Failed to renew the CA

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: servierdoctor.servier.com.cn

I ran this command: certbot renew --cert-name servierdoctor.servier.com.cn

It produced this output: during secondary validation

My web server is (include version): apahce 2.4

The operating system my web server runs on is (include version): centos 7.9

My hosting provider, if applicable, is: Azure China

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

@hijason , welcome back to the community!

You may have geoblocking or other firewall that blocks the inbound HTTP connection from the secondary validation services.

5 Likes
3

You should review the below topic. If that doesn't help please let us know.

7 Likes
4

This may be a geo-blocking issue...

host servierdoctor.servier.com.cn
servierdoctor.servier.com.cn is an alias for personapp.chinanorth2.cloudapp.chinacloudapi.cn.
personapp.chinanorth2.cloudapp.chinacloudapi.cn has address 52.130.152.73

BUT:

ping servierdoctor.servier.com.cn
PING personapp.chinanorth2.cloudapp.chinacloudapi.cn (52.130.152.73) 56(84) bytes of data.
From 52.130.152.73 (52.130.152.73) icmp_seq=1 Destination Host Unreachable
3 Likes