [http://2i-ci.com/](http://2i-ci.com/) | | | | |
| 46.182.5.20 | 200 | | 4.507 | H |
| | | | | |
| • [http://www.2i-ci.com/](http://www.2i-ci.com/) | | | | |
| 46.182.5.20 | 200 | | 1.706 | H |
| | | | | |
| • [https://2i-ci.com/](https://2i-ci.com/) | | | | |
| 46.182.5.20 | 200 | | 2.050 | N |
| Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors | | | | |
| | | | | |
| • [https://www.2i-ci.com/](https://www.2i-ci.com/) | | | | |
| 46.182.5.20 | 200 | | 1.900 | N |
| Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors | | | | |
| | | | | |
| • [http://2i-ci.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://2i-ci.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 46.182.5.20 | 404 | | 0.094 | A |
| Not Found | | | | |
| Visible Content: 404 Not Found nginx/1.10.2 | | | | |
| | | | | |
| • [http://www.2i-ci.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://www.2i-ci.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 46.182.5.20 | 404 | | 0.080 | A |
| Not Found | | | | |
| Visible Content: 404 Not Found nginx/1.10.2 | | | | |
| | | | | |

http / port 80 is open, that's good. But both /.well-known/acme-challenge subdirectories - there is a nginx.

All other connections have a

> Server: Apache

header.

So you have to use the webroot of your nginx, not of your Apache.

---

<div class="post-metadata">

**Author:** ![montresor](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@montresor](https://community.letsencrypt.org/u/montresor)\
**Post date:** [April 19, 2019, 4:46pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613/3 "2019-04-19T16:46:49Z")

</div>

Thanks very much but I don’t understand can you please explain to me.  
I don’t have access to the server subdirectories.

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [April 19, 2019, 4:56pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613/4 "2019-04-19T16:56:00Z")

</div>

Please read the basics.

> **[How It Works - Let's Encrypt - Free SSL/TLS Certificates](https://letsencrypt.org/how-it-works/)**
>
> The objective of Let’s Encrypt and the ACME protocol is to make it possible to set up an HTTPS server and have it automatically obtain a browser-trusted certificate, without any human intervention. This is accomplished by running a certificate...

Then check the Challenge Types:

> **[Challenge Types - Let's Encrypt - Free SSL/TLS Certificates](https://letsencrypt.org/docs/challenge-types/)**
>
> When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME...

You use the http-01 challenge + webroot. So you have to use the webroot of that instance that answers

```auto
http://yourdomain/.well-known/acme-challenge/file-with-random-filename

```

That’s a nginx.

Is this

```auto
/var/www/vhosts/FilerWeb07/2i-ci.com/httpdocs

```

the webroot of your nginx? Looks like an Apache, so that can’t work.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 19, 2019, 4:56pm UTC](https://community.letsencrypt.org/t/error-install-ssl/91613/5 "2019-05-19T16:56:01Z")

</div>

Closed on May 19, 2019, 4:56pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.