# Fail to get certificate on AWS VM

**URL:** <https://community.letsencrypt.org/t/fail-to-get-certificate-on-aws-vm/213549>\
**Category:** Help\
**Created:** [February 19, 2024, 9:49am UTC](https://community.letsencrypt.org/t/fail-to-get-certificate-on-aws-vm/213549 "2024-02-19T09:49:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kmc](https://avatars.discourse-cdn.com/v4/letter/k/e8c25b/32.png) [@kmc](https://community.letsencrypt.org/u/kmc)\
**Post date:** [February 19, 2024, 9:49am UTC](https://community.letsencrypt.org/t/fail-to-get-certificate-on-aws-vm/213549/1 "2024-02-19T09:49:24Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:  
[emarge.formasup-med.com](http://emarge.formasup-med.com)  
I ran this command:  
certbot --apache  
It produced this output:  
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:  
Domain: [emarge.cfa-epure.com](http://emarge.cfa-epure.com)  
Type: connection  
Detail: 51.91.111.14: Fetching [http://emarge.cfa-epure.com/.well-known/acme-challenge/\_jqRgsdxDCCCn0TlQLdShQLTjTHXci-hvdatiffLWas:](http://emarge.cfa-epure.com/.well-known/acme-challenge/_jqRgsdxDCCCn0TlQLdShQLTjTHXci-hvdatiffLWas:) Timeout during connect (likely firewall problem)  
My web server is (include version):  
Server version: Apache/2.4.52 (Ubuntu)  
Server built: 2023-10-26T13:44:44

The operating system my web server runs on is (include version):  
Ubuntu 22.04.3 LTS  
My hosting provider, if applicable, is:  
AWS  
I can login to a root shell on my machine (yes or no, or I don't know):  
yes  
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):  
no  
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):  
certbot 2.9.0

certbot seems to loog for an answer on 51.91.111.14 but the domain IP is 15.236.71.204

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [February 19, 2024, 11:49am UTC](https://community.letsencrypt.org/t/fail-to-get-certificate-on-aws-vm/213549/2 "2024-02-19T11:49:09Z")

</div>

> [@kmc](#):
>
> certbot seems to loog for an answer on 51.91.111.14 but the domain IP is 15.236.71.204

That might be the case for `emarge.formasup-med.com`, but for `emarge.cfa-epure.com`, the hostname from the error, it's not.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 20, 2024, 11:49am UTC](https://community.letsencrypt.org/t/fail-to-get-certificate-on-aws-vm/213549/3 "2024-03-20T11:49:51Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
