Failed authorization procedure while trying to get a certificate for subdomain

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
www.byte-mark.de

I ran this command:

sudo certbot --nginx -d code.byte-mark.de

It produced this output:

Failed authorization procedure. code-server.byte-mark.de (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for code-server.byte-mark.de - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for code-server.byte-mark.de - check that a DNS record exists for this domain

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: code-server.byte-mark.de
   Type:   None
   Detail: DNS problem: NXDOMAIN looking up A for
   code-server.byte-mark.de - check that a DNS record exists for this
   domain; DNS problem: NXDOMAIN looking up AAAA for
   code-server.byte-mark.de - check that a DNS record exists for this
   domain

My web server is (include version):
nginx/1.14.2

The operating system my web server runs on is (include version):
Debian GNU/Linux 10 (buster)

My hosting provider, if applicable, is:
netcup GmbH

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The Domain is managed using IONOS' control panel

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 0.31.0

You should add the appropriate DNS records for your subdomain. Currently, there aren't any.

Also, that command doesn't match that output. Different domain names and I find no redirect that can produce that output.

2 Likes

I find:

Name:      code.byte-mark.de
Addresses: 2a03:4000:6:b68d:985e:2ff:fe65:c730
           37.120.190.178
2 Likes

Only OP knows what's going on.

2 Likes

Whoopsie, thanks for pointing me in the right direction. I had a mix up in my config files. After resolving this everything works fine now.

Thank you very much!

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.