# Error when requesting certificate

**URL:** <https://community.letsencrypt.org/t/error-when-requesting-certificate/84692>\
**Category:** Help\
**Created:** [January 30, 2019, 9:27am UTC](https://community.letsencrypt.org/t/error-when-requesting-certificate/84692 "2019-01-30T09:27:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dosdemil.es](https://avatars.discourse-cdn.com/v4/letter/d/dec6dc/32.png) [@dosdemil.es](https://community.letsencrypt.org/u/dosdemil.es)\
**Post date:** [January 30, 2019, 9:27am UTC](https://community.letsencrypt.org/t/error-when-requesting-certificate/84692/1 "2019-01-30T09:27:41Z")

</div>

My domain is: cosmetica.dulcecalvo.es

I ran this command: letsencrypt-vesta dulcecalvo cosmetica.dulcecalvo.es

It produced this output:

Failed authorization procedure. cosmetica.dulcecalvo.es (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: The key authorization file from the server did not match this challenge [F8u579CuGgPj3lI2n0TZGulrJv8adZfhpVx31gIJets.0bl5NhJDzpoDz\_AZpvIcfR2tWojyiPNbujYRCC-n6VE] != [F8u579CuGgPj3lI2n0TZGulrJv8adZfhpVx31gIJets.VJiX50xcNEOMO6eyxr0aZq7LaciOJUXmNVBNj7Qfzyw]

The following errors were reported by the server:

Domain: cosmetica.dulcecalvo.es  
Type: unauthorized  
Detail: The key authorization file from the server did not match  
this challenge  
[F8u579CuGgPj3lI2n0TZGulrJv8adZfhpVx31gIJets.0bl5NhJDzpoDz\_AZpvIcfR2tWojyiPNbujYRCC-n6VE]  
!=  
[F8u579CuGgPj3lI2n0TZGulrJv8adZfhpVx31gIJets.VJiX50xcNEOMO6eyxr0aZq7LaciOJUXmNVBNj7Qfzyw]

To fix these errors, please make sure that your domain name was  
entered correctly and the DNS A/AAAA record(s) for that domain  
contain(s) the right IP address.

The operating system my web server runs on is: Ubuntu

I can login to a root shell on my machine: Yes

The version of my client is: certbot 0.30.2

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [January 30, 2019, 9:34am UTC](https://community.letsencrypt.org/t/error-when-requesting-certificate/84692/2 "2019-01-30T09:34:27Z")

</div>

It appears to be a known issue with letsencrypt-vesta: [https://github.com/interbrite/letsencrypt-vesta/issues/51](https://github.com/interbrite/letsencrypt-vesta/issues/51)

Since letsencrypt-vesta has not been updated in over 2 years, you might consider using the built-in support VestaCP offers for Let’s Encrypt, which is suggested in this comment: [https://github.com/interbrite/letsencrypt-vesta/issues/51#issuecomment-372905254](https://github.com/interbrite/letsencrypt-vesta/issues/51#issuecomment-372905254)

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [January 30, 2019, 9:37am UTC](https://community.letsencrypt.org/t/error-when-requesting-certificate/84692/3 "2019-01-30T09:37:44Z")

</div>

Hi @dosdemil.es

> [@dosdemil.es](#):
>
> My domain is: cosmetica.dulcecalvo.es

the error says, that your website sends the wrong user key.

Your config ( [https://check-your-website.server-daten.de/?q=cosmetica.dulcecalvo.es](https://check-your-website.server-daten.de/?q=cosmetica.dulcecalvo.es) ):

| Domainname | Http-Status | redirect | Sec. | G |
| --- | --- | --- | --- | --- |
| • [http://cosmetica.dulcecalvo.es/](http://cosmetica.dulcecalvo.es/) | | | | |
| 46.183.114.223 | 200 | | 0.873 | H |
| | | | | |
| • [http://www.cosmetica.dulcecalvo.es/](http://www.cosmetica.dulcecalvo.es/) | | | | |
| 46.183.114.223 | 200 | | 0.123 | H |
| | | | | |
| • [https://cosmetica.dulcecalvo.es/](https://cosmetica.dulcecalvo.es/) | | | | |
| 46.183.114.223 | 301 | [https://oidococina.online/](https://oidococina.online/) | 1.877 | N |
| Certificate error: RemoteCertificateNameMismatch | | | | |
| | | | | |
| • [https://www.cosmetica.dulcecalvo.es/](https://www.cosmetica.dulcecalvo.es/) | | | | |
| 46.183.114.223 | 301 | [https://oidococina.online/](https://oidococina.online/) | 1.644 | N |
| Certificate error: RemoteCertificateNameMismatch | | | | |
| | | | | |
| • [https://oidococina.online/](https://oidococina.online/) | 200 | | 7.627 | B |
| | | | | |
| • [http://cosmetica.dulcecalvo.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://cosmetica.dulcecalvo.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 46.183.114.223 | 200 | | 0.117 | |
| | | | | |
| • [http://www.cosmetica.dulcecalvo.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://www.cosmetica.dulcecalvo.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | |
| 46.183.114.223 | 404 | | 0.120 | A |
| Not Found | | | | |

Your website redirects to oidococina.online, but your cosmetica sends a status 200 checking a file under /.well-known/acme-challenge.

Oh - what's that? Opening

```nohighlight
http://cosmetica.dulcecalvo.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

```

the content is

```nohighlight
check-your-website-dot-server-daten-dot-de.VJiX50xcNEOMO6eyxr0aZq7LaciOJUXmNVBNj7Qfzyw

```

So your webserver puts the random file name in the file and adds the key.

Is this the key of your hoster?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 1, 2019, 9:37am UTC](https://community.letsencrypt.org/t/error-when-requesting-certificate/84692/4 "2019-03-01T09:37:45Z")

</div>

Closed on March 1, 2019, 9:37am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
