Having issues, Please help!

[loudway]

For Reference:

What should be --webroot path

…

Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA

After entering:

sudo certbot --authenticator webroot --installer nginx

and going through steps I get result:

Waiting for verification...
Cleaning up challenges
Failed authorization procedure. ico.rizzle.io (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ico.rizzle.io/.well-known/acme-challenge/axBIaHmQWAxENv73y8SZBM-AMY16fWGY5iB3iAtt6iw: "

404 Not Found

404 Not Found

---

"

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: ico.rizzle.io
  Type: unauthorized
  Detail: Invalid response from
  http://ico.rizzle.io/.well-known/acme-challenge/axBIaHmQWAxENv73y8SZBM-AMY16fWGY5iB3iAtt6iw:
  "

  404 Not Found

  404 Not Found

  ---

  "

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address.

I am trying to setup 4 domains at the moment on my newly setup server running nginx.

The original errors I received were:

Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.

and,

An unexpected error occurred:
SSLError: ("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",)
Please see the logfiles in /var/log/letsencrypt for more details.

Here are screenshots, awaiting help, thanks in advance.

[loudway]

Here is another screenshot, pt of the terminal command line.

Awaiting help, Thanks in advance!

[_az]

Are you sure that the webroot for ico.rizzle.io is /var/www/rizzle.io/html ?

From what I can tell, it is served from a different webroot path to rizzle.io and www.rizzle.io.

$ curl -s -i rizzle.io/.well-known/ | head -n 1
HTTP/1.1 403 Forbidden

$ curl -s -i ico.rizzle.io/.well-known/ | head -n 1
HTTP/1.1 404 Not Found

Your responses to Certbot indicated that they are served from the same document root, which does not seem accurate.

You will need to provide an accurate response to Certbot when prompted for the webroot path for ico.rizzle.io, otherwise it will not be able to complete the HTTP challenge for that domain.