Failed authorization procedure

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g., so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command: ~\

It produced this output:
Last login: Mon Jul 30 22:00:59 on console
applemdm:~ administrator$ ~/
Attempting to renew cert ( from /etc/letsencrypt/renewal/ produced an unexpected error: Failed authorization procedure. (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from "

<htm". Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/ (failure)
1 renew failure(s), 0 parse failure(s)
1 identity imported.
2 certificates imported.
applemdm:~ administrator$
applemdm:~ administrator$

My web server is (include version): macos

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: macstadium

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): MacOS Server

I have been using letsencrypt since January and renewing every 90 days, but now it gives the error above and I have tried hopelessly to get it to work.

Hi @rgthrasher,

If you try to reach any page on your site, you receive a 403 Forbidden error message… if using a browser you get this message “Websites are turned off. An administrator can turn them on using the Server application.”.

Are you sure your web server is configured properly?.


The website comes up, its just not secure. I removed the letsencrypt sert thinking that might fix that error i was getting, which it didnt. the site is

Hi @rgthrasher,

I’m sorry but your site shows the message I posted above with every request and your site is secure, the only think is that it is using a self signed certificate (Russell Thrasher Server Certification Authority Intermediate CA) and Let’s Encrypt doesn’t care about that self-signed certificate.

Using command line:

$ curl -IkL
HTTP/1.1 302 Found
Date: Wed, 01 Aug 2018 15:57:59 GMT
Server: Apache
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 403 Forbidden
Date: Wed, 01 Aug 2018 15:57:59 GMT
Server: Apache
Content-Location: websitesoff403.html.en
Vary: negotiate,accept-language
TCN: choice
Last-Modified: Sun, 25 Mar 2018 00:52:02 GMT
ETag: "631-5683210bc9080;56bd0a038cd40"
Accept-Ranges: bytes
Content-Length: 1585
MS-Author-Via: DAV
Cache-Control: no-cache
Content-Type: text/html
Content-Language: en

If you can’t serve the http challenge LE can’t validate your domain and you won’t get your cert.


This is what I get when I go to that page

Are you perhaps on an internal network which routes to that domain differently than the public internet would?

1 Like

I suppose you are changing something because right now this is the page:

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.