How can I renew my cert in one domain

Only this domain fail, and I probe with https://letsdebug.net/ and for this page all it’s all right.

My domain is: mail.ocuellar.com.mx

I ran this command: certbot renew

It produced this output:
Processing /etc/letsencrypt/renewal/mail.ocuellar.com.mx.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for mail.ocuellar.com.mx
Using the webroot path /var/www/htdocs/ocuellar for all unmatched domains.
Waiting for verification…
Challenge failed for domain mail.ocuellar.com.mx
http-01 challenge for mail.ocuellar.com.mx
Cleaning up challenges
Attempting to renew cert (mail.ocuellar.com.mx) from /etc/letsencrypt/renewal/mail.ocuellar.com.mx.conf produced an unexpected error: Some challenges have failed… Skipping.
Cert not yet due for renewal
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/mail.ocuellar.com.mx/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: mail.ocuellar.com.mx
    Type: unauthorized
    Detail: Invalid response from
    http://mail.ocuellar.com.mx/.well-known/acme-challenge/0B62nfPxlQR2LnGSMCnSuRIemnmr5jCaXyjKgpsgTMY
    [155.138.218.245]: “\n\n\n<meta
    http-equiv=“Content-Type” content=“text/html;
    charset=utf-8”/>\n404 Not Found\n”

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address.

My web server is (include version):

The operating system my web server runs on is (include version):
Operating System: OpenBSD 6.7 my web server runs on is OpenHttpd

My hosting provider, if applicable, is: vultr.com

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 1.3.0

Is /var/www/htdocs/ocuellar the correct webroot for mail.ocuellar.com.mx?

It seems to me that ocuellar.com.mx and mail.ocuellar.com.mx are served from different directories.

You may need to change the webroot in order for renewal to succeed:

certbot renew --cert-name mail.ocuellar.com.mx --webroot -w /path/to/real/webroot

Thank you very much. It worked!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.