# FreePBX Certificate error? **URL:** \ **Category:** Help\ **Created:** [January 31, 2017, 2:42am UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765 "2017-01-31T02:42:20Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![LogicalNZ](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@LogicalNZ](https://community.letsencrypt.org/u/LogicalNZ)\ **Post date:** [January 31, 2017, 2:42am UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/1 "2017-01-31T02:42:20Z")
Please fill out the fields below so we can help you better. My domain is: [lsd.co.nz](http://lsd.co.nz) I ran this command: Requested a certificate from the FreePBX interface It produced this output: There was an error updating the certificate: Please check [http://voip.lsd.co.nz/.well-known/acme-challenge/AuMd\_wfNaAKEKiXaxCiMJiLj62qZTv9\_nQdpQusYcoc](http://voip.lsd.co.nz/.well-known/acme-challenge/AuMd_wfNaAKEKiXaxCiMJiLj62qZTv9_nQdpQusYcoc) - token not available My operating system is (include version): FreePBX Latest Version My web server is (include version): (As per FreePBX - Default) My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don’t know): Yes I’m using a control panel to manage my site (no, or provide the name and version of the control panel): ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [January 31, 2017, 7:28am UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/2 "2017-01-31T07:28:57Z")
Do you have a firewall or anything preventing access to port 80 on [voip.lsd.co.nz](http://voip.lsd.co.nz) ? The error is saying that Let;s Encrypt can’t reach it from the general internet - and neitther can I. ---
**Author:** ![LogicalNZ](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@LogicalNZ](https://community.letsencrypt.org/u/LogicalNZ)\ **Post date:** [January 31, 2017, 6:46pm UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/3 "2017-01-31T18:46:42Z")
Thanks for your response. I have tried both opening port 80 up to the entire outside world and locking it down to the suggested domains with the same issue. ([outbound1.letsencrypt.org](http://outbound1.letsencrypt.org), [outbound2.letsencrypt.org](http://outbound2.letsencrypt.org), [mirror1.freepbx.org](http://mirror1.freepbx.org), [mirror2.freepbx.org](http://mirror2.freepbx.org)) I did think that could be the issue, but after further testing I can point a web browser to: [http://voip.lsd.co.nz/.well-known/acme-challenge/jpg-6wetKa6uqJAnhkQnuIBk73y2pdDSSOGRVQlWoP4](http://voip.lsd.co.nz/.well-known/acme-challenge/jpg-6wetKa6uqJAnhkQnuIBk73y2pdDSSOGRVQlWoP4) When I point a web browser at the above I get a response of: jpg-6wetKa6uqJAnhkQnuIBk73y2pdDSSOGRVQlWoP4.a5VKTEJqRFYoQW\_4jj2T8rIWWsFc1uKCHeXXXXXXXXX (I have added the XXXXXX’s) on the end. ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [January 31, 2017, 7:57pm UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/4 "2017-01-31T19:57:46Z")
I still can’t reach it. Let’s Encrypt can check from any IP address, so it needs to be available to all. If you don’t want to open up port 80, then you would probably be best using the DNS challenge. ---
**Author:** ![LogicalNZ](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@LogicalNZ](https://community.letsencrypt.org/u/LogicalNZ)\ **Post date:** [January 31, 2017, 8:11pm UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/5 "2017-01-31T20:11:13Z")
its only open to: [outbound1.letsencrypt.org](http://outbound1.letsencrypt.org), [outbound2.letsencrypt.org](http://outbound2.letsencrypt.org), [mirror1.freepbx.org](http://mirror1.freepbx.org), [mirror2.freepbx.org](http://mirror2.freepbx.org) I’m happy to add your IP address if you want to test? ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [January 31, 2017, 8:18pm UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/6 "2017-01-31T20:18:48Z")
The longer term plan is that Let’s Encrypt could validate over TOR, so could be any random IP address. I’m not sure what IP it will be trying to validate your site from, but it could easily be outside your limited list. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [March 2, 2017, 8:22pm UTC](https://community.letsencrypt.org/t/freepbx-certificate-error/26765/7 "2017-03-02T20:22:49Z")
Closed on March 2, 2017, 8:22pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.