Over the past few days, I have run several test configurations with certbot (using --break-my-certs). Every time, ~2/10 subdomains fails the challenge. Running certbot again then gets succeeds with the remaining subdomains. What's odd is that the subdomains that fail are different every time. I've …

Hard to say. Intermittent SERVFAILs against Google Cloud DNS is not a good sign. On the other hand, we don't have any other user reports. Usually there are, for widespread problems. If Google is maybe rate-limiting the secondary VAs, it might help to actually create a CAA record for each of your …

How to debug intermittent challenge failures?

Help

sahsanu Split this topic January 24, 2021, 9:28am 9

A post was merged into an existing topic: Cannot issue for "riyadh.ye": Domain name is an ICANN TLD

Topic		Replies	Views
Intermittent SERVFAIL looking up CAA Help	51	4540	April 1, 2022
During secondary validation: DNS problem: SERVFAIL looking up A for - the domain's nameservers may be malfunctioning Help	45	9398	November 6, 2020
DNS problem SERVFAIL looking up A for sub.domain.de Help	27	4874	December 30, 2018
Error getting validation data Help	14	321	January 27, 2026
Certbot renew failing to renew my certificates - SERVFAIL looking up A for my site Help	47	2722	November 1, 2020

How to debug intermittent challenge failures?

Related topics