Failed To Secure New Certificate

[mannny009]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:psapp.lcbo.com

I ran this command:

It produced this output:

{
“type”: “urn:ietf:params:acme:error:unauthorized”,
“detail”: “Invalid response from http://psapp.lcbo.com/.well-known/acme-challenge/f0Jxc5FPFgHwIm_9ecCCDj3vrtpxsk72W
1NPms0JYis [216.208.73.146]: 404”,
“status”: 403
}
Authorization result: invalid

My web server is (include version): IIS 6.3

The operating system my web server runs on is (include version): Windows Server 2012

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): Yes, admin privileges

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): https://pkisharp.github.io/win-acme/manual/getting-started

Experts - please advise ! Thank you in advance.

[mannny009]

Any insight would be highly appreciated - Experts ?

[Phil]

Hi @mannny009,

Welcome to the community forum!

I assume you’re doing some sort of maintenance because DNS isn’t returning any records for your domain.

$ dig psapp.lcbo.com +short

[mannny009]

This is used only for internal views more like on Intranet.

[Phil]

If that’s the case you should use the dns-01 validation method https://pkisharp.github.io/win-acme/reference/plugins/validation/dns/. Let me know how that goes.