Getting a New Cert but Unable to validate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

ISSUE: I went thru forums to make sure my 80 and 443 was open on NAS and ROUTER. Certificate wont create.

My domain is: mcpserver.com

I ran this command: New Certificate

It produced this output: see photo attached

My web server is (include version): None

The operating system my web server runs on is (include version): Mac OS

My hosting provider, if applicable, is: Synology

I can login to a root shell on my machine (yes or no, or I don't know): NO

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): SRM

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Welcome @kimbakat

You don't have a working HTTP site. You should review your port settings again.

The Let's Debug site (link here) is helpful when setting up new server. It shows connections from the public internet cannot reach your domain using http://. To me, both those ports look like they are blocked on your end possibly by a firewall.

4 Likes

Where is the attached photo?

Also here are community forums for Synology that may be of assistance as well:

  1. https://community.synology.com/enu
  2. https://www.synoforum.com/
  3. https://synocommunity.com/

And there are no open ports shown with nmap from my location

$ nmap -Pn mcpserver.com
Starting Nmap 7.80 ( https://nmap.org ) at 2022-12-20 19:01 UTC
Nmap scan report for mcpserver.com (96.240.100.191)
Host is up.
rDNS record for 96.240.100.191: pool-96-240-100-191.nwrknj.fios.verizon.net
All 1000 scanned ports on mcpserver.com (96.240.100.191) are filtered

Nmap done: 1 IP address (1 host up) scanned in 201.72 seconds

With this online tool https://www.ipvoid.com/port-scan/ and an input of 96.240.100.191 with Scan all common ports, the Status of all those Ports is Filtered.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.