# Help regarding renewing let's encrypt certificate

**URL:** <https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827>\
**Category:** Help\
**Created:** [September 11, 2019, 7:59pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827 "2019-09-11T19:59:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![an139530](https://avatars.discourse-cdn.com/v4/letter/a/a88e57/32.png) [@an139530](https://community.letsencrypt.org/u/an139530)\
**Post date:** [September 11, 2019, 7:59pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/1 "2019-09-11T19:59:14Z")

</div>

Can someone please help me with this issue:  
I got an email stating that my certificate will expire in 10 days

My domain is: [https://veratanlp.centralus.cloudapp.azure.com](https://veratanlp.centralus.cloudapp.azure.com/)

I ran this command: sudo certbot renew

It produced this output:  
All renewal attempts failed. The following certs could not be renewed:  
/etc/letsencrypt/live/veratanlp.centralus.cloudapp.azure.com/fullchain.pem (failure)  
[http://veratanlp.centralus.cloudapp.azure.com/.well-known/acme-challenge/uxIJrkHyhoeFqsxA1vAcNz-dPq4-8JSo7NCqSShCBt8:](http://veratanlp.centralus.cloudapp.azure.com/.well-known/acme-challenge/uxIJrkHyhoeFqsxA1vAcNz-dPq4-8JSo7NCqSShCBt8:)  
Timeout during connect (likely firewall problem)

To fix these errors, please make sure that your domain name was  
entered correctly and the DNS A/AAAA record(s) for that domain  
contain(s) the right IP address. Additionally, please check that  
your computer has a publicly routable IP address and that no  
firewalls are preventing the server from communicating with the  
client. If you’re using the webroot plugin, you should also verify  
that you are serving files from the webroot path you provided.

My web server is (include version): Apache/2.4.29 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 18

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot): certbot 0.28.0

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [September 11, 2019, 9:05pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/2 "2019-09-11T21:05:27Z")

</div>

> [@an139530](#):
>
> Timeout during connect (likely firewall problem)

This is telling you what the problem--the Let's Encrypt servers can't connect to your hostname on port 80. They need to be able to do that.

---

<div class="post-metadata">

**Author:** ![an139530](https://avatars.discourse-cdn.com/v4/letter/a/a88e57/32.png) [@an139530](https://community.letsencrypt.org/u/an139530)\
**Post date:** [September 11, 2019, 9:49pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/3 "2019-09-11T21:49:04Z")

</div>

ok, so what we should do, so that Let’s Encrypt servers can connect to our hostname on port 80.

Like how can we let it happen, can you please give us the clue

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [September 11, 2019, 9:54pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/4 "2019-09-11T21:54:11Z")

</div>

> [@an139530](#):
>
> ok, so what we should do, so that Let’s Encrypt servers can connect to our hostname on port 80.

Fix your servers, fix your router, fix your firewall--the problem is on your end. You've changed something in your network or server configuration since you got the cert, and now the world can't connect. In order to obtain or renew a cert using HTTP validation (which is what you're trying to do), the outside world needs to be able to reach your server--but it can't do so.

---

<div class="post-metadata">

**Author:** ![an139530](https://avatars.discourse-cdn.com/v4/letter/a/a88e57/32.png) [@an139530](https://community.letsencrypt.org/u/an139530)\
**Post date:** [September 18, 2019, 3:55pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/5 "2019-09-18T15:55:13Z")

</div>

ok thanks, we are doing that but just a question to my mind how come Let’s encrypt has been running successfully on our server since Feb 2019 and getting failed now. I also run renew-dry run at that time and it gave no error.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [October 18, 2019, 4:09pm UTC](https://community.letsencrypt.org/t/help-regarding-renewing-lets-encrypt-certificate/101827/6 "2019-10-18T16:09:34Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
