# Error message (Failed authorization procedure) while trying to get certificate for subdomain

**URL:** <https://community.letsencrypt.org/t/error-message-failed-authorization-procedure-while-trying-to-get-certificate-for-subdomain/17860>\
**Category:** Help\
**Created:** [July 13, 2016, 11:02am UTC](https://community.letsencrypt.org/t/error-message-failed-authorization-procedure-while-trying-to-get-certificate-for-subdomain/17860 "2016-07-13T11:02:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benicarus](https://avatars.discourse-cdn.com/v4/letter/b/ecc23a/32.png) [@Benicarus](https://community.letsencrypt.org/u/Benicarus)\
**Post date:** [July 13, 2016, 11:02am UTC](https://community.letsencrypt.org/t/error-message-failed-authorization-procedure-while-trying-to-get-certificate-for-subdomain/17860/1 "2016-07-13T11:02:13Z")

</div>

I have the domain [nue2lax.com](http://nue2lax.com) with a let’s encrypt certificate up and running on my root server. However, following the same procedure in Plesk let’s encrypt extension for my subdomain, I get the error stated on the output section below.

The domain and subdomain are both targeted to the right IP address in the A records. The domain is also reachable, but I would like to get a certificate for this subdomain as well. I’m not sure how to read the error message though. I thought I have the DNS A Records set correctly.

Help is very appreciated! Thank you a lot!

My domain is: [webmail.nue2lax.com](http://webmail.nue2lax.com)

I ran this command: plesk extension

It produced this output:

Error: Let’s Encrypt SSL certificate installation failed: Failed letsencrypt execution: Failed authorization procedure. [webmail.nue2lax.com](http://webmail.nue2lax.com) (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://webmail.nue2lax.com/.well-known/acme-challenge/F1gXnVcvBrdabfP0odBGO0OJUlx\_sD51FCEZDxl2CJY:](http://webmail.nue2lax.com/.well-known/acme-challenge/F1gXnVcvBrdabfP0odBGO0OJUlx_sD51FCEZDxl2CJY:) "\<!DOCTYPE HTML PUBLIC “-//IETF//DTD HTML 2.0//EN”\>  
\<html\>\<head\>  
\<title\>404 Not Found\</title\>  
\</head\>\<body\>  
\<h1\>Not Found\</h1\>  
\<p"  
IMPORTANT NOTES:

- The following errors were reported by the server:

Domain: [webmail.nue2lax.com](http://webmail.nue2lax.com)  
Type: unauthorized  
Detail: Invalid response from  
[http://webmail.nue2lax.com/.well-known/acme-challenge/F1gXnVcvBrdabfP0odBGO0OJUlx\_sD51FCEZDxl2CJY:](http://webmail.nue2lax.com/.well-known/acme-challenge/F1gXnVcvBrdabfP0odBGO0OJUlx_sD51FCEZDxl2CJY:)  
"\<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"\>  
\<html\>\<head\>  
\<title\>404 Not Found\</title\>  
\</head\>\<body\>  
\<h1\>Not Found\</h1\>  
\<p"

To fix these errors, please make sure that your domain name was  
entered correctly and the DNS A record(s) for that domain  
contain(s) the right IP address.

My operating system is (include version): Debian 8.5

My web server is (include version): Apache 2.4.10

My hosting provider, if applicable, is: dedicated root-server location is hetzner

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Plesk

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [July 13, 2016, 12:09pm UTC](https://community.letsencrypt.org/t/error-message-failed-authorization-procedure-while-trying-to-get-certificate-for-subdomain/17860/2 "2016-07-13T12:09:04Z")

</div>

for your domain ( [webmail.nue2lax.com](http://webmail.nue2lax.com) ) if you place a file /.well-known/acme-challenge/test within the webroot - can you reach it in a browser ? (at [webmail.nue2lax.com/.well-known/acme-challenge/test](http://webmail.nue2lax.com/.well-known/acme-challenge/test) )

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 12, 2016, 12:09pm UTC](https://community.letsencrypt.org/t/error-message-failed-authorization-procedure-while-trying-to-get-certificate-for-subdomain/17860/3 "2016-08-12T12:09:26Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.