Error when try to renew cert

Help
1

My domain is:http://scintillas.xyz/ and scintillas.asdd487.com/

I ran this command:sudo ./certbot-auto -q renew and sudo ./certbot-auto renew

It produced this output:asdd487@scintillas:/home/Hayes $ sudo ./certbot-auto renew
[sudo] password for asdd487:
Sorry, try again.
[sudo] password for asdd487:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/scintillas.xyz.conf

Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Attempting to renew cert (scintillas.xyz) from /etc/letsencrypt/renewal/scintill as.xyz.conf produced an unexpected error: urn:ietf:params:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-l imits/. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scintillas.xyz/fullchain.pem (failure)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scintillas.xyz/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)
and asdd487@scintillas:/home/Hayes $ sudo ./certbot-auto renew
[sudo] password for asdd487:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/scintillas.xyz.conf

Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for scintillas.asdd487.com
http-01 challenge for scintillas.xyz
Waiting for verification…
Challenge failed for domain scintillas.asdd487.com
Challenge failed for domain scintillas.xyz
http-01 challenge for scintillas.asdd487.com
http-01 challenge for scintillas.xyz
Cleaning up challenges
Attempting to renew cert (scintillas.xyz) from /etc/letsencrypt/renewal/scintill as.xyz.conf produced an unexpected error: Some challenges have failed… Skipping .
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scintillas.xyz/fullchain.pem (failure)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scintillas.xyz/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: scintillas.asdd487.com
    Type: connection
    Detail: Fetching
    http://scintillas.asdd487.com/.well-known/acme-challenge/RKAYulaYBOhw7HwGDNjk Ytxn9_4xaAwk1u7Rbsgd2ns:
    Timeout during connect (likely firewall problem)

    Domain: scintillas.xyz
    Type: connection
    Detail: Fetching
    http://scintillas.xyz/.well-known/acme-challenge/ZyYwuaWp6y770rWConqJ3gQD7r0n c0nD_nPWIZJR-c8:
    Timeout during connect (likely firewall problem)

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

My web server is (include version): latest apache

The operating system my web server runs on is (include version): latest rasbian lite

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): using putty for remote ssh

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot)asdd487@scintillas:/home/Hayes $ sudo ./certbot-auto --version
certbot 0.33.1

2

Hi @asdd487

looks like you have found a solution.

There are some certificates ( https://check-your-website.server-daten.de/?q=scintillas.xyz ):

CRT-Id Issuer not before not after Domain names LE-Duplicate next LE
1362188474 CN=Let’s Encrypt Authority X3, O=Let’s Encrypt, C=US 2019-04-07 23:02:31 2019-07-06 23:02:31 scintillas.asdd487.com, scintillas.xyz duplicate nr. 1
1151919155 CN=CloudFlare Inc ECC CA-2, O=“CloudFlare, Inc.”, L=San Francisco, C=US, ST=CA 2019-01-27 23:00:00 2020-01-28 11:00:00 *.scintillas.xyz, CloudFlare, Inc., scintillas.xyz, sni.cloudflaressl.com
1150458621 CN=Let’s Encrypt Authority X3, O=Let’s Encrypt, C=US 2019-01-27 18:20:51 2019-04-27 17:20:51 scintillas.asdd487.com, scintillas.xyz

If you want to use Cloudflare, you need a working certificate. That may have blocked.

Port 80 is now open,

Domainname Http-Status redirect Sec. G
• http://scintillas.xyz/
81.170.253.16 301 https://scintillas.xyz/ 0.096 A
• http://www.scintillas.xyz/
81.170.253.16 200 0.106 H
• https://scintillas.xyz/
81.170.253.16 200 1.003 B
• https://www.scintillas.xyz/
81.170.253.16 200 0.746 N
Certificate error: RemoteCertificateNameMismatch
• http://scintillas.xyz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.170.253.16 301 https://scintillas.xyz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 0.096 A
Visible Content: Moved Permanently The document has moved here .
• http://www.scintillas.xyz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.170.253.16 404 0.100 A
Not Found
Visible Content: 404 Take me back to scintillas.xyz
• https://scintillas.xyz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 404 0.463 A
Not Found
Visible Content: 404 Take me back to scintillas.xyz

so this isn’t a problem.

Your new Letsencrypt certificate

CN=scintillas.xyz
	08.04.2019
	07.07.2019
expires in 90 days	
scintillas.asdd487.com, scintillas.xyz - 2 entries

Your other domain use the same certificate. So the main things are ok.

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.