# Failed validation limit **URL:** \ **Category:** Help\ **Created:** [October 25, 2023, 6:47pm UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288 "2023-10-25T18:47:55Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 25, 2023, 6:47pm UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/1 "2023-10-25T18:47:55Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: mengyboi.xyz I ran this command: sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d \*.mengyboi.xyz -d mengyboi.xyz It produced this output: Saving debug log to /var/log/letsencrypt/letsencrypt.log Requesting a certificate for \*.mengyboi.xyz An unexpected error occurred: There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see [Failed Validation Limit - Let's Encrypt](https://letsencrypt.org/docs/failed-validation-limit/) Ask for help or search for solutions at [https://community.letsencrypt.org](https://community.letsencrypt.org). See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. My web server is (include version): unsure The operating system my web server runs on is (include version): Ubuntu 22.04.3 My hosting provider, if applicable, is: Home Server I can login to a root shell on my machine (yes or no, or I don't know): YES I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): 1.21.0 ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 25, 2023, 7:07pm UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/2 "2023-10-25T19:07:13Z")
> [@JakeyBrs](#): > > sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d \*.mengyboi.xyz -d mengyboi.xyz Try adding `--dry-run` to that command to use the Let's Encrypt staging system. It has more flexible rate limits that the LE production system you are trying to get a cert from. The error says you have made too many faulty requests and so are now blocked from production requests. The link in the error says your limit is 5 failures per hour per name / account Show us the failure from the command with --dry-run. Also, do you plan to use this cert on your own private network? Which is fine if you are. But, the DNS Challenge is often more difficult to automate and if you are going to have a web server accessible on the public internet that might be easier. Or, even using --standalone mode might be easier than DNS Challenge if you have port 80 available to the public internet. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 26, 2023, 1:37am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/3 "2023-10-26T01:37:42Z")
Hi @JakeyBrs, and welcome to the LE community forum 🙂 This may not fix your problem, but you should follow `certbot`'s recommended installation instructions. See: [Certbot (eff.org)](https://certbot.eff.org/) > [@JakeyBrs](#): > > `Certbot 1.21.0` To version `2.7.3` ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:35am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/4 "2023-10-26T03:35:57Z")
> [@JakeyBrs](#): > > sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d \*.mengyboi.xyz -d mengyboi.xyz Tried that, but for some reason it just says no matches found for \*.mengyboi.xyz ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:36am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/5 "2023-10-26T03:36:28Z")
Yes, I did that just now! ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:40am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/6 "2023-10-26T03:40:08Z")
I have a question, do I need to open my port? Because I tried setting up with certbot certonly --nginx and it couldn't reach my domain "vault.mengyboi.xyz" it says time out during connection. ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 26, 2023, 3:41am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/7 "2023-10-26T03:41:57Z")
> [@JakeyBrs](#): > > I have a question, do I need to open my port? Because I tried setting up with certbot certonly --nginx Yes, the --nginx plugin is very different than the DNS Challenge you were trying with your wildcard. Port 80 must be open to receive the HTTP Challenge from the Let's Encrypt server. You should probably review this > **[Challenge Types - Let's Encrypt](https://letsencrypt.org/docs/challenge-types/)** > > When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME... ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:43am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/8 "2023-10-26T03:43:21Z")
Interesting, when I tried with the command it just says DNS records not found or something similar. ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 26, 2023, 3:44am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/9 "2023-10-26T03:44:59Z")
> [@JakeyBrs](#): > > Interesting, when I tried with the command Which command. Please use more words. Your vault subdomain has an A record but your root domain does not, for example. Hard to say what exactly is going wrong if you don't show exactly the errors you get and the command you ran. ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:47am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/10 "2023-10-26T03:47:10Z")
sudo certbot certonly --nginx Saving debug log to /var/log/letsencrypt/letsencrypt.log Please enter the domain name(s) you would like on your certificate (comma and/or space separated) (Enter 'c' to cancel): vault.mengyboi.xyz Requesting a certificate for vault.mengyboi.xyz Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: Domain: vault.mengyboi.xyz Type: connection Detail: 45.201.198.193: Fetching [http://vault.mengyboi.xyz/.well-known/acme-challenge/-idQqRmyA5JT3fn\_o23Xk7c3JM0rOGAP3Xh6JDTWyjg:](http://vault.mengyboi.xyz/.well-known/acme-challenge/-idQqRmyA5JT3fn_o23Xk7c3JM0rOGAP3Xh6JDTWyjg:) Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet. Some challenges have failed. Ask for help or search for solutions at [https://community.letsencrypt.org](https://community.letsencrypt.org). See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 26, 2023, 3:49am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/11 "2023-10-26T03:49:48Z")
The HTTP request to that domain from the Let's Encrypt server failed because of "Timeout during connect" As the error says this is likely a firewall. Are you sure that IP is your public IP? Have you checked your firewalls. Check any router and its NAT forwarding. Try using the Let's Debug site to test as you make changes to your comms and system config. HTTP connections from the public internet must work for the HTTP Challenge to succeed. > **[Test result for vault.mengyboi.xyz: Error](https://letsdebug.net/vault.mengyboi.xyz/1651316)** > > 2 unique issue(s) detected (IssueFromLetsEncrypt, ANotWorking) ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 3:59am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/12 "2023-10-26T03:59:08Z")
Alright! Thank you, I'll look into this and get back with you. ---
**Author:** ![JakeyBrs](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@JakeyBrs](https://community.letsencrypt.org/u/JakeyBrs)\ **Post date:** [October 26, 2023, 4:19am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/13 "2023-10-26T04:19:02Z")
The issue has been fixed, thank you. ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [October 29, 2023, 1:52am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/14 "2023-10-29T01:52:12Z")
> [@JakeyBrs](#): > > mengyboi.xyz I see this as solved, but there are still issues: ![oops](https://global.discourse-cdn.com/letsencrypt/original/3X/0/e/0e5d9752910403b7e9ed9b042484af158746f1ea.png) ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 28, 2023, 1:53am UTC](https://community.letsencrypt.org/t/failed-validation-limit/207288/15 "2023-11-28T01:53:05Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.